Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/jYQZU6oLuY_e5WDxhDLXEBFk_uk.roa
File: jYQZU6oLuY_e5WDxhDLXEBFk_uk.roa (raw, json)
Hash identifier: s+zuPiJKCIOkwnpJCxS4eUpOgUBBleOUKzaYXjxDsYE=
Subject key identifier: 8D:84:19:53:AA:0B:B9:8F:DE:E5:60:F1:84:32:D7:10:11:64:FE:E9
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0C435A89
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/jYQZU6oLuY_e5WDxhDLXEBFk_uk.roa
Signing time: Sat 14 May 2022 20:53:41 +0000
ROA not before: Sat 14 May 2022 20:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205376
IP address blocks: 193.141.67.0/24 maxlen: 24
194.120.16.0/23 maxlen: 23
2001:67c:2e58::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205740681 (0xc435a89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: May 14 20:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d841953aa0bb98fdee560f18432d7101164fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:93:20:b3:42:ca:13:41:52:44:8f:a5:b6:
94:1d:66:06:ef:55:3c:91:14:e5:19:19:60:14:54:
f6:10:bd:a3:de:f5:71:20:b0:7b:bd:ae:69:fb:90:
f7:76:a5:85:22:3f:13:34:60:31:aa:1f:98:39:39:
34:a0:c0:f3:aa:49:02:b7:37:71:0a:80:6a:43:3e:
f5:f7:99:e3:eb:1d:b3:f9:1e:8e:7f:6d:55:68:3c:
06:2c:3a:3b:a9:7f:64:75:c7:37:9a:ef:7f:21:42:
1b:d8:90:bb:ae:a5:66:df:02:29:8c:40:c5:63:34:
d7:2c:6f:81:15:7c:04:6f:22:c1:53:69:47:91:dd:
71:8b:4c:6e:09:cb:b6:3d:d9:8c:85:80:e0:27:15:
ab:cc:1c:dd:df:18:73:9a:4d:35:dc:c7:0f:85:3d:
81:4f:d2:8e:6d:aa:30:c7:e3:b0:e1:17:c0:8b:4c:
83:39:23:16:90:bb:d3:73:04:e9:80:1c:f7:17:7f:
29:50:11:69:04:10:a9:f3:98:49:3d:06:50:0e:d2:
41:1b:4b:f2:f9:e1:f7:2b:48:d8:50:b4:5f:f2:ff:
ae:04:2f:c7:90:59:83:4a:c3:ac:ae:e8:56:03:74:
40:be:5a:4f:ef:50:f6:23:57:17:8a:be:83:63:4f:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:19:53:AA:0B:B9:8F:DE:E5:60:F1:84:32:D7:10:11:64:FE:E9
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/jYQZU6oLuY_e5WDxhDLXEBFk_uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.67.0/24
194.120.16.0/23
IPv6:
2001:67c:2e58::/48
Signature Algorithm: sha256WithRSAEncryption
09:13:91:b1:8f:7d:3e:dd:82:be:45:97:df:fd:5f:ff:32:dc:
ce:b4:89:8a:e9:31:fd:29:91:27:22:74:98:3f:79:ab:cc:ac:
64:cc:4f:d7:38:65:40:d1:c1:75:3d:70:6e:f6:ab:c2:f6:98:
44:23:23:5a:2b:a8:f7:ec:cf:af:bb:1d:86:9b:28:31:15:0c:
82:89:cd:ea:90:2d:f8:2e:90:aa:a3:8b:a7:1c:54:30:93:31:
c0:91:aa:fb:b3:cd:81:b9:ba:8f:f3:71:76:29:4e:b6:7c:37:
5c:63:55:ef:c2:ac:49:d5:c9:62:29:6c:41:59:96:3e:7c:1e:
50:1a:3b:bb:1a:94:2c:a0:29:ce:7f:f2:89:c2:35:4a:5a:40:
4b:2f:4f:45:0d:46:4e:20:00:8d:02:f4:0f:41:93:ef:92:19:
c4:51:01:6d:a7:56:fb:c5:eb:cd:fc:a0:8e:dc:7c:e8:8c:11:
d7:d5:bb:b5:ba:60:0a:fa:1a:31:ec:75:9c:fd:8c:08:d7:e9:
4b:89:b7:78:fa:95:6c:d5:2e:fc:69:18:ac:94:2d:bf:eb:3a:
ca:ae:44:c9:c6:c0:e9:3f:4e:87:cd:73:26:78:00:10:54:11:
4e:58:3c:c6:14:8e:84:b0:e8:e8:d1:d0:58:e9:df:1c:1b:00:
0d:44:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:44:28 2025 by rpki-client