Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/UMkJxuk4FfW5QkL9FNfdiW891O4.roa
File: UMkJxuk4FfW5QkL9FNfdiW891O4.roa (raw, json)
Hash identifier: PIdDHKtO1mk592aaUKi9wlGxXosJY1AQvbAqVNayZIM=
Subject key identifier: 50:C9:09:C6:E9:38:15:F5:B9:42:42:FD:14:D7:DD:89:6F:3D:D4:EE
Certificate issuer: /CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Certificate serial: 08C79E54
Authority key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/UMkJxuk4FfW5QkL9FNfdiW891O4.roa
Signing time: Sat 01 Jan 2022 15:02:58 +0000
ROA not before: Sat 01 Jan 2022 15:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 185.218.36.0/22 maxlen: 24
2a0b:d240::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147299924 (0x8c79e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Validity
Not Before: Jan 1 15:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50c909c6e93815f5b94242fd14d7dd896f3dd4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:7a:43:4b:e3:bb:71:5e:db:5a:e3:b5:9c:
9b:cb:22:11:1f:b3:37:3a:4a:e6:85:56:4e:64:ab:
79:ba:c8:65:84:29:42:e2:f3:4c:ba:0e:c1:e6:e4:
81:18:f9:91:b3:12:be:7d:b2:fc:a2:3f:d7:bb:fa:
23:83:36:54:3d:f0:d9:bd:19:d9:5c:60:f0:74:87:
52:50:98:44:1e:75:9b:ed:fa:05:eb:b6:75:51:07:
fa:2d:45:31:56:6c:ef:80:ef:ec:20:f4:1c:48:b9:
f4:0a:35:07:70:f9:d9:ee:e2:f3:9e:cf:db:b3:fb:
6c:25:48:04:3d:70:74:0a:4e:e3:c7:ce:c8:10:15:
42:d3:08:6f:0a:d7:cc:1a:68:84:36:39:fd:32:15:
76:06:ca:6a:f5:ec:94:d3:97:30:2e:72:66:cc:61:
8a:b5:5e:fe:a1:aa:70:e9:be:02:ae:17:63:01:02:
f1:01:42:27:74:09:1b:60:d6:aa:67:a7:3b:0c:ca:
f3:9c:f8:d3:46:da:24:6c:30:82:8e:59:f7:c4:f7:
2b:9e:3e:40:30:5b:2a:73:eb:7f:40:12:20:f5:21:
84:3b:0d:8e:6d:03:9f:5f:a3:44:0c:f4:44:7d:66:
cf:1e:ad:47:c6:6b:13:89:2e:3d:79:21:3f:18:1c:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:09:C6:E9:38:15:F5:B9:42:42:FD:14:D7:DD:89:6F:3D:D4:EE
X509v3 Authority Key Identifier:
keyid:6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/UMkJxuk4FfW5QkL9FNfdiW891O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.36.0/22
IPv6:
2a0b:d240::/32
Signature Algorithm: sha256WithRSAEncryption
86:15:21:ae:75:dc:b6:31:9c:c6:5b:73:9c:b8:02:95:ee:d1:
35:0a:db:0d:b3:df:7b:5c:5b:5d:f3:16:84:1c:e2:e6:f6:b0:
7a:90:28:af:63:04:65:13:53:ec:9d:2a:a3:79:5c:ad:ea:48:
b0:e3:f6:5b:90:c0:e6:0e:ab:b5:4a:9a:92:13:5a:f9:1f:61:
7a:95:96:ab:83:71:6d:5b:29:10:3e:5a:0e:3f:c4:d7:34:41:
56:60:fc:64:a9:0e:57:95:4a:26:37:44:97:19:9d:dd:0c:9b:
84:e5:ed:fc:74:43:0a:9b:30:41:00:8f:06:6e:8e:c9:b8:13:
15:d3:c7:25:94:e8:4e:db:c6:57:9f:bf:33:ee:90:49:e9:6f:
76:39:4e:61:6e:99:0e:a8:a4:f9:32:93:cf:31:ca:d4:ac:30:
39:01:89:40:f5:fc:30:4b:3a:36:e5:38:41:be:b8:c0:76:99:
de:c2:cd:96:97:ff:4f:e7:9c:8b:7b:67:a7:44:15:56:7e:e7:
7d:4f:6a:10:fb:a5:6f:dc:85:4e:91:9e:02:bb:75:5a:87:46:
65:c6:bf:40:6a:e2:53:b8:2f:fc:4d:7e:75:81:cf:35:5f:53:
0c:15:fe:cb:53:5f:64:84:e5:c5:f7:65:1a:a2:83:66:3e:c3:
04:45:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:26:36 2025 by rpki-client