Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Ukc-SVOMzao1C2u7Jq7UIE1l4i4.roa
File: Ukc-SVOMzao1C2u7Jq7UIE1l4i4.roa (raw, json)
Hash identifier: wArPOMO6nPRoJxnnRcup1yam/J8YG0Dfq1nPIH4ITXk=
Subject key identifier: 52:47:3E:49:53:8C:CD:AA:35:0B:6B:BB:26:AE:D4:20:4D:65:E2:2E
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018AEACD55BA8779C31B01200CA70297C155
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Ukc-SVOMzao1C2u7Jq7UIE1l4i4.roa
Signing time: Sun 01 Oct 2023 10:33:59 +0000
ROA not before: Sun 01 Oct 2023 10:33:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51714
IP address blocks: 193.38.248.0/24 maxlen: 24
185.236.10.0/24 maxlen: 24
192.144.33.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:cd:55:ba:87:79:c3:1b:01:20:0c:a7:02:97:c1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Oct 1 10:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52473e49538ccdaa350b6bbb26aed4204d65e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:62:8e:9e:21:e2:6f:30:f1:52:62:02:59:
15:fb:ae:4a:25:36:1a:b2:61:92:e0:c2:7b:06:cc:
b3:d1:bc:6b:25:19:5c:78:81:a0:96:57:ca:d1:6c:
e1:f6:1b:84:d8:0e:4d:62:72:3f:50:a9:94:2d:e1:
7d:c1:74:af:1e:a5:5e:e6:f5:a9:bb:ad:6a:2a:fc:
09:17:5f:40:0e:92:35:5c:6b:62:68:de:7b:59:07:
75:5f:55:df:69:fd:f6:cc:e5:0c:18:b2:8a:f5:ad:
c7:01:7b:92:29:9e:31:67:3e:4c:bc:5b:e3:f9:fa:
5e:0e:eb:77:44:20:40:ee:4a:4f:d7:5b:3f:cf:52:
19:20:0a:76:ce:30:0c:d1:59:0c:73:1d:f2:57:11:
7a:f2:b9:41:a1:51:7b:f3:25:f9:91:3b:56:a2:ba:
0d:70:7e:ed:2b:fa:42:3f:69:eb:27:5e:ea:7b:24:
5b:35:7a:af:65:8c:5b:65:51:98:f5:c3:6e:7e:36:
5c:81:9f:c2:c0:f4:f9:68:6b:ea:37:ca:fd:46:13:
44:87:1a:94:79:fa:ee:dc:97:18:c0:83:1c:da:38:
b2:8f:e5:7c:dd:35:b0:8d:84:60:e8:2e:e9:7d:b7:
e9:56:53:19:31:f8:e2:b6:eb:ce:61:c9:62:a1:ca:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:47:3E:49:53:8C:CD:AA:35:0B:6B:BB:26:AE:D4:20:4D:65:E2:2E
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Ukc-SVOMzao1C2u7Jq7UIE1l4i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.10.0/24
192.144.33.0-192.144.34.255
193.38.248.0/24
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
9c:21:9e:db:b6:5e:1b:8f:df:1a:b5:51:22:bc:6f:02:6c:66:
9f:58:22:f3:76:ba:67:59:fe:ed:e5:04:60:3b:da:09:38:b4:
61:d3:48:55:46:b6:b7:f5:a0:c3:30:69:82:ff:58:f4:5c:c3:
60:35:bb:6a:e2:7d:b3:4f:ff:ed:5a:cd:1c:80:ce:e9:f7:0e:
34:f3:32:16:9f:1a:be:78:7f:9d:fe:0f:51:a9:c3:41:49:58:
6a:78:c2:fa:08:73:85:f1:cf:64:6f:21:95:c0:45:86:f0:42:
21:b5:49:1a:ab:62:da:cc:32:01:2e:b9:55:a8:8f:6d:8d:a9:
49:9d:99:6a:bf:ff:a5:4e:38:87:4f:5c:b6:05:3a:0d:0d:d0:
f5:1a:87:6f:50:30:03:20:9e:85:67:3d:ad:69:27:62:88:cc:
bd:08:47:08:98:ce:47:18:b2:a4:b9:23:13:d6:c6:f3:e1:75:
33:d4:27:d4:9c:95:9c:cb:47:ae:56:bf:73:3d:53:a6:37:9f:
7b:12:4b:3a:c6:60:ad:9d:c0:f6:6c:09:d9:4b:12:54:bc:27:
e6:0e:30:53:3d:0c:a1:8a:ff:ab:49:6b:91:c6:25:bc:39:a7:
14:9b:5e:3d:ca:9f:db:19:54:b2:ec:0a:3f:dc:2c:42:d6:11:
8d:9e:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:19 2025 by rpki-client