Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ug-f4c6xi_C_4eP0t4IZeDmudC8.roa
File: ug-f4c6xi_C_4eP0t4IZeDmudC8.roa (raw, json)
Hash identifier: OULIEDWgBIVHpIYnuBlv0NtC+3j401D+hGg6O+Uve3M=
Subject key identifier: BA:0F:9F:E1:CE:B1:8B:F0:BF:E1:E3:F4:B7:82:19:78:39:AE:74:2F
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01859A451E5946AFE9F4E51D6E1E75A7C851
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ug-f4c6xi_C_4eP0t4IZeDmudC8.roa
Signing time: Tue 10 Jan 2023 06:01:39 +0000
ROA not before: Tue 10 Jan 2023 06:01:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207977
IP address blocks: 185.253.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:45:1e:59:46:af:e9:f4:e5:1d:6e:1e:75:a7:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 10 06:01:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba0f9fe1ceb18bf0bfe1e3f4b782197839ae742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:5f:e5:e2:5c:06:5a:ed:30:b8:9b:7f:bc:
9c:42:1f:d0:fd:40:c0:ac:9b:88:b8:59:92:9d:f1:
f5:c4:42:2f:56:22:f3:92:a3:9b:3e:33:8d:77:ac:
74:61:4d:fe:91:6a:d3:c0:b2:e7:ac:32:8a:20:9e:
64:bf:cf:7d:5a:da:2d:3b:27:1f:c8:a3:09:3d:a6:
c8:ea:e4:63:c2:8c:dc:7b:cd:07:be:12:fd:cd:e7:
a4:00:a2:fe:15:2a:d5:a1:14:97:58:8c:ae:62:9c:
e1:44:1f:e5:42:8a:d2:fb:13:04:ee:79:bc:02:63:
76:e4:20:22:b4:12:3c:bd:74:76:b4:73:5b:c9:6e:
3b:68:ff:8e:a6:d1:51:11:de:b5:ac:b5:70:25:ab:
8b:af:9c:b5:ac:20:0e:9a:76:c2:ec:14:1b:dc:5d:
c4:74:c6:93:ce:18:ba:5d:78:f7:65:f9:d6:fe:60:
2f:bd:2b:29:02:1d:31:74:5a:15:df:58:61:28:43:
f9:f2:f3:81:21:ab:ff:4b:94:fd:05:55:96:f1:90:
79:94:10:13:58:83:f5:44:c6:3f:c2:79:cc:78:60:
cc:74:e1:a0:c8:b1:3f:d3:4b:0b:da:04:20:ee:f0:
24:ad:d9:61:44:bf:2f:b0:bf:90:05:06:a3:8a:51:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:9F:E1:CE:B1:8B:F0:BF:E1:E3:F4:B7:82:19:78:39:AE:74:2F
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ug-f4c6xi_C_4eP0t4IZeDmudC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e8:5d:79:dc:58:51:31:b2:fa:21:35:1c:a9:0f:bf:56:3c:
fe:34:17:7b:26:a7:ac:7b:68:03:81:42:26:83:9a:b8:ac:72:
9b:57:da:d6:f6:bb:23:8a:bf:2a:cf:9f:03:3c:05:99:00:18:
11:19:85:50:46:7b:6e:dd:49:b8:14:79:11:c7:5b:a6:be:e7:
f6:be:33:e0:fc:a6:a4:fb:ec:19:a5:eb:42:22:3c:40:94:01:
d0:99:9f:5f:fb:88:86:ed:da:30:07:ba:22:9f:72:9e:c2:8d:
a5:66:cd:ed:ac:2c:dd:1a:74:54:43:36:cf:88:ae:eb:08:cb:
3b:29:b6:cd:7a:1c:6c:ad:4e:7b:59:2f:7b:54:05:af:26:04:
93:ae:7c:a1:0a:81:a9:e1:e5:41:33:0e:18:26:76:0f:58:d2:
ae:4b:80:e3:9a:49:38:b0:6f:f4:23:0a:ff:5b:a2:b1:c9:ac:
82:45:5d:d7:e0:5a:69:9a:8b:ec:c4:3d:3b:10:ea:72:27:10:
86:a3:af:2e:00:2b:fe:a1:a4:0b:6e:6f:50:53:08:fa:be:0e:
38:c9:49:09:5f:05:72:07:d7:fa:18:86:77:a8:76:d8:20:77:
81:b4:9d:e1:9c:78:f6:9b:cb:2f:b3:c4:5a:b0:7a:a7:b5:e4:
a3:dd:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:33 2025 by rpki-client