Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/UW-fYg1O3usc1LlHb0Py2k17ums.roa
File: UW-fYg1O3usc1LlHb0Py2k17ums.roa (raw, json)
Hash identifier: O6JNplrEilBbhlJ7A7HgMQhwC/DjFwZcKglsUP08QM0=
Subject key identifier: 51:6F:9F:62:0D:4E:DE:EB:1C:D4:B9:47:6F:43:F2:DA:4D:7B:BA:6B
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 13C7414C
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/UW-fYg1O3usc1LlHb0Py2k17ums.roa
Signing time: Sat 01 Jan 2022 00:54:47 +0000
ROA not before: Sat 01 Jan 2022 00:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25581
IP address blocks: 91.224.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331825484 (0x13c7414c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jan 1 00:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=516f9f620d4edeeb1cd4b9476f43f2da4d7bba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:a3:ca:1a:b3:e9:50:47:b2:8f:8a:96:02:
20:af:e9:05:64:47:c4:e2:63:ba:53:1a:2d:04:2f:
6a:63:91:12:88:27:dd:58:f8:2c:ab:f3:65:08:d8:
44:42:a4:2e:f1:15:47:74:02:08:4c:9b:30:a1:21:
58:c2:c3:d9:83:f0:e0:53:04:ab:f5:44:58:c5:1a:
0d:ab:3a:1b:c0:68:c7:87:ba:cb:b0:1c:56:61:b7:
0d:b4:48:23:5f:c2:51:a2:af:cd:54:cc:d2:a5:4a:
55:e6:e9:a5:73:0c:87:ee:5d:12:27:a4:ea:80:28:
5d:b7:17:2e:18:10:5d:16:a5:c5:f4:bb:ec:98:b2:
38:a9:6d:a5:b8:77:23:b8:1e:0c:1a:52:41:e9:01:
69:25:4b:c2:7a:ce:d7:86:f2:0a:bb:b8:aa:83:86:
f0:8a:ef:71:54:66:3b:72:cf:1d:f9:1d:23:db:62:
21:6e:96:0d:78:10:00:2b:94:cb:c1:81:ad:34:4f:
28:ec:42:96:74:32:0f:88:7b:58:f6:81:29:97:5a:
45:22:0f:f7:cc:01:d3:80:3b:29:fe:76:22:70:17:
2b:75:54:d2:16:e8:4b:c3:d3:61:24:d2:a9:c3:ae:
86:42:51:f3:7d:df:07:d9:fd:92:bd:27:13:49:96:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:9F:62:0D:4E:DE:EB:1C:D4:B9:47:6F:43:F2:DA:4D:7B:BA:6B
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/UW-fYg1O3usc1LlHb0Py2k17ums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.94.0/23
Signature Algorithm: sha256WithRSAEncryption
74:f8:6c:57:94:b7:f1:10:d7:b9:1a:de:f0:43:43:a6:c9:e7:
b1:07:4c:f7:4b:b8:06:64:50:88:76:95:c7:f9:bf:25:28:82:
2e:35:11:84:0b:3c:c2:96:5e:6a:b4:75:f7:13:4e:80:47:b0:
d2:e3:02:3a:62:67:fd:7b:ca:07:13:a2:0f:76:85:15:01:8a:
51:8e:c0:93:87:6e:bb:6a:81:f7:75:56:f9:5a:9e:ba:86:4e:
24:b1:a0:95:2c:0d:17:c6:21:a8:e2:e9:4c:91:ff:a8:2c:7b:
72:40:7e:e6:a3:08:64:30:f7:08:6b:48:cb:ef:38:d6:38:e8:
57:ca:0a:84:3d:d7:6a:c2:9a:47:f3:e9:5d:11:93:56:67:da:
f4:60:d0:5b:7b:2c:bd:bf:a0:31:f0:a3:ee:2e:01:a5:cd:6d:
c6:3d:67:d6:d0:9c:09:b7:cb:bf:a2:b3:ef:0c:6d:bf:b6:63:
80:8c:96:67:37:33:be:78:4b:06:4b:c8:59:e9:05:01:ec:09:
f0:4a:a7:8c:fb:b2:59:4b:9a:12:72:a6:49:f8:24:f4:0c:20:
db:97:18:86:79:f8:ab:c5:39:c2:92:8e:5e:0b:d0:42:fc:46:
43:ac:55:cb:e9:01:b2:b7:85:9d:27:c0:e7:27:13:56:0e:a8:
09:08:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:39 2025 by rpki-client