Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uuyQ4zT8TiRdYzxCIzev28-tjUI.roa
File: uuyQ4zT8TiRdYzxCIzev28-tjUI.roa (raw, json)
Hash identifier: ll7f8sdGrUTVCkXaZc90xMU2KmAXHbwJ/+OmlZAcW50=
Subject key identifier: BA:EC:90:E3:34:FC:4E:24:5D:63:3C:42:23:37:AF:DB:CF:AD:8D:42
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018692F9B084D97922F7383734C29D2AA775
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uuyQ4zT8TiRdYzxCIzev28-tjUI.roa
Signing time: Mon 27 Feb 2023 13:04:42 +0000
ROA not before: Mon 27 Feb 2023 13:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 193.28.228.0/24 maxlen: 24
91.234.22.0/24 maxlen: 24
185.217.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:f9:b0:84:d9:79:22:f7:38:37:34:c2:9d:2a:a7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Feb 27 13:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baec90e334fc4e245d633c422337afdbcfad8d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:a3:f8:a6:a9:f4:b2:2f:6b:a9:0a:e5:82:
09:ef:d5:ab:c1:9f:af:96:18:cf:c7:a6:e9:fe:c3:
79:c5:ae:90:6e:8c:d2:92:f1:f9:6f:86:fb:2b:4f:
68:a4:69:d8:69:0b:99:8b:dd:73:0e:21:e4:f2:38:
19:43:dd:92:e2:28:5e:04:fd:6a:72:8b:f6:3f:93:
77:6d:04:86:6f:b0:56:77:c6:12:7c:01:8f:83:d3:
b6:aa:c4:b4:01:e5:13:09:b9:6e:14:3c:a2:d3:b9:
fe:b8:f5:c0:96:2d:64:4d:a8:14:90:e9:73:2d:ec:
ea:4a:38:5a:09:69:43:bb:f2:bd:90:8d:4d:f9:74:
f7:59:9f:be:d5:28:14:87:44:64:f8:03:2a:29:e4:
c8:67:1a:4f:d0:df:cb:db:3a:70:12:b5:3d:23:e1:
d1:d1:bd:a9:01:fc:eb:09:0f:82:f2:f2:ae:02:8b:
cf:d8:89:06:47:a3:dd:f7:ed:fc:50:54:6f:be:15:
1c:e5:a1:55:07:6a:65:ff:22:fb:4f:cc:f4:33:5f:
1b:08:7c:ee:66:c3:2f:13:ff:98:b9:28:55:9c:d7:
ca:39:ae:5a:7d:f2:3f:0f:c4:47:15:7b:5d:74:31:
75:0c:f9:af:6d:27:7d:2a:58:bf:59:82:d9:84:f6:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:90:E3:34:FC:4E:24:5D:63:3C:42:23:37:AF:DB:CF:AD:8D:42
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uuyQ4zT8TiRdYzxCIzev28-tjUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
185.217.192.0/22
193.28.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:80:f3:ef:c8:87:a7:0e:a0:36:ad:0d:8a:42:59:9e:3e:7f:
cb:77:07:52:1d:66:20:88:14:68:f3:f6:ee:b0:e7:72:f9:ee:
c4:c2:60:93:55:a0:60:3e:35:b2:ba:8e:af:87:47:1f:c8:9e:
17:c9:b5:11:18:14:9f:2b:a4:9c:df:0a:d5:bc:6c:30:e6:72:
18:be:61:8e:34:de:5a:cc:08:3c:df:fb:cc:96:25:f2:a8:b5:
1f:4c:0d:06:3c:56:61:3e:2e:a3:a4:7b:07:fe:dc:1d:96:25:
f0:4b:23:0e:29:1d:3b:78:3f:a6:7d:f9:01:57:df:b7:89:35:
7e:de:3a:c9:d4:fd:be:28:43:06:10:7e:33:f0:a7:77:d2:b9:
08:1a:26:db:a9:a0:cd:44:5e:e4:95:fa:9f:c2:bd:54:ff:e0:
35:fc:65:19:e0:8f:77:f1:3c:46:1d:50:b8:7a:f5:35:4e:dc:
eb:3c:dd:af:b7:f8:b5:03:9e:07:65:00:2d:bc:84:e6:b7:04:
a8:3e:48:36:3d:84:d7:f5:14:24:27:18:6a:21:bf:08:68:9a:
5d:06:89:2c:fb:7a:d7:9d:03:22:8a:d1:16:e8:83:bd:8f:55:
d9:12:03:7d:65:12:dc:06:ef:26:8a:c8:21:ae:39:29:af:5a:
73:6f:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:18 2025 by rpki-client