Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/uzi_xx7nopwG7GyU-R4szIJbU58.roa
File: uzi_xx7nopwG7GyU-R4szIJbU58.roa (raw, json)
Hash identifier: UHdIVrfBoYdpUq46j1KXVRj6YMRG7vY+N3UpLetrDWU=
Subject key identifier: BB:38:BF:C7:1E:E7:A2:9C:06:EC:6C:94:F9:1E:2C:CC:82:5B:53:9F
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA4960A4957C25C83C135696AEB62A
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/uzi_xx7nopwG7GyU-R4szIJbU58.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47616
IP address blocks: 2001:648:22b0::/48 maxlen: 48
2001:648:25e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:49:60:a4:95:7c:25:c8:3c:13:56:96:ae:b6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb38bfc71ee7a29c06ec6c94f91e2ccc825b539f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:86:78:72:b1:a4:07:68:0e:f9:0c:22:e6:
67:a3:d3:f0:02:07:f8:c2:5a:92:d6:cc:c8:b3:e3:
50:70:d3:0c:85:00:77:79:6f:f0:df:e6:33:85:87:
02:e7:73:99:ae:95:13:2f:71:30:86:ac:ac:f8:3b:
27:74:79:46:dc:46:d2:c5:1a:b6:fe:22:77:b4:1a:
97:e3:bb:dc:05:c7:26:4a:c7:5f:82:54:9e:ba:c2:
ba:bf:52:e8:a4:ab:52:1c:b6:08:7f:2b:02:2d:97:
27:8d:80:74:09:1f:d8:9e:9f:49:c7:c3:ab:76:b0:
89:dd:32:49:af:a3:8c:05:9c:be:7f:9b:6c:85:b0:
3a:84:08:87:d8:b7:82:59:cd:13:ed:63:e9:b2:4f:
e3:e0:02:19:b5:61:dd:4b:fb:43:93:3d:cd:d7:b1:
3e:d8:b4:b9:07:e4:75:e7:71:94:ec:00:3b:38:0f:
a1:4a:0a:6a:09:5b:4b:f9:48:7d:95:f4:16:e9:90:
08:f1:2a:fe:4f:5a:bd:ec:1e:14:04:50:4e:d4:16:
40:aa:a4:0b:3c:38:12:e2:97:7a:44:ef:f9:cc:91:
b1:5f:b6:72:38:ac:bf:8b:b8:7f:97:a7:f4:d2:7a:
32:46:f5:21:51:c9:e2:b1:d7:78:16:41:02:72:2a:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:BF:C7:1E:E7:A2:9C:06:EC:6C:94:F9:1E:2C:CC:82:5B:53:9F
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/uzi_xx7nopwG7GyU-R4szIJbU58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:22b0::/48
2001:648:25e0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:0a:2c:b5:3a:3c:65:74:07:1f:bd:e8:c2:b3:40:15:39:72:
30:a0:88:6c:b0:e2:67:c6:09:ec:03:b1:0a:3d:d7:5d:08:92:
d9:dd:38:67:23:69:5d:0a:b7:27:e8:ec:20:f1:0d:c2:da:e8:
a6:2d:e1:eb:fd:8d:c2:37:84:da:30:45:6d:69:89:c7:a9:48:
83:d0:56:b0:d6:b7:60:7d:8a:50:bf:c9:2e:be:4b:36:b7:23:
44:59:4a:a3:ac:55:dd:d0:00:64:38:55:13:dc:17:2b:0c:bc:
70:76:60:d5:98:bc:b1:6c:f5:a5:40:57:e0:65:2b:da:66:01:
8e:4f:85:6a:88:f8:b2:fc:d4:77:b5:0f:8c:3c:c2:96:a1:a7:
62:3d:f9:10:d1:05:b5:bd:82:08:db:0e:03:c6:0a:98:5a:d9:
cf:6a:e8:06:3c:46:b6:26:b2:c6:5e:fe:77:26:b6:45:d1:db:
7c:4b:d0:45:b9:48:d5:38:91:e5:fb:e7:e8:78:62:a6:12:9a:
f5:ca:67:a7:33:47:87:ce:f0:ef:91:08:3c:39:ed:0b:f5:5f:
0c:78:a7:89:3e:4c:e6:05:ed:84:31:80:f5:d5:9a:27:03:5c:
11:79:eb:aa:60:e1:74:08:48:74:1d:0f:5b:26:02:d7:4f:54:
fa:89:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:26 2025 by rpki-client