Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UCoY5opt-1tAHUvj2t5Inyg0JcQ.roa
File: UCoY5opt-1tAHUvj2t5Inyg0JcQ.roa (raw, json)
Hash identifier: PIabEdC1Phb99U2H+Ge1PKDHQ3wPAyKcPeeYF7J5Soo=
Subject key identifier: 50:2A:18:E6:8A:6D:FB:5B:40:1D:4B:E3:DA:DE:48:9F:28:34:25:C4
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01879364FBAFB80B14BBBC1BBDFF95645751
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UCoY5opt-1tAHUvj2t5Inyg0JcQ.roa
Signing time: Tue 18 Apr 2023 08:04:41 +0000
ROA not before: Tue 18 Apr 2023 08:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:64:fb:af:b8:0b:14:bb:bc:1b:bd:ff:95:64:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Apr 18 08:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=502a18e68a6dfb5b401d4be3dade489f283425c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:d7:97:0d:94:a0:e3:98:20:e8:12:2b:4d:
ca:58:f0:fc:cf:4e:46:c9:dc:1b:3e:01:33:53:e2:
60:03:e3:79:41:60:d8:05:48:7f:cd:e0:5a:b5:4d:
8f:2c:66:7f:35:5d:d5:ab:d7:15:07:5a:4c:44:0d:
6e:23:34:a9:46:8e:9e:2d:c0:9f:d1:f8:dc:f9:53:
d7:da:a9:db:ba:be:7c:3e:c5:b9:4f:45:36:c4:27:
6f:ec:e0:12:b1:df:c2:47:4d:12:7f:50:7b:7a:c3:
91:52:90:48:90:dc:8a:88:c8:d4:6f:1f:92:3b:27:
3d:5b:62:a1:51:63:60:3a:90:b5:a4:fd:9d:40:53:
63:8b:de:9b:fe:68:a5:cd:7f:c3:59:62:91:ab:42:
73:54:39:cb:7b:e0:58:38:86:44:ef:8c:41:23:81:
18:ab:c3:15:f1:90:9d:27:f0:a6:79:ec:72:86:3e:
57:be:59:37:94:fa:ea:f1:b0:36:5e:1e:2a:26:5f:
e2:ae:89:88:1a:6e:01:3c:7b:ed:bb:64:9f:c3:f0:
a0:9e:dc:08:d0:04:78:29:70:13:0c:13:88:64:95:
39:39:d3:73:01:14:0c:e0:c7:68:38:b5:09:3c:f8:
7a:64:69:00:a4:f7:05:bb:c3:04:7c:99:ef:b4:fc:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:18:E6:8A:6D:FB:5B:40:1D:4B:E3:DA:DE:48:9F:28:34:25:C4
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UCoY5opt-1tAHUvj2t5Inyg0JcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5c:d5:ea:22:ed:e5:cc:8c:4f:12:bc:c1:92:59:f1:87:a5:
5e:04:45:3c:7f:12:87:c0:f9:ae:92:78:4f:c6:3d:d7:1b:b8:
84:ab:9e:8f:19:04:9e:1e:21:48:fb:93:c1:ae:73:d4:4d:1a:
27:ca:ec:56:5d:14:40:a5:f6:70:69:e3:00:49:f2:a0:4f:d0:
0d:3f:40:f8:4e:9f:dd:d4:b0:86:9c:c4:9d:f3:e2:df:fe:e4:
a4:1f:60:11:a1:1e:68:8a:66:96:ca:20:1c:07:80:89:75:04:
5a:83:5f:86:8a:ca:82:6f:1c:63:d8:f7:4e:f5:ef:20:04:e1:
5e:72:60:cf:59:ff:60:37:3b:eb:0c:ff:28:64:49:85:d8:82:
5f:45:f4:75:d7:40:34:e8:15:7c:d9:2b:cd:e3:3c:6a:ed:f1:
e3:8a:d6:97:fb:21:f8:88:47:22:db:02:85:f5:8e:e1:dd:cf:
3a:96:3b:11:14:2d:34:1d:75:3f:4a:0a:f3:da:1b:21:3f:95:
af:7f:93:91:1d:6d:0b:ae:b2:f4:32:85:10:9d:69:d4:e3:f8:
10:4f:cb:77:cb:60:46:0e:25:5b:ec:99:98:15:6a:68:b9:7d:
64:53:22:25:94:19:ac:fb:55:2a:d1:5f:f2:f1:2e:f2:ab:13:
ed:d4:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:58 2025 by rpki-client