Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/UNIwOfdlt4x_8kiABOO_anmXRCk.roa
File: UNIwOfdlt4x_8kiABOO_anmXRCk.roa (raw, json)
Hash identifier: 8bkW2o4xyP3s8tPzvJqDziMor/UvniC566184v7pQ+o=
Subject key identifier: 50:D2:30:39:F7:65:B7:8C:7F:F2:48:80:04:E3:BF:6A:79:97:44:29
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 018B27F873D58FA474195D145FA9CC9C38CD
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/UNIwOfdlt4x_8kiABOO_anmXRCk.roa
Signing time: Fri 13 Oct 2023 07:37:55 +0000
ROA not before: Fri 13 Oct 2023 07:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 130.115.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:f8:73:d5:8f:a4:74:19:5d:14:5f:a9:cc:9c:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Oct 13 07:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d23039f765b78c7ff2488004e3bf6a79974429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:7b:cd:bd:69:c7:49:8a:02:7b:2d:ff:05:
96:58:55:66:0f:31:4a:a9:56:13:d7:ee:22:37:e1:
bf:49:ca:0d:ca:c3:6b:ae:a7:31:e7:17:c8:39:ba:
22:44:d5:df:55:e4:28:e1:9d:f0:1f:8b:96:b3:30:
07:72:1e:79:14:b5:49:43:b1:65:30:e6:6a:5a:b7:
f1:72:cf:26:0f:d4:bc:22:f7:f2:90:12:8b:bc:bd:
48:d0:18:ae:0e:8d:62:c8:36:d8:ad:29:4f:84:8a:
46:55:c2:18:4f:29:c6:f9:75:b5:25:f4:f8:22:85:
30:bf:0f:60:89:31:74:ad:3b:6b:bf:6f:6c:99:0c:
42:6c:a8:58:c2:4c:95:13:47:26:e6:34:be:e0:15:
26:f6:85:ab:69:7b:f9:68:43:04:62:b6:82:f2:f8:
f9:68:2a:20:9c:01:2f:1b:9a:68:af:a2:f9:58:14:
a1:2f:49:59:96:c2:40:71:c4:3b:21:94:85:8e:a9:
95:ff:7f:58:e3:0c:07:e4:ca:ab:30:ba:8f:c2:7a:
07:29:7c:d6:10:8c:d9:bc:64:3a:62:b8:be:64:7d:
e1:f3:f4:90:3a:04:59:ee:90:7a:9d:17:5b:55:58:
34:c6:99:09:d2:e7:15:81:91:c2:72:8d:0f:1a:f3:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:30:39:F7:65:B7:8C:7F:F2:48:80:04:E3:BF:6A:79:97:44:29
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/UNIwOfdlt4x_8kiABOO_anmXRCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:28:01:b3:b3:9e:a4:92:fc:3e:7c:0d:c2:bb:fb:7c:37:af:
27:95:7e:0f:2b:07:db:d2:85:0e:d6:3f:df:d0:c2:39:99:8e:
a2:bd:9d:2d:61:f1:80:a4:bd:6c:b4:01:2a:fa:ea:12:e4:c3:
db:67:31:66:a4:3a:b3:1c:63:41:57:84:46:2e:ba:fa:64:d5:
9b:cc:1c:6e:dc:f3:fa:9f:43:77:56:8e:66:eb:f3:da:16:28:
c5:0f:c6:b3:37:16:32:8b:55:12:57:c0:d0:32:7f:6f:dc:40:
30:60:4c:65:81:df:0c:51:3e:47:fa:ac:ca:aa:9b:7b:68:84:
9b:c0:13:c8:4d:7f:fd:99:be:aa:29:7a:33:9d:c8:80:e7:c2:
9d:eb:82:c0:6e:f4:8b:99:a1:5b:63:c4:22:1c:4c:7b:df:d0:
86:c2:9c:f3:d9:c2:4e:35:a4:25:1b:e1:a4:2f:65:d3:cd:80:
40:23:f4:ae:94:62:e2:19:e4:bb:9e:8e:11:6d:3d:6d:75:23:
e2:07:3c:8f:a2:d8:db:6f:84:1c:8b:e7:7a:4c:aa:f4:29:53:
62:dc:1f:bc:10:d1:0f:07:83:61:7c:af:10:eb:44:c8:03:05:
c9:d7:cf:95:73:6d:6f:ed:26:c2:06:d4:9d:4c:d9:75:52:d6:
e3:d4:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:13 2025 by rpki-client