Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/ue_WQk3qcaJER6Q9KBUKlnCtVPc.roa
File: ue_WQk3qcaJER6Q9KBUKlnCtVPc.roa (raw, json)
Hash identifier: JreODhVMepNqieanSd0wDHgiscKR1vNRscy7JBOWneo=
Subject key identifier: B9:EF:D6:42:4D:EA:71:A2:44:47:A4:3D:28:15:0A:96:70:AD:54:F7
Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial: 018571B0F4CA61BA1E7E364E38BC9A79C5CF
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/ue_WQk3qcaJER6Q9KBUKlnCtVPc.roa
Signing time: Mon 02 Jan 2023 08:55:00 +0000
ROA not before: Mon 02 Jan 2023 08:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200695
IP address blocks: 185.98.233.0/24 maxlen: 24
185.98.232.0/24 maxlen: 24
185.98.235.0/24 maxlen: 24
185.98.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:f4:ca:61:ba:1e:7e:36:4e:38:bc:9a:79:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Validity
Not Before: Jan 2 08:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9efd6424dea71a24447a43d28150a9670ad54f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:0b:b1:9b:5c:ae:35:19:27:97:57:bc:39:
89:63:5a:f2:87:a5:1c:3b:08:54:d2:82:4c:fa:78:
b7:cd:fa:69:99:5f:8f:56:1d:85:a9:4a:5e:fd:2d:
f3:5e:d1:0d:c5:55:2a:f1:71:97:d7:8a:42:b9:d9:
83:f3:61:6c:ee:63:e9:51:61:d1:33:71:6b:6a:be:
0c:52:18:9e:f7:d7:be:40:f2:04:20:bb:1f:9e:0c:
ca:a3:e3:1b:2a:e2:60:40:64:99:9f:ca:8b:81:28:
46:40:77:88:ba:51:e1:85:f9:ac:e9:a0:bc:c4:27:
3f:70:63:b8:39:54:55:f9:f9:30:5b:17:5d:81:6f:
6d:98:83:16:01:0f:77:6d:1b:a5:69:93:f7:b6:55:
3a:b3:79:22:46:f1:2b:65:d0:38:08:f3:4d:bf:bf:
bb:0b:e4:31:20:ce:d0:87:0b:b4:57:38:cd:9b:2c:
28:86:8d:27:75:5d:6e:a6:7a:d8:93:ce:16:3e:70:
ab:f8:5d:c7:4c:55:cd:3d:3e:1c:e9:e6:7e:51:4a:
ea:a3:66:65:12:03:dc:d6:97:ad:9a:a8:9b:20:51:
a8:e3:53:f1:11:05:c8:31:84:95:19:96:95:b6:55:
a9:a0:1d:29:0f:b0:cf:f6:68:ed:31:4a:7f:d7:7d:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:D6:42:4D:EA:71:A2:44:47:A4:3D:28:15:0A:96:70:AD:54:F7
X509v3 Authority Key Identifier:
keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/ue_WQk3qcaJER6Q9KBUKlnCtVPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d1:bd:04:b5:0d:a3:1e:ed:17:ea:ab:88:50:2b:a0:9b:52:
fb:47:a1:56:7d:a5:25:9e:c5:3a:84:f7:3b:0b:7b:05:f6:4d:
6c:d7:e6:81:f9:b8:82:84:76:dd:b4:c4:de:a2:51:22:e5:58:
1a:76:1b:61:0c:09:dd:8a:92:e7:d1:a0:f1:c5:f5:fe:19:30:
2a:49:9e:fa:d2:97:eb:84:44:1f:3b:59:1c:50:70:6f:8c:d1:
93:bd:70:a5:46:68:80:93:ca:52:2c:75:e4:97:15:91:41:ef:
80:a7:21:f8:5f:4a:ff:1d:a3:1f:64:53:ad:bf:12:48:7b:10:
6f:7a:3c:4d:dc:5b:38:96:9e:0d:cd:c2:21:db:a0:6a:02:a5:
40:29:61:3d:07:fa:60:66:79:20:52:ca:87:9e:c4:80:43:b4:
a6:d6:b9:3b:fa:c5:2e:a7:45:e7:11:75:a8:11:e7:79:fa:0d:
5a:47:9a:1f:95:cf:24:b8:ec:0e:ed:2d:f9:56:9d:a1:4e:57:
8b:d1:41:96:ea:9f:6b:4e:69:ab:58:19:22:05:11:a7:02:4d:
e3:79:4f:f1:10:76:33:88:f5:16:f2:30:af:63:3f:dd:5d:a9:
f3:94:c5:ee:4a:79:e1:5d:9c:33:58:c7:0e:77:3c:ca:f0:cb:
37:51:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:00 2025 by rpki-client