Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/uSbqqhL7FozPi-4ChxPTuoKjbqE.roa
File: uSbqqhL7FozPi-4ChxPTuoKjbqE.roa (raw, json)
Hash identifier: NINT0z82NNAp0/kpwcX0ruf5IVlr+nA6qF338jhDlIw=
Subject key identifier: B9:26:EA:AA:12:FB:16:8C:CF:8B:EE:02:87:13:D3:BA:82:A3:6E:A1
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 0FFD8151
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/uSbqqhL7FozPi-4ChxPTuoKjbqE.roa
Signing time: Sat 01 Jan 2022 08:53:46 +0000
ROA not before: Sat 01 Jan 2022 08:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205766
IP address blocks: 82.98.82.0/24 maxlen: 24
212.19.38.240/28 maxlen: 28
82.98.87.0/24 maxlen: 24
212.19.62.160/27 maxlen: 27
2a02:2e0:3fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268271953 (0xffd8151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 08:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b926eaaa12fb168ccf8bee028713d3ba82a36ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:bb:41:4c:e9:48:98:a1:49:a4:8d:59:fb:
17:99:0d:c4:1c:ae:b5:9f:02:07:bc:47:49:e5:bb:
f4:bd:d6:bc:f0:8c:61:e9:23:d7:6b:14:05:d0:07:
4d:38:9f:ca:04:1d:9a:44:8e:63:0b:28:73:4e:b9:
9f:2c:82:f8:e8:da:57:3f:c7:6d:28:37:d6:dc:af:
fc:dc:d7:28:77:e9:35:d6:76:3e:72:d5:0e:54:1c:
fc:f0:43:5c:2b:d9:a5:1b:8d:c5:ee:e3:da:04:f6:
f0:52:f3:23:d5:e0:13:e6:f0:8c:98:69:98:6f:3b:
91:b4:a2:b4:ab:33:f0:38:47:fb:03:a7:1c:72:13:
2e:21:c3:b1:b4:db:6e:1e:36:c4:92:8f:08:c6:2c:
38:54:9a:eb:3e:7d:10:a3:55:c8:94:26:1d:3b:07:
ca:6c:72:88:b4:38:1a:a0:98:9a:3d:a8:f8:07:a0:
43:ad:c6:fb:d7:74:00:c8:e3:8e:fc:bd:b5:4d:15:
e8:a3:34:75:76:15:d0:5a:a9:b8:c4:e9:cb:39:e8:
c6:f8:78:4f:37:12:59:8f:87:42:2e:7b:1b:14:48:
78:c1:7b:2e:b0:96:ae:55:76:4b:bd:28:e9:61:5a:
ed:94:b6:ae:72:ec:b9:eb:05:a3:78:0d:bc:4b:b0:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:EA:AA:12:FB:16:8C:CF:8B:EE:02:87:13:D3:BA:82:A3:6E:A1
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/uSbqqhL7FozPi-4ChxPTuoKjbqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.82.0/24
82.98.87.0/24
212.19.38.240/28
212.19.62.160/27
IPv6:
2a02:2e0:3fc::/48
Signature Algorithm: sha256WithRSAEncryption
12:74:1c:16:56:4c:db:e5:d8:80:d4:30:aa:40:fd:42:62:d8:
3f:49:91:b5:97:a2:ff:61:01:36:44:f8:d3:15:52:44:34:99:
a2:17:c9:b9:80:82:dd:1c:bc:4f:bc:3f:bb:19:0e:c0:b6:71:
82:5a:07:17:cc:a4:3e:c0:2d:87:ca:6a:3e:2f:63:4c:00:3a:
55:f4:fd:12:29:97:1f:9c:3a:9a:80:fd:87:d7:60:63:24:08:
79:9b:47:15:61:32:e7:53:0c:b7:d6:00:00:74:a4:fb:3c:21:
9c:e3:56:0e:f1:af:d5:e9:dc:72:c6:8a:63:6d:0f:28:11:e7:
8f:63:f6:21:3f:bf:4d:e4:b6:dc:f1:76:9d:e5:d7:02:b6:7d:
f4:f1:27:fa:44:0d:24:88:52:70:e6:2f:6e:07:45:6d:eb:de:
6b:70:e1:09:16:62:4e:ac:d7:61:0d:67:11:a9:1b:f1:6b:50:
2d:d1:4d:da:51:bb:ec:27:fc:1e:40:66:88:27:b9:64:75:f9:
6b:41:a0:05:47:04:9b:b9:f4:7c:fc:2d:3b:56:95:3b:93:9e:
b8:de:c9:b8:9d:75:e2:5d:42:6b:3a:5b:3a:fe:76:44:d1:3a:
01:1f:af:d4:46:f6:ea:ac:91:49:72:03:58:5d:56:79:14:8f:
b5:3a:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:21 2025 by rpki-client