Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UXx2p9m_fWm96Z5T79g5Utd1c74.roa
File: UXx2p9m_fWm96Z5T79g5Utd1c74.roa (raw, json)
Hash identifier: PNWwfFPmoyb38ZHfYuczMH/nOYzbWNCfhfRZE3FuWUs=
Subject key identifier: 51:7C:76:A7:D9:BF:7D:69:BD:E9:9E:53:EF:D8:39:52:D7:75:73:BE
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 3786393E
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UXx2p9m_fWm96Z5T79g5Utd1c74.roa
Signing time: Tue 15 Feb 2022 09:08:08 +0000
ROA not before: Tue 15 Feb 2022 09:08:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931543358 (0x3786393e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Feb 15 09:08:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=517c76a7d9bf7d69bde99e53efd83952d77573be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:a4:0c:34:01:ef:e7:d1:30:8a:fe:8a:dc:
a9:fb:8b:56:88:d9:88:53:0a:57:29:bc:01:eb:70:
e8:5d:f2:23:11:e1:88:44:bc:a8:a5:19:f0:fb:25:
f6:df:1a:2c:8f:4f:51:43:9d:d3:8a:31:68:ab:19:
26:4d:99:69:e8:59:ad:46:c0:63:b0:cc:92:4b:12:
8e:c2:c3:45:cf:db:72:0f:41:a3:f9:75:73:20:cf:
ef:db:77:3b:63:1c:14:3b:f6:7e:6e:2b:fc:aa:c0:
64:7b:70:82:2f:bb:54:b6:05:e7:d9:a4:93:dd:aa:
6a:ec:9c:f8:7a:ae:2e:6e:10:90:91:d2:44:54:f1:
7c:8c:f0:27:57:29:08:19:c9:e4:dc:fb:36:39:33:
fc:e0:17:5d:ad:3c:b0:7a:eb:98:f2:7a:04:6e:41:
e3:fc:06:31:9c:93:fa:1e:3d:d2:72:4f:40:cd:0c:
04:05:cb:c5:a6:05:01:36:49:27:41:d9:39:5b:01:
af:3a:db:2e:42:22:d7:b9:42:10:9d:37:2d:96:b0:
b6:53:6e:72:13:4b:14:30:a0:21:03:1e:ff:df:25:
ab:76:bb:88:3a:04:b8:f9:84:4e:d6:ff:13:36:c0:
1d:bd:c6:85:b7:64:ff:ee:64:41:a9:ee:39:4c:7a:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:76:A7:D9:BF:7D:69:BD:E9:9E:53:EF:D8:39:52:D7:75:73:BE
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/UXx2p9m_fWm96Z5T79g5Utd1c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
50:3e:03:3e:e6:df:03:58:c5:08:18:ef:37:a9:89:e7:1f:21:
36:c0:14:e1:91:89:43:0a:11:55:82:02:47:10:13:62:f4:de:
fe:38:9a:b0:4c:f5:ed:db:fc:d1:71:79:ef:f7:83:42:27:65:
7f:6a:8c:b1:cb:f1:e8:98:90:57:8c:2e:af:c7:a3:90:8a:7a:
f7:0e:60:3f:15:15:f0:41:e5:22:d6:a6:ff:0d:d1:76:fe:93:
7a:16:50:15:d8:df:9a:a7:2a:01:2a:c0:e5:c5:65:42:a1:00:
c4:df:9c:af:24:b2:dd:3e:c6:c9:44:54:8d:0d:75:21:2e:8a:
51:90:56:06:b5:b4:57:1a:b3:4b:ac:b3:27:82:af:5d:4c:5c:
ed:0d:c0:43:36:70:fd:cc:63:b9:5e:63:58:a2:c6:64:c7:d8:
23:d5:d5:c1:23:2f:36:7f:f9:1f:a7:96:19:ed:37:98:12:5a:
ab:ba:1b:67:14:ed:13:be:2c:b9:dd:b3:79:a7:bd:30:f2:b0:
45:88:af:1c:f4:59:7f:45:9e:29:f9:f2:09:ab:c8:0a:e9:6f:
d9:ef:b8:16:70:38:02:0c:da:86:98:8d:e5:d4:f6:e3:4c:ab:
36:68:b8:0a:4d:ba:44:26:57:73:25:1d:97:6f:35:41:53:e9:
6d:9b:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:03:37 2025 by rpki-client