Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UqrmIiFONetmreE4V9T46wuRCv4.roa
File: UqrmIiFONetmreE4V9T46wuRCv4.roa (raw, json)
Hash identifier: dsIhzoQJb3pjVrfcvnfTDIFiEalDb2HH7LhkPFZU1BM=
Subject key identifier: 52:AA:E6:22:21:4E:35:EB:66:AD:E1:38:57:D4:F8:EB:0B:91:0A:FE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCADAB461571A4E836F28C1FE7C300A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UqrmIiFONetmreE4V9T46wuRCv4.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
192.71.255.0/24 maxlen: 24
192.71.254.0/23 maxlen: 23
192.71.84.0/24 maxlen: 24
2a01:280:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:da:b4:61:57:1a:4e:83:6f:28:c1:fe:7c:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52aae622214e35eb66ade13857d4f8eb0b910afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ed:a5:c4:dd:1c:83:74:d2:e3:f9:c1:11:5d:
17:8b:70:f1:3b:a1:0c:bc:7a:5e:ed:b8:2d:86:7b:
92:06:19:5a:41:75:ac:76:68:91:30:c2:af:f1:fe:
a3:ad:31:b3:43:e8:a6:19:ef:fb:d4:03:2e:6c:c5:
25:50:5f:74:9e:eb:aa:a8:1d:00:c2:47:16:5f:e0:
a7:06:f6:d8:aa:c4:0d:31:4f:42:4d:c7:90:fb:76:
db:46:2b:4f:d7:30:bc:b8:16:47:ea:39:98:76:70:
f2:4e:b2:75:2e:97:eb:bf:e0:14:03:f6:d7:70:2d:
1f:51:91:9d:c6:f5:db:d9:06:f4:dc:f8:df:34:de:
e3:4a:27:aa:83:43:a4:eb:1c:b2:97:83:3e:c6:8f:
fc:9b:08:df:d7:ae:b1:25:cc:f9:fd:ff:29:c3:54:
01:21:67:66:d4:1c:8a:e9:fb:15:dc:b6:c0:c6:ae:
0c:f8:7a:cd:3d:df:c2:f8:aa:4b:b0:7a:11:cf:5c:
5b:22:ea:0e:82:32:0b:02:13:40:33:5d:aa:4a:15:
24:b6:32:89:68:24:93:55:d2:5d:66:e0:50:75:45:
69:4e:2c:bd:58:94:ca:cd:ac:89:01:3f:3b:12:bc:
d4:7e:a9:5c:44:15:d3:d4:89:87:1d:22:3b:33:bc:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:E6:22:21:4E:35:EB:66:AD:E1:38:57:D4:F8:EB:0B:91:0A:FE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UqrmIiFONetmreE4V9T46wuRCv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
193.234.120.0/22
IPv6:
2a01:280:6::/48
Signature Algorithm: sha256WithRSAEncryption
04:0c:4e:0c:b3:68:f8:c0:a0:7b:06:2d:29:ce:e3:a4:48:c7:
22:de:c5:c4:30:27:98:89:12:b8:05:94:23:98:7d:43:5c:b9:
d6:56:17:e2:a7:f1:47:9f:dd:b7:34:46:3c:93:d8:bf:6c:70:
e8:ba:34:18:8e:08:4b:00:ee:a0:97:0f:a2:a6:02:0a:02:0d:
97:08:0c:1a:0d:71:dd:19:60:5b:0b:f2:86:d5:21:e1:f0:cf:
05:b4:22:a8:37:4a:5c:37:bf:72:b4:61:bf:9f:dd:69:78:03:
e2:a0:d9:79:40:7d:cf:5b:0b:3b:e1:b7:4d:95:80:69:c7:76:
b9:89:33:56:65:a8:08:b0:4c:52:06:5a:44:08:dd:25:c2:69:
01:2c:59:1f:0b:2f:4c:3e:aa:29:0c:b1:71:47:05:ee:15:99:
b1:ad:7b:c2:c8:38:b6:84:b8:c1:5a:d7:c8:88:32:43:91:55:
03:28:02:df:dc:9e:8c:a1:8f:4f:6e:ea:4c:00:6b:8b:fd:1c:
27:6d:0e:24:0d:e4:f7:1c:7c:01:54:1a:50:79:65:76:e0:4c:
bb:7a:5c:69:08:b6:18:d9:a5:a1:7a:4d:2c:90:7e:dc:23:4e:
08:34:7f:9b:1f:ad:67:0b:1c:c3:2c:18:a5:c7:c3:48:38:1e:
b3:6d:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:31 2025 by rpki-client