Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/UFCxqzTLIuvInDz2kXuCjW4pLHw.roa
File: UFCxqzTLIuvInDz2kXuCjW4pLHw.roa (raw, json)
Hash identifier: JTsTDSJo6BaAiJq1n03SaNh6I/vpSsX/pG4DwTO4UvQ=
Subject key identifier: 50:50:B1:AB:34:CB:22:EB:C8:9C:3C:F6:91:7B:82:8D:6E:29:2C:7C
Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135
Certificate serial: 01887179DD024A22023320EFC22512E50BE4
Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/UFCxqzTLIuvInDz2kXuCjW4pLHw.roa
Signing time: Wed 31 May 2023 11:03:11 +0000
ROA not before: Wed 31 May 2023 11:03:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201150
IP address blocks: 185.101.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:79:dd:02:4a:22:02:33:20:ef:c2:25:12:e5:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135
Validity
Not Before: May 31 11:03:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5050b1ab34cb22ebc89c3cf6917b828d6e292c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:94:92:b0:90:6b:8d:6d:f0:66:43:00:fe:
34:74:2c:93:81:c6:5e:dc:d9:e2:87:d8:fe:7c:f6:
80:23:c5:43:ed:3e:e1:4f:8d:07:93:a1:04:fd:4f:
46:a6:28:90:88:25:02:01:80:36:c5:14:5a:f1:af:
48:fe:be:fd:72:d9:62:ba:f2:a4:e0:c5:fa:18:b0:
fd:73:17:0f:51:9b:9d:ce:ed:68:a1:8f:e1:f4:bc:
09:6f:05:f4:ac:0b:b7:ca:31:72:56:30:c5:d8:17:
43:41:ca:c9:c9:a5:56:2e:b9:5f:ab:97:6a:1e:27:
06:0a:17:58:7d:1c:fe:74:55:90:a9:f4:3d:96:4e:
8a:6c:12:2c:8c:1e:f7:0c:6b:62:01:a3:09:6d:f3:
ce:1b:71:58:24:3c:dc:76:41:0c:6a:9d:8c:b4:e6:
83:cf:21:f8:68:04:cb:aa:d4:53:04:18:f7:2e:b5:
53:f3:79:7e:eb:a8:43:aa:21:4e:82:75:76:a9:22:
90:b2:e5:1e:a5:3f:97:df:77:d5:7f:37:ab:75:83:
28:26:a8:5e:2b:7e:4e:61:98:96:8d:96:c9:29:df:
01:06:20:49:5e:eb:6a:5e:c9:8f:9d:b4:5a:21:9a:
a7:17:27:3c:9f:b3:23:dc:70:f2:93:b5:94:a0:a9:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:B1:AB:34:CB:22:EB:C8:9C:3C:F6:91:7B:82:8D:6E:29:2C:7C
X509v3 Authority Key Identifier:
keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/UFCxqzTLIuvInDz2kXuCjW4pLHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6e:98:ba:fa:5b:bb:cc:48:42:9f:b4:08:18:dc:92:d9:2f:
a6:08:11:c7:a5:53:03:19:36:00:cb:34:e5:85:7e:ba:1c:bb:
18:94:1c:ff:b9:6e:07:41:58:99:61:de:7d:f4:41:9a:45:41:
bc:21:a0:c3:3d:38:29:de:52:d5:79:b2:54:d9:9b:77:80:fd:
cf:65:01:3e:2e:22:ca:f6:f4:ee:1d:4c:f6:27:97:c4:89:c6:
b2:f7:e4:4d:00:d5:50:1e:6f:08:8a:bc:3d:56:d5:b0:27:c2:
56:57:0e:50:6c:06:1d:31:bd:04:cc:6b:e9:72:79:3b:0a:01:
09:dc:bd:76:ba:80:eb:c5:2f:fb:71:38:d3:82:b3:35:d1:17:
8e:d6:0a:32:f1:e7:c6:40:28:9b:01:30:ee:ac:b5:03:ab:2a:
4d:e4:e3:3e:a8:41:8e:de:42:82:c3:48:26:af:9c:16:76:53:
52:50:fb:c3:c3:bb:ff:cd:ec:2f:f6:69:28:1a:63:12:bd:eb:
c2:86:0f:35:05:16:78:62:dc:74:46:cb:37:18:20:cc:32:19:
d9:52:d8:40:d4:bf:86:1d:87:dd:bd:82:d0:1b:6a:7f:71:5c:
9d:25:80:77:54:9e:e2:4b:63:eb:64:a8:d7:9d:27:8c:5c:32:
45:7c:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:31:42 2025 by rpki-client