Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/UGP5Sx4UXC1UUif5PMxtH1Uam4c.roa
File: UGP5Sx4UXC1UUif5PMxtH1Uam4c.roa (raw, json)
Hash identifier: ZrjOQCTjibRdefn62b+GwQRn64j00XO6olITmdoRLxg=
Subject key identifier: 50:63:F9:4B:1E:14:5C:2D:54:52:27:F9:3C:CC:6D:1F:55:1A:9B:87
Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial: 1B8300DD
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/UGP5Sx4UXC1UUif5PMxtH1Uam4c.roa
Signing time: Sat 01 Jan 2022 15:02:29 +0000
ROA not before: Sat 01 Jan 2022 15:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44525
IP address blocks: 212.45.71.0/24 maxlen: 24
212.45.70.0/24 maxlen: 24
212.45.68.0/22 maxlen: 22
212.45.69.0/24 maxlen: 24
212.45.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461570269 (0x1b8300dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Validity
Not Before: Jan 1 15:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5063f94b1e145c2d545227f93ccc6d1f551a9b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:3c:1c:97:55:e8:c6:67:47:91:d9:ee:c8:
a4:c1:6a:fe:8a:07:22:33:29:1b:f7:7b:40:a9:3d:
a6:6d:96:7b:e2:6d:26:ec:6f:e2:be:eb:53:95:94:
19:65:fa:12:ef:95:fb:e7:6e:84:8d:96:e1:da:dd:
65:d1:f5:7a:3c:31:c1:67:9f:e9:7f:4b:b7:fe:14:
25:b8:b9:d6:f0:6b:88:6f:ee:26:46:fc:40:12:a9:
4b:91:57:04:c0:59:bb:72:09:ff:3e:67:10:c7:0c:
9b:d1:7f:7a:bd:ac:0b:b4:29:29:05:31:b0:25:a6:
a5:52:97:b2:04:f9:10:72:2a:8e:a9:35:ce:b9:ff:
86:4d:f0:1d:44:5d:1c:51:a6:1c:b6:e7:dc:8d:53:
06:1b:da:d8:d8:a7:7c:a4:51:c6:a4:4e:6f:63:80:
08:62:f7:d0:6c:e8:2f:ae:b7:ef:c1:f5:49:0a:b4:
64:28:b6:38:d4:fa:b6:f6:06:62:bb:f7:f4:a8:2a:
52:14:92:a4:ce:8f:bd:71:7c:d6:03:23:9e:8b:ac:
97:ce:fa:de:29:19:2f:23:88:9e:a9:2a:0d:27:00:
d1:3e:cc:5c:ac:10:3a:c1:bf:33:2a:a2:2c:fa:eb:
1c:13:84:27:85:ae:5e:3d:e4:92:56:8f:52:79:15:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:F9:4B:1E:14:5C:2D:54:52:27:F9:3C:CC:6D:1F:55:1A:9B:87
X509v3 Authority Key Identifier:
keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/UGP5Sx4UXC1UUif5PMxtH1Uam4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
16:72:f1:73:23:0a:bc:81:11:2b:bf:8d:0c:c6:49:54:f2:d5:
dc:4a:4f:dd:22:50:c4:04:03:25:f1:df:50:8b:d9:52:70:85:
b5:b3:90:19:4d:b6:96:a1:cf:29:d0:f2:2c:93:77:29:d9:be:
0b:db:a6:f7:b1:b6:44:ff:b0:1e:1b:1a:a0:0f:f1:b7:75:01:
25:91:b7:53:b4:29:86:a9:08:75:83:ba:7c:b2:6c:09:c0:7b:
42:f8:e3:98:af:74:f4:97:27:fe:0e:82:01:f5:52:a2:fa:75:
bb:a2:3d:e6:0f:f7:61:4a:0f:68:15:06:a3:7c:d1:89:db:2a:
7c:03:b1:40:7f:c9:8f:71:de:4d:82:26:47:b3:77:66:09:a2:
c5:ad:59:b0:0e:ad:1c:be:79:5f:18:1e:d8:d0:7b:19:83:81:
46:b3:93:43:d7:70:92:04:3c:05:02:56:10:1a:dc:39:5a:15:
d2:84:d7:01:be:82:26:5a:26:6d:0b:ca:88:18:8d:65:66:0a:
d9:1a:af:cc:96:4f:15:3c:08:2f:66:58:cd:e6:50:7e:92:95:
78:0f:66:2a:1f:a6:28:00:66:e9:8e:83:e9:81:38:13:92:35:
8c:68:06:70:84:b2:da:b5:04:11:a1:26:f7:8e:63:76:6a:2c:
c8:12:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:24 2025 by rpki-client