Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uWkNpONHx_kTH060Upwc2dx7lEg.roa
File: uWkNpONHx_kTH060Upwc2dx7lEg.roa (raw, json)
Hash identifier: al+DI/DZZwSKLiJJunqPE3ryJo9nDWy9lwsJUAc7o8A=
Subject key identifier: B9:69:0D:A4:E3:47:C7:F9:13:1F:4E:B4:52:9C:1C:D9:DC:7B:94:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01888F978590E336F29C17420AF1212A52F0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uWkNpONHx_kTH060Upwc2dx7lEg.roa
Signing time: Tue 06 Jun 2023 07:24:12 +0000
ROA not before: Tue 06 Jun 2023 07:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 93.190.246.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:97:85:90:e3:36:f2:9c:17:42:0a:f1:21:2a:52:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 6 07:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9690da4e347c7f9131f4eb4529c1cd9dc7b9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:da:da:a0:31:50:c7:d3:d3:a1:17:6b:45:
c5:a8:d3:bb:dd:27:90:3a:4f:20:58:c5:19:ae:1a:
37:37:3f:35:13:d1:71:f2:45:54:3e:10:e1:fd:a6:
12:ea:1d:aa:b7:ec:32:0b:41:fe:22:e9:d3:fd:c5:
78:5a:1b:2e:ee:3f:33:be:ea:7b:70:4f:ed:86:1c:
e2:65:12:68:2c:77:26:fa:e3:ac:e0:61:90:63:dd:
06:c0:a2:9d:b3:55:ce:7d:ca:fb:6c:78:80:73:d9:
d0:81:49:a8:84:a5:1d:6d:cc:68:0b:75:fa:e2:83:
7a:92:ed:2a:5c:b8:5f:72:95:65:c4:d4:e0:e3:46:
9b:31:d5:0c:05:4b:aa:2b:25:d8:ab:69:94:be:18:
3e:3c:99:b7:13:da:35:8e:70:a3:e9:c0:f5:c9:a2:
a7:4e:8d:6e:a2:ce:90:46:ad:d0:29:b5:f0:3e:ec:
de:23:06:94:ab:85:b3:48:b1:43:49:b2:5e:c4:15:
34:ad:6a:1a:e3:c6:2a:6f:eb:b5:7e:b9:a5:bf:e6:
4a:99:38:5a:3d:19:c4:b0:71:57:cb:fb:ff:85:e5:
d5:15:4d:85:f1:fb:d3:9c:5f:b0:10:e3:bd:58:b0:
2c:d6:cd:c3:7d:4d:13:88:43:2f:23:af:df:93:70:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:0D:A4:E3:47:C7:F9:13:1F:4E:B4:52:9C:1C:D9:DC:7B:94:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uWkNpONHx_kTH060Upwc2dx7lEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
93.190.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:36:44:f1:e3:1d:4f:09:e9:dd:44:25:10:be:d9:a2:3a:27:
8d:28:58:2a:5f:21:88:57:af:ad:53:6c:7e:25:5e:e1:86:77:
f3:e6:38:dd:14:40:24:11:cd:41:91:66:05:31:ef:ff:8e:9c:
f9:93:66:9c:f6:fb:f7:9d:c7:28:c1:7d:38:6a:0a:fe:78:b0:
3b:02:5b:86:fe:cd:59:5d:76:37:ea:c9:0c:69:c6:15:01:79:
4c:b0:53:a1:b4:45:6d:1d:dc:d1:3d:14:1d:09:56:94:6e:d7:
db:0b:fe:3c:b5:cc:23:12:67:7f:ee:ec:09:d0:8a:b2:f5:0c:
9e:af:e7:9b:ab:2f:92:53:45:aa:c2:53:e3:12:2d:30:96:1e:
e0:c4:55:2c:6f:7c:46:a5:cc:cc:3d:46:f4:3d:46:47:7c:94:
16:b7:7a:9e:c4:2c:80:6c:50:58:c7:40:37:20:5d:48:50:bc:
c8:bd:2e:42:02:f9:79:d4:c4:fa:3a:9c:d4:e4:ca:d6:c7:56:
43:38:6f:82:78:02:61:92:9b:c6:80:55:57:5f:4c:07:3c:d9:
6d:1c:d5:6b:8f:86:5d:36:30:52:86:25:64:24:8e:ce:fc:6c:
65:09:73:de:b9:f6:cf:57:a5:27:ea:31:c1:6f:f0:81:7d:a6:
5b:ad:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:51 2025 by rpki-client