Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UVDktZtwYsMhOHEvrPZkp-i8LXY.roa
File: UVDktZtwYsMhOHEvrPZkp-i8LXY.roa (raw, json)
Hash identifier: hpElCgh5dKkdry/xmrsSFMOGxTnJHrh88LJtSvpK7mc=
Subject key identifier: 51:50:E4:B5:9B:70:62:C3:21:38:71:2F:AC:F6:64:A7:E8:BC:2D:76
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018673F983D96D6C743D85BF519E5068E4E3
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UVDktZtwYsMhOHEvrPZkp-i8LXY.roa
Signing time: Tue 21 Feb 2023 12:36:17 +0000
ROA not before: Tue 21 Feb 2023 12:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:f9:83:d9:6d:6c:74:3d:85:bf:51:9e:50:68:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 21 12:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5150e4b59b7062c32138712facf664a7e8bc2d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:9d:ee:ac:20:82:a4:35:26:25:70:9d:cc:
0c:a5:df:a6:a1:e7:65:84:ee:d4:4e:36:0d:80:1b:
5b:c6:c9:22:35:ba:a7:16:ea:a7:71:4e:36:7b:f1:
36:cc:d5:42:34:2d:fc:33:d5:ae:37:61:16:3a:f2:
31:f6:6e:41:29:5b:2c:70:fc:02:5c:a6:21:ca:31:
6e:18:ad:0e:12:85:44:53:39:34:46:1d:f4:05:d4:
3f:10:44:52:70:42:10:1c:73:60:a5:d4:f6:16:de:
4c:83:47:48:43:90:a2:e7:21:44:60:c0:cd:59:83:
ff:3f:a0:d2:1c:c4:72:0c:80:6d:6d:8b:21:15:63:
70:d9:3e:1a:24:88:0e:48:e2:06:75:99:79:4d:03:
cc:df:26:dd:cd:ba:93:44:31:a6:25:ff:a7:b7:1e:
23:55:fa:a3:0f:25:b1:4b:ee:b8:f0:61:91:54:71:
d3:b9:2a:5f:9a:70:78:b2:b4:c2:e1:5d:58:28:b5:
75:d6:49:65:47:0a:02:a2:92:db:d3:33:ef:78:f8:
56:98:f8:24:3f:74:b3:41:e1:0e:9d:f8:da:91:fd:
d2:97:18:38:43:45:60:c3:ac:07:41:b5:7d:8b:3f:
bd:52:e6:81:4c:10:05:5b:8f:8a:e3:59:58:54:59:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:E4:B5:9B:70:62:C3:21:38:71:2F:AC:F6:64:A7:E8:BC:2D:76
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/UVDktZtwYsMhOHEvrPZkp-i8LXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f5:d8:a8:63:69:2b:cc:2d:6a:d5:fb:0a:75:a2:67:a7:81:
b5:64:78:d2:27:54:f6:9f:8f:eb:81:b5:30:e3:ec:9f:8b:56:
92:bc:75:64:e6:e7:82:04:95:90:0e:8d:c8:21:37:e5:ca:a0:
a6:d4:ff:39:97:50:98:3f:79:52:c4:e2:f2:34:21:80:85:26:
eb:e8:2e:27:65:0e:95:03:db:2d:03:1c:f2:81:94:44:a6:86:
bb:9e:d0:cf:5a:f5:39:0e:d9:b0:4e:10:83:51:30:29:70:ce:
14:12:fd:1b:c6:5c:d3:5f:35:a6:4b:47:e1:06:0a:36:7b:b2:
79:c4:0d:12:f6:ac:94:00:06:3b:36:20:b9:1a:71:05:c5:cb:
98:b1:f6:b0:5f:1d:39:48:de:98:2c:35:db:68:c9:5f:1e:e6:
a4:eb:44:f3:80:3f:ed:b3:00:42:9c:86:5f:dc:68:dc:75:d6:
1f:28:38:d2:98:d2:f4:63:8c:47:42:62:d3:67:1d:59:c4:9b:
e6:ef:c5:c6:cf:af:6d:44:29:95:50:cb:cb:c9:f4:e2:96:c6:
d8:34:1d:cb:f7:1d:92:11:04:23:47:9d:96:1b:55:a8:fe:ec:
e5:dc:bb:3f:2c:2d:fa:27:53:71:53:5d:e0:20:04:02:a6:2c:
95:1a:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:28 2025 by rpki-client