Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Uejug2JRGwftzHtWtCPy_sTejNQ.roa
File: Uejug2JRGwftzHtWtCPy_sTejNQ.roa (raw, json)
Hash identifier: UYyBoFcZ/73JHBwJa55BiBbMyXRTirNc5kLTpOX2+UI=
Subject key identifier: 51:E8:EE:83:62:51:1B:07:ED:CC:7B:56:B4:23:F2:FE:C4:DE:8C:D4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183B2C5A9A375132ACE1200B9F63E5A150C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Uejug2JRGwftzHtWtCPy_sTejNQ.roa
Signing time: Fri 07 Oct 2022 14:07:21 +0000
ROA not before: Fri 07 Oct 2022 14:07:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:d6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:c5:a9:a3:75:13:2a:ce:12:00:b9:f6:3e:5a:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 7 14:07:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e8ee8362511b07edcc7b56b423f2fec4de8cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:61:c1:44:95:af:88:7e:df:29:fb:3c:0a:
4a:8a:bb:c0:f1:30:68:fc:47:ae:be:08:32:25:2b:
06:0f:6f:84:d6:bd:f8:2d:25:24:e4:1a:b4:e1:be:
3e:05:26:3d:2c:ba:55:3b:d1:85:cb:87:13:15:14:
e1:a4:d3:ed:65:48:7a:ab:03:44:5e:92:b6:44:f0:
24:d5:1b:ab:04:a8:11:6a:2b:23:03:93:05:5a:c5:
87:7a:cc:a0:50:d0:91:a8:f0:c7:58:4d:6f:e5:f3:
e3:10:17:09:25:9e:66:98:3c:da:a8:9e:45:f8:18:
c6:64:89:44:01:e9:c8:ec:9c:db:b4:15:0f:6b:31:
67:5b:e0:26:3c:c6:5d:53:ce:11:2f:f8:f5:1e:82:
55:98:7c:dd:44:33:94:d2:aa:5a:08:19:8a:f5:9a:
09:be:bc:52:d0:fd:ad:27:02:65:3e:9b:3f:53:5d:
6e:12:c7:68:e1:24:8d:1a:ac:4b:37:ef:87:b1:c3:
12:88:66:08:d6:72:a2:ad:f6:d3:46:63:5a:e2:5f:
9a:68:00:0e:5c:f5:f7:d7:cd:05:ba:84:56:21:5c:
70:b0:4e:11:08:43:8d:ad:7d:8e:db:21:62:9d:30:
2b:49:99:ba:a9:3b:0f:6b:90:9d:01:b4:e2:ce:50:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:EE:83:62:51:1B:07:ED:CC:7B:56:B4:23:F2:FE:C4:DE:8C:D4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Uejug2JRGwftzHtWtCPy_sTejNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:f0:17:7a:d7:9c:8c:a7:c5:e0:7a:58:03:5e:f1:a2:e9:fc:
a9:2c:eb:f9:84:42:ad:ec:f5:79:05:40:88:c8:9f:c8:1c:89:
dc:40:72:dd:0f:fa:f8:a3:29:dc:9c:7a:ef:ea:9d:f7:88:89:
d7:fa:ef:03:92:e5:01:cb:b4:e5:1c:9b:48:ee:c8:6d:e1:5c:
b8:f4:da:01:d1:70:b7:b3:9d:fb:d1:61:ff:1b:3c:e7:ca:5f:
72:9b:b3:88:0f:55:cc:30:60:62:8d:30:52:ee:fe:77:07:d8:
c1:4e:02:cf:db:79:d4:2c:62:19:22:a8:f8:02:47:70:d0:1d:
38:17:84:d2:ae:25:cf:6d:59:7a:36:3f:1f:1d:e7:ed:97:c8:
fd:f3:ad:e7:be:2b:cc:67:77:92:76:98:7a:05:dc:fb:be:fc:
c7:76:0d:32:49:cc:52:fc:0c:09:e8:c7:d8:02:2a:0d:9d:b0:
2e:ab:0c:ee:6b:62:fd:01:fa:e8:ba:2d:28:c8:0c:0c:21:96:
06:ef:c9:a4:1c:6b:e3:27:a7:24:16:fa:cb:95:9f:e8:ce:65:
a7:5d:bf:7f:e8:71:8b:b7:3e:cb:f3:01:fc:24:58:50:aa:fd:
63:0a:7c:22:50:39:fb:e4:51:b2:07:37:5b:4b:ea:ed:9e:72:
6e:e7:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:22:52 2025 by rpki-client