Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/UEi9f1Cs-Ddgi27sVDVwK8soB3U.roa
File: UEi9f1Cs-Ddgi27sVDVwK8soB3U.roa (raw, json)
Hash identifier: 0flCacGChqQrhhnBJDE7qVDQmKpM4JwEesDxs3PT5sY=
Subject key identifier: 50:48:BD:7F:50:AC:F8:37:60:8B:6E:EC:54:35:70:2B:CB:28:07:75
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 2D9CD428
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/UEi9f1Cs-Ddgi27sVDVwK8soB3U.roa
Signing time: Sat 01 Jan 2022 04:59:21 +0000
ROA not before: Sat 01 Jan 2022 04:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49490
IP address blocks: 194.145.64.0/19 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765252648 (0x2d9cd428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 04:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5048bd7f50acf837608b6eec5435702bcb280775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:ef:ed:d7:e4:41:3d:79:65:c8:cd:a4:23:
72:19:a9:29:f6:74:bc:76:2c:ac:57:38:5a:a1:1e:
b8:d4:45:6d:87:7b:97:84:10:81:56:65:bb:8a:11:
1d:57:b5:c0:c4:ff:15:ab:42:c4:bd:6a:28:f4:25:
92:83:89:ef:95:1d:79:a5:94:33:7f:7b:bf:75:d2:
d2:a0:a7:31:49:c5:47:6f:ea:e9:bd:6b:e6:68:a7:
3a:25:d0:e4:5d:35:1d:0c:75:18:15:fe:04:a9:fa:
29:43:1b:0a:75:2b:7b:fe:b5:67:89:11:af:db:27:
a7:25:a4:cb:fe:cb:47:31:75:33:7d:15:d2:d4:40:
b0:8e:96:05:00:64:fd:64:33:4b:63:d4:a6:13:5c:
00:09:3e:41:30:8b:b6:06:79:54:c0:8a:28:f6:76:
8c:78:3d:47:3c:da:8c:39:91:6d:40:b9:30:78:b3:
76:3a:29:8e:e9:25:7f:be:1e:f3:91:c0:ff:b5:65:
fc:89:63:f5:ed:6e:4e:96:68:22:3b:1c:68:93:81:
00:b7:1c:39:79:b1:3b:28:83:8b:7c:e6:ee:76:45:
e6:f2:6a:56:4d:52:f0:e8:5d:a6:7a:20:e3:16:32:
27:10:7d:e7:c5:18:c5:2d:8e:bb:86:ec:fd:0a:a3:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:BD:7F:50:AC:F8:37:60:8B:6E:EC:54:35:70:2B:CB:28:07:75
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/UEi9f1Cs-Ddgi27sVDVwK8soB3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:00:67:c2:e8:01:aa:b1:7e:af:48:35:a2:6c:55:ea:91:45:
69:fa:31:80:a4:5a:20:f5:e0:38:c9:3a:ac:b0:99:62:07:84:
18:7c:f8:26:6c:93:6e:99:ae:79:fb:d0:ba:7a:8b:48:2b:3b:
1a:d1:7c:f7:3e:22:78:75:a9:82:e7:12:19:ae:4b:55:91:56:
ac:22:53:8d:a1:3f:99:cb:88:b2:0e:0a:44:61:b7:e3:3b:1e:
d4:73:65:24:de:65:2e:3b:27:11:5a:dc:03:45:b6:36:c7:5b:
77:16:c7:07:b3:d2:48:90:25:fc:93:e9:73:0d:a3:c7:7a:44:
5b:d2:bb:91:2e:f9:46:ab:7e:45:21:b5:18:06:f5:fe:99:ae:
1f:42:10:bb:9d:e8:32:19:eb:31:e5:2d:8a:0a:06:54:20:7a:
41:7e:fa:c9:82:28:ad:97:f3:b0:02:8b:b1:ba:4c:41:20:13:
2d:bd:d0:86:e9:05:14:4c:14:60:37:82:b2:79:ea:5f:f6:3a:
61:f0:f3:d6:b2:ae:cc:f3:0c:02:bf:6b:53:6c:17:aa:71:35:
73:92:8b:b1:bb:05:ef:98:5f:01:41:a1:8e:1f:5d:6b:b1:d0:
e6:3d:e7:f2:5d:74:3a:d9:84:d1:04:62:e8:9f:83:a1:25:1c:
b1:8c:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:46 2025 by rpki-client