Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/UiP1OGr0hsP90Vs5Nmdl4YDR5G0.roa
File: UiP1OGr0hsP90Vs5Nmdl4YDR5G0.roa (raw, json)
Hash identifier: 1SZBQZzB2iyXlgS/wnaKWo5aYro+80NXkjxV7zcy4MQ=
Subject key identifier: 52:23:F5:38:6A:F4:86:C3:FD:D1:5B:39:36:67:65:E1:80:D1:E4:6D
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01856E6FDF29CE05AD1D98F568C43118A0A0
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/UiP1OGr0hsP90Vs5Nmdl4YDR5G0.roa
Signing time: Sun 01 Jan 2023 17:45:03 +0000
ROA not before: Sun 01 Jan 2023 17:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29107
IP address blocks: 195.69.84.0/23 maxlen: 23
195.69.84.0/22 maxlen: 22
195.69.86.0/23 maxlen: 23
194.0.88.0/23 maxlen: 23
194.0.88.0/22 maxlen: 22
194.0.90.0/23 maxlen: 23
194.0.90.0/24 maxlen: 24
92.249.64.0/18 maxlen: 18
77.87.148.0/22 maxlen: 22
193.201.80.0/23 maxlen: 23
178.54.4.0/24 maxlen: 24
178.54.0.0/17 maxlen: 17
178.54.5.0/24 maxlen: 24
178.54.6.0/24 maxlen: 24
178.54.7.0/24 maxlen: 24
178.54.8.0/24 maxlen: 24
178.54.9.0/24 maxlen: 24
178.54.10.0/24 maxlen: 24
178.54.11.0/24 maxlen: 24
77.87.144.0/22 maxlen: 22
178.54.79.0/24 maxlen: 24
178.54.120.0/24 maxlen: 24
178.54.121.0/24 maxlen: 24
2001:67c:2b14::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:df:29:ce:05:ad:1d:98:f5:68:c4:31:18:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jan 1 17:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5223f5386af486c3fdd15b39366765e180d1e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b2:a3:7c:db:a9:60:7c:a0:f6:97:12:63:64:
6b:0e:61:d9:09:92:35:6d:f7:5e:6d:44:7f:41:54:
47:e2:e0:18:44:46:3f:9a:09:d1:75:eb:4e:96:79:
d6:68:63:11:82:d0:f9:70:ad:77:80:8e:70:bf:5f:
a5:55:85:56:ac:83:bd:b2:db:1f:6a:9d:c1:b3:c6:
6f:4c:9c:a9:4b:7a:aa:6b:9e:83:e7:2f:19:9e:be:
a2:df:e6:b4:ee:c6:c4:3e:0f:49:d6:e0:d9:87:b7:
6d:87:85:86:0d:7b:e7:13:d4:8c:a1:f5:80:50:25:
9f:bb:45:8b:ac:d1:60:ac:e8:2b:c3:30:36:16:d4:
07:e2:62:7d:77:63:84:38:94:4a:8f:9e:95:c1:39:
c8:70:c5:da:e2:a8:2d:48:f4:04:5e:e7:13:cd:11:
70:00:2a:a3:58:7c:3e:10:86:5d:7d:2c:5d:0f:0f:
d7:73:bc:61:8a:43:52:ad:10:9d:e6:e7:3a:4e:b3:
50:51:e6:f0:a2:65:8c:b1:ae:01:39:fd:03:1a:90:
c1:03:4e:78:a7:9f:aa:6b:cb:2c:a4:69:a2:62:f8:
6b:82:1c:90:2f:81:fb:03:86:d0:7f:6b:ab:1d:64:
57:e4:49:9e:6e:84:8c:53:18:76:cc:69:e3:cd:21:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:F5:38:6A:F4:86:C3:FD:D1:5B:39:36:67:65:E1:80:D1:E4:6D
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/UiP1OGr0hsP90Vs5Nmdl4YDR5G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.144.0/21
92.249.64.0/18
178.54.0.0/17
193.201.80.0/23
194.0.88.0/22
195.69.84.0/22
IPv6:
2001:67c:2b14::/48
Signature Algorithm: sha256WithRSAEncryption
73:3e:f0:45:47:20:cc:c5:c3:59:5e:29:e0:b8:c2:29:1c:d3:
b7:67:9f:d7:fc:3c:83:95:6e:d5:fc:21:1a:e4:e8:63:72:75:
9d:23:93:6b:74:2f:28:d7:e9:c6:0f:17:55:77:26:a7:e5:6d:
40:80:50:53:48:75:cd:a9:27:ff:f6:6f:07:70:db:0b:0f:83:
6b:15:63:a5:f1:20:97:11:c5:f0:78:0f:03:6c:fa:7f:16:87:
c3:ed:9d:89:df:ba:4a:b8:db:98:a0:da:b8:b2:20:7f:66:27:
be:d9:a0:ed:b1:8f:44:a1:0f:b2:d2:67:9d:64:2b:54:9e:1e:
3d:34:91:95:63:99:ad:61:ef:39:12:c8:98:dd:0f:8e:a8:37:
b6:3f:ae:69:03:33:e5:3d:dd:69:bd:d0:4e:59:09:41:a9:20:
97:45:12:6c:b6:6f:fa:4f:03:1a:b8:2c:79:7e:04:f6:37:dd:
35:0e:df:88:f7:b9:e2:aa:0c:b3:0e:0c:3b:11:be:58:bc:64:
e4:ea:8d:ab:c2:24:cd:aa:bb:3b:e2:4c:56:30:ce:e1:2f:82:
cd:f3:21:aa:66:3b:98:7e:1b:ad:c2:87:9c:c1:89:b2:35:56:
3b:4a:15:92:37:54:54:34:8b:ef:70:db:bf:17:6c:6d:02:a5:
e3:88:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:52 2025 by rpki-client