Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/UUpExN7B7xxCNbaJgsMjBcvSS5c.roa
File: UUpExN7B7xxCNbaJgsMjBcvSS5c.roa (raw, json)
Hash identifier: fm6OpROLHRj899hNFUZjBHGXxJQLTrobpPgV27ixjk8=
Subject key identifier: 51:4A:44:C4:DE:C1:EF:1C:42:35:B6:89:82:C3:23:05:CB:D2:4B:97
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01856DAF4DCBC23A066473F4475FD189488F
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/UUpExN7B7xxCNbaJgsMjBcvSS5c.roa
Signing time: Sun 01 Jan 2023 14:14:43 +0000
ROA not before: Sun 01 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207442
IP address blocks: 94.231.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:4d:cb:c2:3a:06:64:73:f4:47:5f:d1:89:48:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 1 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=514a44c4dec1ef1c4235b68982c32305cbd24b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:f6:1f:e6:96:d4:6f:b7:c1:8f:bf:f7:cd:
6f:de:c2:b8:64:d2:ce:fe:38:0d:bf:f0:fe:22:11:
2d:5f:87:0f:6c:31:0d:c2:08:75:52:1c:79:28:10:
7f:d8:ab:ea:fc:c0:31:63:ff:b8:8f:05:9f:c4:68:
8f:dd:ea:88:9b:a5:82:2c:62:3a:9e:b3:b7:f7:00:
86:d0:b7:e0:40:b6:d3:b9:06:71:cb:14:aa:5c:18:
89:35:c8:2b:06:4f:77:05:72:eb:55:5b:56:12:80:
fc:f1:13:12:cf:ad:ec:ce:af:2d:11:a2:ed:45:5b:
8a:5d:82:e2:29:4d:b9:46:62:fc:db:7b:96:c5:6e:
26:e9:3c:05:50:ad:93:8b:aa:b0:f4:bc:0b:05:c7:
48:9a:5f:4f:14:25:e5:22:2e:c4:fb:3b:66:fb:6c:
be:95:b7:e5:dd:c4:68:8d:f1:94:ca:2a:04:40:90:
df:0c:a3:8a:61:29:2f:df:dc:3b:a0:e9:14:77:8b:
8d:da:11:25:b7:cd:38:e1:fc:75:40:c9:ef:e9:8a:
98:d2:83:6b:f9:70:a4:4f:77:27:2f:58:ee:1e:8d:
86:74:14:c1:c9:71:be:6d:d1:07:90:b0:0c:cf:d6:
5e:82:93:0b:db:93:24:23:87:49:7c:fe:13:ac:8b:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:44:C4:DE:C1:EF:1C:42:35:B6:89:82:C3:23:05:CB:D2:4B:97
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/UUpExN7B7xxCNbaJgsMjBcvSS5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f0:d8:0c:c9:11:83:d7:60:ed:00:ae:a7:b3:4b:95:ee:50:
39:a6:39:e4:d9:52:71:d6:54:78:c5:97:8e:4e:63:93:af:9a:
6c:8f:e4:05:9e:77:61:cd:dc:63:66:56:a4:07:e5:14:9d:bb:
bd:73:31:b3:85:a1:b5:da:c3:5f:02:f2:fd:d8:f1:1d:7e:6e:
7b:ae:b0:47:94:5c:5b:d2:27:cf:a4:79:47:5d:25:0c:0a:27:
b1:76:eb:3d:b5:81:a3:ff:6f:28:bc:b2:ed:6d:e4:43:fd:c1:
16:95:b7:eb:7a:21:aa:8e:36:cf:98:53:61:34:88:52:be:90:
78:ff:65:cc:85:02:0b:30:36:39:4f:2b:8b:4b:16:c5:83:b5:
22:54:70:c8:b3:4e:dd:94:e5:96:b8:17:ec:55:fe:d6:30:e2:
11:e7:90:06:c7:96:14:77:18:33:30:0d:5e:07:2a:5a:18:76:
90:d9:fb:93:6c:69:eb:93:e0:e5:ad:65:08:19:17:61:39:6c:
b2:68:01:24:8c:67:1f:0d:42:66:f6:2d:98:fb:bb:16:46:fb:
98:02:b4:f5:20:11:79:f3:97:50:29:ce:a2:ac:fc:7a:96:ea:
9b:34:3e:25:f3:65:71:c8:a6:6d:7a:0a:07:b2:d1:c5:49:2a:
7f:23:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:34 2025 by rpki-client