Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa
File: UuZWz7-gPBIVREivrPl3GspzrpU.roa (raw, json)
Hash identifier: PelwhRw7mtTwLRu99xIJcqy+WHqICRwP0p4HOXe7Hxs=
Subject key identifier: 52:E6:56:CF:BF:A0:3C:12:15:44:48:AF:AC:F9:77:1A:CA:73:AE:95
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01894A7AD80487B0A6946FD472752AC7030B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa
Signing time: Wed 12 Jul 2023 14:21:51 +0000
ROA not before: Wed 12 Jul 2023 14:21:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.152.108.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.253.0/24 maxlen: 24
82.153.242.0/24 maxlen: 24
82.153.246.0/24 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:7a:d8:04:87:b0:a6:94:6f:d4:72:75:2a:c7:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 12 14:21:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e656cfbfa03c12154448afacf9771aca73ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:26:d3:dc:61:a3:21:84:d8:25:8f:95:71:
c6:b1:11:91:3c:65:c8:76:fc:9e:7b:fc:7d:a8:68:
a1:53:70:04:a3:7e:48:f9:38:52:34:13:06:c0:a5:
50:b9:36:37:0b:83:6c:83:48:d7:f4:69:ef:3f:51:
9b:1e:95:04:c1:e3:cf:9f:8e:f3:f2:03:19:97:38:
bb:46:e5:c1:72:59:a6:54:65:17:0c:34:0f:2d:59:
e8:e0:c4:d1:fa:67:67:9d:39:fe:62:33:b8:58:fe:
8a:af:fa:eb:06:5e:ff:8e:29:46:cd:a2:6d:b8:c8:
46:4f:a0:a8:42:13:ff:6c:00:ce:b2:bf:a1:fa:0a:
a8:e2:31:ec:a1:dd:4a:4c:26:20:ad:6c:ed:1f:c8:
71:f1:3e:7c:ec:74:e0:f9:34:2c:4f:de:8c:b3:cc:
84:4e:00:af:3b:32:86:15:4a:a3:94:07:2b:12:3b:
42:40:57:d7:4d:d6:4b:7c:ef:e1:a1:18:52:2d:ec:
56:75:9e:06:0e:1f:87:af:20:22:41:ef:f4:4e:ca:
2a:f2:ed:36:af:6f:64:d6:bb:e0:18:25:cd:63:c1:
e6:8f:f6:40:49:58:c9:83:1d:57:9b:53:f5:37:59:
51:4a:e8:32:67:37:b1:2b:c2:a3:1c:95:a1:fd:63:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:56:CF:BF:A0:3C:12:15:44:48:AF:AC:F9:77:1A:CA:73:AE:95
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UuZWz7-gPBIVREivrPl3GspzrpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.119.0/24
81.168.123.0/24
82.152.108.0/24
82.152.111.0/24
82.152.252.0/23
82.153.73.0/24
82.153.78.0/24
82.153.136.0/22
82.153.223.0/24
82.153.242.0/24
82.153.246.0/24
82.153.248.0/23
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:f4:19:5e:f7:ed:87:67:3d:58:47:40:ae:4a:ac:9b:cd:
f4:07:0c:35:f3:34:ff:0b:ab:c4:d5:1d:0f:f3:42:dd:f4:83:
47:e8:95:75:d5:bc:ef:58:5b:4d:8c:ba:ae:15:84:a4:38:fa:
98:88:7c:c2:d8:b8:e7:82:14:e0:1f:35:87:0b:c3:bd:9c:ae:
ba:18:70:85:1f:d5:20:0d:74:4d:64:55:5c:8f:2b:4b:3f:78:
79:8f:77:84:7b:78:df:8f:c9:56:6f:92:6c:c0:aa:c4:33:7d:
f4:65:35:30:a5:fa:4e:30:dd:ad:8a:82:7d:3b:0b:2e:56:1b:
af:b1:bd:15:0f:68:f0:6f:77:64:21:07:d4:89:0b:11:f8:e6:
d5:db:63:12:22:ec:39:70:1b:e5:bb:b0:2c:ca:be:b8:e2:ed:
cc:e4:cb:50:cc:98:f0:83:c7:f0:e1:83:71:d5:74:47:2f:91:
fe:33:ac:10:92:8e:f0:ac:6d:62:7f:82:46:37:53:a1:fb:db:
05:2d:09:98:58:b9:60:a3:5a:07:f3:2e:a8:03:b4:57:26:7d:
a8:db:f5:a9:de:2d:60:c0:7f:f8:45:92:90:e5:10:c4:32:70:
94:5c:4b:2c:c3:58:a3:2e:72:1c:36:b4:a6:33:7e:fc:0f:e4:
e3:22:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:02 2025 by rpki-client