Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/ucmp6ykBqTlW7pD0zoMZbGyVU4w.roa
File: ucmp6ykBqTlW7pD0zoMZbGyVU4w.roa (raw, json)
Hash identifier: wqHXrnFhB4F5Wv8YtKJZ8adIGq1+Ke/sOgTaHPSduMo=
Subject key identifier: B9:C9:A9:EB:29:01:A9:39:56:EE:90:F4:CE:83:19:6C:6C:95:53:8C
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01856D5406160A6A6EA3D6C9C670C75CBF82
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/ucmp6ykBqTlW7pD0zoMZbGyVU4w.roa
Signing time: Sun 01 Jan 2023 12:35:01 +0000
ROA not before: Sun 01 Jan 2023 12:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43372
IP address blocks: 185.186.152.0/23 maxlen: 23
185.186.154.0/23 maxlen: 23
45.158.4.0/23 maxlen: 23
45.158.6.0/23 maxlen: 23
185.236.96.0/23 maxlen: 23
185.236.98.0/23 maxlen: 23
2a0b:7e80::/29 maxlen: 29
2a0b:7e80:0:100::/56 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:06:16:0a:6a:6e:a3:d6:c9:c6:70:c7:5c:bf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jan 1 12:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9c9a9eb2901a93956ee90f4ce83196c6c95538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:7f:2c:24:31:44:3e:c9:d3:31:a7:99:4d:
9e:53:8c:3a:b2:a9:19:cb:39:0f:6a:c3:91:f9:68:
9e:24:b9:f4:0b:da:1a:72:0c:e6:af:ca:9e:44:7b:
2d:63:6f:22:7e:4a:5a:cd:c9:44:93:4f:03:56:7e:
5e:37:19:f5:88:df:05:62:3a:81:90:d5:f8:e2:8e:
d0:2e:f2:5b:2d:59:21:3f:ca:17:df:ce:86:c9:16:
d8:d6:10:5b:15:48:e3:65:1d:33:d2:db:49:fb:07:
3f:eb:55:45:c3:52:12:97:9d:13:24:0a:cd:dc:39:
1b:06:85:6a:b6:f7:fb:7f:89:9e:19:df:4e:12:f8:
1e:6e:b2:84:0a:0b:ad:29:b7:07:bc:6e:cb:13:04:
03:83:e5:f7:2c:a4:81:e4:c4:79:16:4e:31:b9:98:
25:9f:5d:70:99:62:32:d6:7a:4b:9e:a2:0a:70:ff:
f1:8d:e3:ce:56:ca:ca:31:21:24:be:3c:09:7f:6a:
4f:11:34:82:49:c6:f8:45:09:8b:78:fc:12:d9:f0:
69:c4:7f:82:72:12:69:37:16:3b:b8:59:6b:71:0d:
e6:da:98:23:f9:8f:02:43:8d:e0:46:44:62:d8:e7:
dd:e8:61:5e:c3:73:19:a1:3b:ef:69:c6:7f:39:d3:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:A9:EB:29:01:A9:39:56:EE:90:F4:CE:83:19:6C:6C:95:53:8C
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/ucmp6ykBqTlW7pD0zoMZbGyVU4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.4.0/22
185.186.152.0/22
185.236.96.0/22
IPv6:
2a0b:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
27:f0:aa:ba:55:14:c2:27:d7:5c:98:a5:52:28:f0:29:9c:ae:
24:de:5b:43:67:9a:5b:02:4e:d8:d8:ca:4e:3b:df:67:ba:33:
39:f2:48:89:4b:a2:4e:5f:1f:e9:ff:94:2d:6f:1d:55:8d:1f:
7d:fb:00:96:56:52:9d:b7:55:db:2e:86:6d:56:e0:6b:11:b6:
f5:5c:58:0c:23:c1:a8:01:bb:11:3e:c1:ac:a0:a3:ff:9f:68:
e1:4d:dd:de:77:32:de:2a:ce:26:32:ad:33:9b:d4:84:e9:dd:
9c:d8:56:70:a0:f6:a1:5e:20:47:df:63:a6:70:b6:f1:37:e8:
f0:f8:09:97:79:75:eb:1d:d2:46:c6:40:14:8c:b9:27:78:5e:
66:b7:6a:f3:62:72:21:7e:c5:d9:d0:7c:8a:a9:23:6e:10:db:
37:43:04:02:c1:87:39:99:ea:d5:8b:57:be:03:11:a4:15:44:
f8:bd:6d:88:4a:6e:4e:86:bd:46:ad:e1:7c:28:e2:60:46:95:
fe:ae:03:3e:6a:ef:1f:49:a0:41:9f:85:f8:15:e8:43:dd:fd:
fd:cb:2c:b4:4f:70:16:cf:d2:92:5c:a7:c8:fc:fc:15:96:fb:
b1:11:bc:44:96:2c:08:09:87:0b:dc:05:ae:85:b8:d4:2a:c8:
f2:8e:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:51 2025 by rpki-client