Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa
File: uWD32mVaS-ONkrtva86KjQh8MAw.roa (raw, json)
Hash identifier: yJlotcabu/7+j0PCXeYPRbqaYkcwdNttbckJ3k8YuAI=
Subject key identifier: B9:60:F7:DA:65:5A:4B:E3:8D:92:BB:6F:6B:CE:8A:8D:08:7C:30:0C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0183EA2ABA15660297409C2A07F9B6229C34
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa
Signing time: Tue 18 Oct 2022 08:16:52 +0000
ROA not before: Tue 18 Oct 2022 08:16:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.5.191.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:2a:ba:15:66:02:97:40:9c:2a:07:f9:b6:22:9c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 18 08:16:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b960f7da655a4be38d92bb6f6bce8a8d087c300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:5e:68:c7:27:87:16:88:85:dd:29:58:6d:
4e:f6:f9:0e:c3:b1:f3:5f:2f:07:6b:ae:50:f9:73:
2e:23:73:7d:c4:7a:4d:e1:89:7f:c6:66:19:2a:21:
89:43:78:18:f3:17:52:da:29:b2:6a:ad:50:f0:46:
77:63:fb:98:74:de:94:72:6d:ac:5b:b2:f0:16:22:
6a:26:03:9c:8e:ed:16:a4:8c:72:f0:52:8a:51:ee:
52:ba:68:4a:9f:99:bb:b4:e0:81:40:14:bf:16:bb:
5e:a0:8f:51:d7:88:0e:2e:92:6f:70:42:c1:f6:ff:
96:74:f2:dc:ab:44:a0:09:80:cd:67:03:62:34:c4:
dd:99:cb:92:de:9d:6c:44:10:85:69:83:fd:06:48:
ab:48:f5:de:3c:96:e6:79:d6:ca:32:09:aa:4d:a7:
3d:66:df:e6:97:a7:d8:44:58:59:08:10:a1:3d:a8:
8f:12:c4:9d:29:4e:11:ba:d0:42:4e:1e:f9:b2:08:
ce:f9:9e:88:d8:3b:76:66:85:c4:f4:10:91:e2:69:
b5:04:42:e0:ba:72:9a:17:26:fb:5d:2f:e5:fa:9c:
85:5d:b3:68:be:24:5a:61:d3:cd:b5:2b:34:0b:8e:
be:ee:88:c8:72:d1:f3:49:9f:53:1b:13:20:c2:b5:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:F7:DA:65:5A:4B:E3:8D:92:BB:6F:6B:CE:8A:8D:08:7C:30:0C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uWD32mVaS-ONkrtva86KjQh8MAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
81.168.119.0/24
81.168.123.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3b:2a:ce:25:29:0f:ed:26:d2:74:bf:67:8c:81:91:45:30:
34:8e:32:01:9f:93:7f:c8:37:21:ee:f4:d4:9f:ed:60:df:d0:
a2:3b:59:93:07:60:3e:be:a9:b1:b4:f2:f0:94:54:d7:09:04:
b9:58:d9:f0:8e:7d:65:e9:57:05:c6:f6:4c:49:78:74:87:13:
d6:8d:75:c3:bb:1e:42:19:36:b4:1a:69:50:6e:cd:47:44:a1:
4f:6a:c0:9a:07:e7:9d:e0:7c:22:eb:43:13:98:8d:29:e1:48:
66:71:3b:5f:3e:28:13:49:f0:20:69:09:ae:7d:0e:f6:8f:8e:
25:97:52:5b:2b:20:12:24:b6:35:5b:82:4b:8f:1b:7a:fa:4f:
dc:5e:44:92:34:f7:8a:6d:af:b4:bf:07:69:8b:9f:c8:c6:a6:
f7:d4:3a:7c:0c:6d:74:6d:e8:ac:0f:1a:0d:75:85:34:a6:bd:
47:ac:4e:7f:4a:a2:23:f8:41:4a:75:be:a3:24:30:f0:8a:cd:
39:31:02:3a:a7:f9:32:79:e0:0f:1f:be:cc:ed:04:63:f5:fb:
17:fe:52:63:b3:1e:a0:d1:aa:a3:07:22:b4:f0:dd:d7:4b:57:
6a:03:82:cd:68:fd:4e:eb:80:77:17:40:4b:a6:81:26:9a:5d:
c3:83:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:14:12 2025 by rpki-client