Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UTGuyuIA7yrfjIwwF4Me7IYMFo0.roa
File: UTGuyuIA7yrfjIwwF4Me7IYMFo0.roa (raw, json)
Hash identifier: gUfiMGrqQoh4fe0vxbwybn8YOeco6FBnA9AHh0d1xyQ=
Subject key identifier: 51:31:AE:CA:E2:00:EF:2A:DF:8C:8C:30:17:83:1E:EC:86:0C:16:8D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0188FD317287AFA8CDC20812A4221D3B150F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UTGuyuIA7yrfjIwwF4Me7IYMFo0.roa
Signing time: Tue 27 Jun 2023 14:10:56 +0000
ROA not before: Tue 27 Jun 2023 14:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:31:72:87:af:a8:cd:c2:08:12:a4:22:1d:3b:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 27 14:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5131aecae200ef2adf8c8c3017831eec860c168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:cf:54:7b:81:90:a0:67:5e:a3:f8:28:bf:
82:f5:0c:d8:75:af:c7:ff:ba:2e:1c:3e:ec:12:12:
ff:9a:a5:b2:d8:6f:b3:16:78:c6:74:6a:57:77:ba:
87:85:58:9d:66:22:04:7d:38:14:3b:d2:c6:d7:b2:
6f:48:9b:27:fa:80:29:fc:ce:5b:c3:ff:0e:c6:db:
56:68:8f:20:2a:c3:23:e3:fa:78:7d:d6:34:fd:3e:
7b:16:5f:6c:b7:06:8b:a4:b7:13:01:7d:e4:0a:ba:
9e:c2:18:15:99:e3:f9:54:78:b3:85:24:02:12:c3:
7d:81:23:9a:e7:4e:56:0d:5f:19:69:96:4d:0b:94:
93:41:2e:d6:a1:96:d4:41:e1:40:24:ab:cb:7f:70:
06:82:9c:91:3d:05:76:e3:7c:93:4d:7c:9b:8c:17:
ce:b4:43:98:f2:fb:f9:70:f3:83:bb:35:32:cf:59:
15:25:58:a5:e3:ba:75:85:c5:cb:5d:64:b9:c8:73:
ea:74:bf:3c:60:8f:b6:18:65:14:31:53:e1:29:87:
43:ef:ed:3b:7b:e9:3c:aa:3a:46:50:7b:80:53:a6:
58:28:37:e5:5e:f8:9b:73:a7:2a:d3:ab:a4:86:69:
77:9d:7e:0a:48:0b:39:68:6b:da:6f:0f:fa:d5:54:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:AE:CA:E2:00:EF:2A:DF:8C:8C:30:17:83:1E:EC:86:0C:16:8D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UTGuyuIA7yrfjIwwF4Me7IYMFo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
48:01:a6:8e:12:01:03:03:49:84:cf:7f:b2:35:b4:c6:25:70:
8e:1c:4a:49:6d:bb:56:31:57:65:7a:2f:77:83:38:ea:94:16:
2a:0d:b4:fc:76:91:86:60:63:78:a2:1b:3d:09:3d:01:5b:c5:
8c:91:5c:f1:1e:6d:46:a8:18:83:0b:a5:bb:0d:e2:47:5b:56:
6d:10:35:95:74:b8:e6:33:c4:00:26:5a:f5:5e:08:57:5e:f0:
df:32:87:d5:d2:33:fd:a1:b0:78:bf:73:db:04:d0:ad:da:5e:
6a:c9:3d:1e:b4:60:ac:ef:4b:65:7a:71:8c:37:1d:8c:6a:55:
97:f9:08:f4:5b:f6:29:e2:fb:3a:79:46:0f:0b:bb:25:ac:07:
ff:8c:11:95:f2:4a:b0:ec:16:6d:70:8f:bd:f2:6a:67:83:68:
c9:4c:9f:de:6d:5c:a2:3c:8d:16:84:94:21:e3:4e:21:b7:74:
d5:b4:65:90:f1:3f:49:6c:6c:9c:a4:9c:e6:a1:ef:27:d1:c0:
69:ba:e6:88:73:9b:41:a6:bd:57:47:6e:54:40:d0:43:99:fc:
6c:06:26:df:ed:68:c9:4a:4f:63:81:18:0f:c1:17:07:cf:59:
cb:d0:93:3b:5d:dc:3a:d9:3c:2a:d2:2c:80:c5:c1:89:33:30:
fa:a2:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:13 2025 by rpki-client