Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/UZYRCCOCdp31-D0-K0ouO9moSyo.roa
File: UZYRCCOCdp31-D0-K0ouO9moSyo.roa (raw, json)
Hash identifier: xNyRCX5noaZypSoUcfSeGE4Zi0rLN7ZY3k++6mJLMy4=
Subject key identifier: 51:96:11:08:23:82:76:9D:F5:F8:3D:3E:2B:4A:2E:3B:D9:A8:4B:2A
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 01857079B70A3090C05E83C83C2D8275EA35
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/UZYRCCOCdp31-D0-K0ouO9moSyo.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203367
IP address blocks: 185.137.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b7:0a:30:90:c0:5e:83:c8:3c:2d:82:75:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=519611082382769df5f83d3e2b4a2e3bd9a84b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:9d:9e:06:47:fc:6d:64:55:7b:2b:6a:db:
b5:38:f2:c7:79:91:34:8c:73:b2:27:5a:b8:63:0b:
97:7a:ae:60:10:d3:3b:ae:65:92:5d:92:ec:ec:ca:
b4:f9:52:f1:72:43:4e:f2:e1:f7:1c:b6:83:95:6f:
72:57:f3:e9:04:ce:c3:4f:78:71:0e:58:6b:12:a3:
c8:5e:d3:b3:5f:42:2c:32:4f:db:5a:d8:93:fe:63:
e5:b5:31:1a:a3:d6:d1:d5:2c:69:e7:f7:e8:55:fd:
aa:a0:a9:82:dd:35:1f:97:3d:b4:8b:af:41:a1:35:
17:53:e5:20:17:74:47:4d:5f:b1:4f:1d:0b:f1:e0:
d8:af:00:94:d6:67:9a:c7:c8:d6:3f:0d:a2:42:28:
37:39:0e:17:ad:67:76:62:86:aa:5f:4a:7c:1e:52:
dd:fc:70:72:b4:e2:32:9e:6f:71:ec:78:70:39:6b:
44:35:59:7d:a7:3c:e6:6c:8a:d3:8b:80:dd:15:0f:
c6:1f:f3:53:c1:87:84:4d:98:ad:60:85:2f:40:23:
53:e6:7a:53:54:5f:91:ce:32:c4:af:2c:32:25:eb:
03:0d:23:61:6c:1a:1d:67:bf:b4:c6:18:2c:fc:55:
b8:9d:bc:4c:83:79:bb:49:cb:22:a2:f7:3e:58:e4:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:11:08:23:82:76:9D:F5:F8:3D:3E:2B:4A:2E:3B:D9:A8:4B:2A
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/UZYRCCOCdp31-D0-K0ouO9moSyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
30:93:7d:78:7e:4a:0c:ac:8d:38:17:4e:cb:a9:89:f9:fc:25:
56:7c:12:a0:22:2f:b6:cd:05:ae:cf:af:c2:c2:a5:76:13:b9:
c3:26:4b:d1:79:1a:5c:52:62:63:62:42:ef:01:db:b5:0a:ac:
cb:fd:51:4c:8b:9f:3b:b6:50:6d:41:93:88:7c:5e:21:23:08:
50:6b:00:4b:23:55:cc:dd:63:81:3a:8b:20:77:50:ef:31:02:
bf:46:9d:f9:56:63:01:22:19:c2:4d:49:85:73:19:46:90:6b:
ca:0a:47:84:94:46:ac:71:48:76:47:d6:07:93:80:28:8c:87:
f0:ba:ca:32:fd:fd:2e:f8:f0:ef:78:79:17:e3:40:63:e7:eb:
c7:f2:20:f1:6f:b0:e4:18:81:1b:71:bc:07:a3:a9:4c:df:03:
9d:18:10:77:aa:8c:2b:61:97:96:6f:37:3f:c8:2d:5d:28:b0:
a1:18:e6:b7:9e:8d:af:ea:a1:f5:a2:86:ba:ef:fd:dc:80:54:
d2:c9:04:23:07:5f:95:dd:ec:0a:25:12:65:f0:eb:b3:77:fc:
87:28:90:ed:f0:a3:63:d2:61:16:ae:08:27:95:2b:4c:b1:73:
9b:25:8d:07:0d:d0:ba:ed:22:3b:45:b0:43:48:26:e1:c9:e0:
80:7f:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:11 2025 by rpki-client