Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/UwFsq97J96IuAlNthxMVK-jm-CQ.roa
File: UwFsq97J96IuAlNthxMVK-jm-CQ.roa (raw, json)
Hash identifier: /QXUoMzpNN6Fpcz6Cv+Qv+DVgNeDl2/UjH8wIhhZdwY=
Subject key identifier: 53:01:6C:AB:DE:C9:F7:A2:2E:02:53:6D:87:13:15:2B:E8:E6:F8:24
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01856BDC940FDC48ED12F506DB4B5AA1E540
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/UwFsq97J96IuAlNthxMVK-jm-CQ.roa
Signing time: Sun 01 Jan 2023 05:44:56 +0000
ROA not before: Sun 01 Jan 2023 05:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15739
IP address blocks: 82.146.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:94:0f:dc:48:ed:12:f5:06:db:4b:5a:a1:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 05:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53016cabdec9f7a22e02536d8713152be8e6f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a1:bc:a4:74:d3:bf:72:5a:49:2f:2e:b6:3b:
e7:82:59:fe:80:c7:b6:76:e6:97:ca:76:a2:f2:c1:
b9:99:19:be:c4:b0:ec:d0:96:44:77:49:a3:27:7f:
00:e9:90:3c:d6:26:46:c7:59:db:7f:27:3e:6a:e1:
80:37:bf:f7:6e:a2:52:6e:9b:17:f3:60:fc:2f:d3:
63:c3:3f:85:4e:05:6e:46:e8:ca:ef:23:81:80:db:
9b:19:e7:8a:fb:33:4b:85:64:0e:47:2e:58:63:08:
fc:58:f2:2b:56:0f:fe:b3:e9:8e:b3:93:36:41:23:
a3:1d:1b:c6:6e:43:1c:71:86:27:68:fc:64:3b:01:
b1:63:08:65:52:17:9e:7e:68:64:a6:56:12:cb:8c:
da:07:74:ad:65:7a:b2:cf:27:c5:0c:c3:7e:0b:f1:
d0:fc:fd:a3:4a:92:b7:49:77:25:48:a8:7f:7c:59:
92:7a:dd:69:f8:8f:50:c4:e6:68:21:7e:5f:33:58:
00:36:20:84:b2:2e:1b:08:6f:c4:ea:d7:0d:34:bb:
8c:52:60:3d:5a:6c:c5:de:f4:b6:c5:6c:eb:ba:58:
3e:a3:64:ba:af:78:5e:68:2c:8e:1c:10:8c:45:3b:
63:29:30:61:d9:fa:fd:99:c7:0c:32:31:57:ba:b9:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:6C:AB:DE:C9:F7:A2:2E:02:53:6D:87:13:15:2B:E8:E6:F8:24
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/UwFsq97J96IuAlNthxMVK-jm-CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.170.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b2:98:5e:36:8c:d3:c8:dd:71:a0:44:3f:94:f6:12:58:89:
71:80:01:8b:ed:ac:ed:96:7a:c8:b5:5b:d7:68:50:6a:2d:78:
0f:48:1b:00:69:e3:83:5f:0c:31:3e:47:c9:39:53:9b:0d:3c:
87:d2:9d:15:3f:93:74:45:d0:a2:1a:cc:12:f1:f4:59:4b:73:
92:7d:94:b4:40:dd:04:ca:49:fa:8c:78:60:c9:22:fa:30:48:
86:59:3a:35:88:5d:54:df:07:b0:1e:21:8c:e9:dc:69:3e:df:
51:9e:aa:6d:0f:4c:be:74:46:15:63:db:74:bd:a1:c0:1a:cc:
9a:a9:ef:0f:b2:37:d7:56:3b:ed:2c:aa:5d:98:63:55:0b:61:
08:35:00:7d:c3:bc:1a:db:99:b1:ef:5a:fc:90:ab:84:4a:6f:
2e:31:99:51:fe:3f:69:b0:3f:08:ac:40:0a:c3:99:d2:c4:a0:
cc:ce:dd:e3:3c:64:c3:68:08:74:ae:72:06:fe:19:ca:74:05:
b4:9b:ba:fb:a9:95:ab:bc:22:6c:c7:55:c6:91:1f:2c:06:8f:
bb:8c:74:cc:dc:93:cb:dc:24:94:95:17:b3:ed:b5:bc:b6:d8:
a0:32:1c:72:2e:56:0d:cf:1e:6e:8a:15:a3:3e:44:3a:ef:7f:
9e:0a:dc:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3JQP3EjtEvUG20taoeVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjMwMTAxMDU0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzAxNmNhYmRlYzlmN2EyMmUwMjUzNmQ4NzEzMTUyYmU4ZTZmODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aG8pHTTv3JaSS8utjvngln+gMe2
duaXynai8sG5mRm+xLDs0JZEd0mjJ38A6ZA81iZGx1nbfyc+auGAN7/3bqJSbpsX
82D8L9Njwz+FTgVuRujK7yOBgNubGeeK+zNLhWQORy5YYwj8WPIrVg/+s+mOs5M2
QSOjHRvGbkMccYYnaPxkOwGxYwhlUheefmhkplYSy4zaB3StZXqyzyfFDMN+C/HQ
/P2jSpK3SXclSKh/fFmSet1p+I9QxOZoIX5fM1gANiCEsi4bCG/E6tcNNLuMUmA9
WmzF3vS2xWzrulg+o2S6r3heaCyOHBCMRTtjKTBh2fr9mccMMjFXurnQiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMBbKveyfeiLgJTbYcTFSvo5vgkMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvVXdGc3E5N0o5Nkl1QWxOdGh4TVZLLWptLUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpKqMA0G
CSqGSIb3DQEBCwUAA4IBAQAkspheNozTyN1xoEQ/lPYSWIlxgAGL7aztlnrItVvX
aFBqLXgPSBsAaeODXwwxPkfJOVObDTyH0p0VP5N0RdCiGswS8fRZS3OSfZS0QN0E
ykn6jHhgySL6MEiGWTo1iF1U3wewHiGM6dxpPt9RnqptD0y+dEYVY9t0vaHAGsya
qe8PsjfXVjvtLKpdmGNVC2EINQB9w7wa25mx71r8kKuESm8uMZlR/j9psD8IrEAK
w5nSxKDMzt3jPGTDaAh0rnIG/hnKdAW0m7r7qZWrvCJsx1XGkR8sBo+7jHTM3JPL
3CSUlRez7bW8ttigMhxyLlYNzx5uihWjPkQ673+eCtxH
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:00 2025 by rpki-client