Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Ux6FsTJjigJ-p-mMfPXbFOd7Kg8.roa
File: Ux6FsTJjigJ-p-mMfPXbFOd7Kg8.roa (raw, json)
Hash identifier: 5icowmCQKqoUTHFHX1bc+DZZO9aNWRsAsXIHB11XxAE=
Subject key identifier: 53:1E:85:B1:32:63:8A:02:7E:A7:E9:8C:7C:F5:DB:14:E7:7B:2A:0F
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 05882F20
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Ux6FsTJjigJ-p-mMfPXbFOd7Kg8.roa
Signing time: Sat 01 Jan 2022 12:54:41 +0000
ROA not before: Sat 01 Jan 2022 12:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
94.190.192.0/23 maxlen: 23
94.190.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92811040 (0x5882f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 1 12:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=531e85b132638a027ea7e98c7cf5db14e77b2a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:b0:d4:bf:0d:d1:49:d1:d9:85:39:a8:d8:
ab:c4:23:3a:8d:c8:79:95:52:fd:2f:69:77:ca:b9:
be:ec:16:fe:b8:ec:72:7e:9d:fb:04:fc:93:ab:c1:
8b:9a:d7:a9:71:5e:b5:22:8d:85:b5:60:1d:59:36:
bf:03:c2:2b:a9:0b:33:50:8b:c5:51:cc:47:44:97:
89:0c:cc:54:53:bb:44:23:c5:b0:e8:16:9a:08:5e:
5a:8d:b9:66:4c:75:18:4f:29:59:52:6b:b2:f9:ee:
f9:46:07:ae:83:8f:6d:94:19:05:64:dc:db:6a:3c:
67:5b:03:a1:ab:09:0c:b9:05:73:8a:5f:b3:8e:50:
21:d3:0c:5f:65:67:47:f1:08:ff:72:d9:3f:a6:cf:
e7:ff:f5:c4:49:73:5f:48:25:45:bd:5f:c0:b0:54:
be:ae:dc:4a:ed:02:b8:9d:c0:8d:9d:61:13:1b:4a:
86:7b:ce:d7:e1:ac:de:b4:7a:4d:b4:23:f9:af:b4:
83:ab:3d:10:a6:a8:8b:ae:98:06:ff:6c:e5:8c:f6:
0a:43:36:04:b6:4c:cd:bc:9e:2e:32:8e:10:a0:81:
18:c6:c5:0d:ae:04:b4:85:f9:28:c1:15:3b:72:2d:
0c:e6:9e:ec:3d:d2:e2:04:06:52:d0:08:7d:a3:87:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:85:B1:32:63:8A:02:7E:A7:E9:8C:7C:F5:DB:14:E7:7B:2A:0F
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Ux6FsTJjigJ-p-mMfPXbFOd7Kg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/22
94.190.136.0/21
94.190.160.0-94.190.193.255
Signature Algorithm: sha256WithRSAEncryption
07:65:ce:64:d4:05:63:6c:7f:54:ca:40:bd:df:53:17:8e:c4:
49:7b:ee:f4:18:45:e3:d9:af:d0:71:0d:40:f1:83:d7:11:7f:
a8:dc:33:7c:7d:a0:41:6b:1d:aa:cb:0c:02:ea:78:a5:0f:88:
71:94:24:f2:e5:3e:61:aa:2e:eb:e0:54:34:97:2f:06:13:df:
f1:a9:35:6a:ae:38:36:ec:5a:30:68:4c:b8:2c:3a:54:8f:40:
bb:d9:b4:c3:03:82:e8:22:c1:ec:30:f4:54:dd:2a:14:20:50:
55:4c:0c:58:e3:05:b7:df:37:5f:42:a6:a4:28:cc:74:5c:a6:
17:3c:8a:c0:df:25:a0:21:09:cd:bd:65:6d:6f:4a:19:01:f8:
ce:48:ad:0f:72:6d:64:9e:35:8b:75:97:7b:c8:6e:07:96:7e:
20:ed:e1:c1:b4:7a:52:e2:48:01:0f:e2:c7:24:ec:37:da:47:
c7:fc:0c:93:74:2b:d3:6d:6e:72:9c:05:b9:f1:a4:82:77:6c:
4a:80:3b:e1:28:dd:c3:ef:5a:3c:e5:2c:9b:d1:5b:0d:17:f9:
7c:52:6e:23:13:3e:8d:41:6e:42:e7:1f:f9:41:fa:2a:cd:44:
67:ec:ab:72:ee:d9:02:81:e7:4a:c8:b1:24:c3:39:99:31:ff:
70:52:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:31 2025 by rpki-client