Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/UJDrhfJkN_sz8WfxbSfzUsDAGLE.roa
File: UJDrhfJkN_sz8WfxbSfzUsDAGLE.roa (raw, json)
Hash identifier: 7oPPP889TR/FBZfBgo8Upbx40IJzUJHVfqjcbp6MnVM=
Subject key identifier: 50:90:EB:85:F2:64:37:FB:33:F1:67:F1:6D:27:F3:52:C0:C0:18:B1
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 091CE2A0
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/UJDrhfJkN_sz8WfxbSfzUsDAGLE.roa
Signing time: Sat 01 Jan 2022 08:53:33 +0000
ROA not before: Sat 01 Jan 2022 08:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48918
IP address blocks: 91.237.117.0/24 maxlen: 24
2001:67c:28e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152887968 (0x91ce2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Jan 1 08:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5090eb85f26437fb33f167f16d27f352c0c018b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:4b:fd:42:d7:77:67:cd:9b:95:f6:18:7f:
2d:63:9c:fd:d1:d3:06:f5:eb:a9:9a:6e:56:ca:31:
c2:05:3a:dc:a7:f8:f5:02:28:87:77:fa:4a:06:59:
b2:a3:b9:62:d4:91:b6:dd:95:9a:c7:50:d4:7e:d7:
72:3c:bd:35:cd:5a:66:66:a4:b5:c3:ba:b5:0f:08:
30:0d:98:fc:b9:04:10:6e:fa:1e:27:a6:6f:45:9c:
70:da:41:b4:e7:5e:6e:3e:87:b6:74:d9:27:85:0c:
91:9e:11:8d:54:e0:2d:f2:c5:ab:d9:ed:f2:8e:48:
40:33:2f:c5:40:a6:2b:b7:e1:0a:ac:3b:87:71:39:
50:19:6b:b6:5e:67:19:d6:5f:a3:16:d4:31:53:52:
df:26:8a:6c:3a:9b:28:20:59:ad:69:f8:9e:39:c2:
16:21:ce:63:3f:8c:37:3e:e7:07:c1:e3:3a:e9:94:
af:fb:b2:73:be:74:cf:b4:18:d2:a8:e3:e6:81:14:
d1:a7:2a:b2:3a:81:94:3d:bb:3e:65:96:ea:62:73:
0a:2c:52:25:17:4b:ad:b2:c8:82:b8:eb:e8:a5:6e:
14:6a:18:75:a0:10:40:89:f5:b9:7d:ca:5a:45:c7:
66:fb:ce:51:1f:67:bc:fe:82:fa:5d:33:97:c9:ae:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:EB:85:F2:64:37:FB:33:F1:67:F1:6D:27:F3:52:C0:C0:18:B1
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/UJDrhfJkN_sz8WfxbSfzUsDAGLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.117.0/24
IPv6:
2001:67c:28e0::/48
Signature Algorithm: sha256WithRSAEncryption
72:b4:02:aa:62:c9:92:0a:4a:e1:e3:18:bb:93:48:bd:88:00:
14:16:72:f3:59:69:ae:75:d4:bd:54:8e:fe:3c:38:82:87:9a:
f2:a2:49:71:b3:77:c4:97:76:f2:f5:4e:6f:8b:2d:42:e5:3d:
c9:9a:06:b6:39:11:e5:64:a8:61:5e:b3:fa:4c:42:24:94:ed:
3f:dd:97:e6:ee:74:50:5b:7f:2b:6e:86:1b:db:eb:e3:52:d9:
eb:32:7d:b5:e5:12:7d:85:27:4e:45:0f:3d:cf:34:f8:2b:c8:
53:b7:95:cf:32:7c:2b:91:7d:30:23:af:e2:c1:75:18:48:48:
f2:67:2f:fe:ab:69:e6:f0:80:a0:a9:4d:3c:88:6b:35:a8:0e:
b0:79:c9:ea:c0:7d:37:52:1e:96:7d:95:dc:cd:71:31:48:f7:
c9:e3:62:ab:5c:77:32:4d:92:3e:83:fd:64:96:bc:24:57:c8:
2a:64:42:5d:06:70:96:31:8a:ec:61:78:7c:95:65:46:19:53:
13:ec:09:6f:a6:e9:56:d1:30:21:de:3c:b1:c5:ca:94:b4:fe:
89:16:a4:12:db:10:1d:17:40:20:01:4a:f8:e2:d4:cc:df:41:
fa:18:7c:5c:43:10:c9:ce:a7:4a:bc:80:16:6d:40:bb:e5:73:
a3:24:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:30 2025 by rpki-client