Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/UZPPUWJfPLiOo5HHkUyJsR3vqQE.roa
File: UZPPUWJfPLiOo5HHkUyJsR3vqQE.roa (raw, json)
Hash identifier: VikpsfTHoPOrwnYBmGZnz+9EPjRrwTnTiMHR+E4qLRo=
Subject key identifier: 51:93:CF:51:62:5F:3C:B8:8E:A3:91:C7:91:4C:89:B1:1D:EF:A9:01
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 01856BD35F8D9B865832E6C7A333232FB704
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/UZPPUWJfPLiOo5HHkUyJsR3vqQE.roa
Signing time: Sun 01 Jan 2023 05:34:52 +0000
ROA not before: Sun 01 Jan 2023 05:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211103
IP address blocks: 185.89.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:5f:8d:9b:86:58:32:e6:c7:a3:33:23:2f:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jan 1 05:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5193cf51625f3cb88ea391c7914c89b11defa901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:92:8c:b8:e2:ba:81:34:e7:0a:c5:4c:cd:
68:95:f4:07:e7:9b:f3:7e:43:17:ef:93:0d:ed:5c:
0e:5d:57:d2:a4:b4:6d:13:84:60:1e:d9:9c:bb:74:
1a:2f:22:da:98:5e:35:1a:a5:4d:cc:c9:14:e8:0a:
cd:7f:0e:11:d4:0f:cc:f8:6b:f2:7d:bb:21:97:4f:
4e:94:72:68:a1:e4:68:88:6c:8e:46:b5:c3:44:83:
fd:ee:2d:f4:29:b4:c4:60:61:a1:0f:ea:2b:e7:04:
e3:dc:7e:14:f4:b5:48:6a:c4:f9:fe:ec:3e:0c:69:
c4:db:e6:63:53:4b:23:3d:86:73:b8:8e:d1:2c:f6:
0a:c0:49:92:18:bc:7f:fc:0c:69:ea:1a:5a:97:59:
be:ec:01:69:84:e2:d7:c8:03:19:72:37:92:42:62:
4f:d1:ae:b6:32:29:01:ca:09:9c:41:7c:0c:ed:23:
85:eb:c3:d3:5f:55:29:54:44:86:0f:bc:e2:24:b1:
83:21:e0:9c:27:f6:ad:5b:0f:72:c9:10:09:bc:11:
83:44:9a:f2:1c:d2:e8:c3:e9:d7:86:ac:af:87:d0:
bd:b7:63:36:b3:df:c0:bf:25:b2:ef:c4:92:30:c9:
cb:e9:dd:a4:72:9e:cc:d3:41:06:c2:de:62:08:89:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:CF:51:62:5F:3C:B8:8E:A3:91:C7:91:4C:89:B1:1D:EF:A9:01
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/UZPPUWJfPLiOo5HHkUyJsR3vqQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
64:07:51:19:06:39:e0:e1:6f:2a:61:ff:fb:98:2e:2a:e6:48:
08:e5:51:d9:98:47:75:69:74:51:22:c2:dd:5a:d7:47:08:81:
0c:c8:ad:19:ae:66:de:f0:46:22:cf:47:d7:be:f8:36:48:36:
d0:20:71:c7:0f:56:89:c4:e1:ef:de:8e:9a:a0:8e:35:c6:b7:
ad:f7:f0:4b:2c:fb:fe:87:ef:da:08:3e:4f:cf:e2:23:34:59:
f4:67:4d:20:02:8f:45:e5:ff:d2:e7:a8:a7:7f:74:a9:31:ad:
f0:c7:de:a8:c1:a8:b3:97:20:1b:b4:4c:62:c0:77:bd:82:99:
e1:5b:f4:9b:1c:42:55:44:b4:4d:3a:71:3e:34:5b:b7:4e:dc:
8a:14:e4:e1:a2:e6:2b:92:99:a0:54:53:cb:81:0d:df:9a:08:
a0:40:49:b0:b8:f9:96:22:68:bd:35:e1:b4:f9:62:4a:b0:dc:
48:b6:5b:e8:c4:c6:47:73:93:6c:69:12:d7:26:1f:60:95:66:
eb:b0:a5:64:1f:df:41:37:a0:b7:ca:e5:78:4e:af:f8:ba:e9:
a4:50:0e:77:d5:87:70:85:6b:d5:ec:d3:0d:89:f0:ec:4b:91:
07:50:6d:75:05:df:c4:22:80:a3:22:d8:0d:e8:4e:79:95:04:
8b:05:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:03:02 2025 by rpki-client