Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/UhJQpYe_luJLzQWhWMlB7yuUpSU.roa
File: UhJQpYe_luJLzQWhWMlB7yuUpSU.roa (raw, json)
Hash identifier: sFO2J9y+1RMocPdWwHdp8x6cLPFP+il3ijVqMJwRbzI=
Subject key identifier: 52:12:50:A5:87:BF:96:E2:4B:CD:05:A1:58:C9:41:EF:2B:94:A5:25
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 018C1ADF7623ACB0C3981EAFFAA27E699085
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/UhJQpYe_luJLzQWhWMlB7yuUpSU.roa
Signing time: Wed 29 Nov 2023 11:38:21 +0000
ROA not before: Wed 29 Nov 2023 11:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201641
IP address blocks: 194.15.212.0/24 maxlen: 24
185.102.100.0/22 maxlen: 24
2a10:a600:c0db::/48 maxlen: 48
2a10:a600:c0da::/48 maxlen: 48
2001:67c:6e8::/48 maxlen: 48
2a10:a600::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:df:76:23:ac:b0:c3:98:1e:af:fa:a2:7e:69:90:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Nov 29 11:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=521250a587bf96e24bcd05a158c941ef2b94a525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:87:8d:e9:d2:d2:6d:ba:e6:e4:3c:60:d5:
8f:00:b2:fd:c7:f9:f2:84:99:1f:02:8c:48:d4:49:
56:29:bc:aa:72:8a:6d:e8:e6:72:65:c0:3c:a2:39:
3e:36:7f:44:34:09:e0:50:c3:5d:ca:00:01:e6:a5:
d5:21:41:ea:3c:e7:ea:17:9c:db:ba:92:4b:b2:dc:
88:c6:07:b3:7e:b0:dd:64:da:4e:db:70:fe:40:20:
3c:b8:b4:3f:3f:a7:5d:d9:36:43:5e:c2:a3:5d:62:
ae:32:4e:82:97:f2:ec:1f:4d:6c:4f:ba:6e:77:f6:
52:88:5b:f7:c5:b4:09:a9:ab:a6:67:78:9b:24:3c:
22:9b:07:8d:c6:1c:9d:11:ba:d5:d4:1d:29:6f:38:
11:07:ef:06:b1:06:82:01:41:b9:68:52:15:dd:00:
5d:12:e2:5d:e8:64:64:4c:47:2a:7a:9b:0f:df:95:
fd:ce:36:19:01:ed:e2:00:73:60:31:fd:eb:8f:5d:
47:eb:53:79:7d:86:eb:b9:e7:31:21:d9:e3:b9:b6:
9b:28:04:65:01:95:1a:c9:cf:4f:a2:ed:d2:bb:76:
47:29:47:9d:87:20:f0:78:c9:f1:b1:6a:79:28:23:
19:c5:04:0a:0d:c5:ab:61:02:aa:7c:c8:a8:6e:df:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:50:A5:87:BF:96:E2:4B:CD:05:A1:58:C9:41:EF:2B:94:A5:25
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/UhJQpYe_luJLzQWhWMlB7yuUpSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.100.0/22
194.15.212.0/24
IPv6:
2001:67c:6e8::/48
2a10:a600::/32
Signature Algorithm: sha256WithRSAEncryption
43:28:69:61:b0:e5:4c:18:16:24:b6:f6:78:5c:92:02:2f:61:
79:bc:90:97:2b:39:45:92:63:57:9f:23:c8:5c:3b:9e:be:85:
a6:2f:73:8b:71:87:b6:98:80:88:ab:a8:89:46:c6:10:97:c0:
5f:73:a6:a5:b3:f6:c3:a6:91:e0:5b:18:22:22:12:f3:b0:be:
ad:79:cc:b3:4c:59:54:f8:06:3e:9f:38:93:cd:e9:bc:ea:8f:
a4:bf:03:8a:ad:ee:4d:01:bd:51:78:0c:71:6e:96:d9:5a:66:
0d:e5:ec:2e:7a:98:96:aa:12:bb:f0:6a:dd:ba:54:51:44:00:
e3:d8:71:d5:0c:23:60:2a:67:04:f6:39:3b:e0:c9:f7:95:a7:
f5:a2:ca:c2:9f:b9:bc:21:c0:cb:a7:49:19:b7:61:2a:a9:7a:
24:2f:ba:01:47:5b:04:cf:31:67:71:83:c6:a8:dc:17:48:60:
9c:bd:f3:6c:71:ae:59:6d:70:ee:05:d8:8d:f2:b8:63:c1:a6:
b7:dc:95:34:df:71:0a:ac:ba:f5:ab:42:ef:ff:0f:12:a4:db:
96:1d:9a:c2:d0:e6:88:f0:be:66:b7:c9:1d:93:3d:ce:98:cc:
bf:1a:36:d3:67:c2:f1:0b:b4:f8:c8:e6:44:15:90:99:de:21:
c4:2d:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:32 2025 by rpki-client