Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa
File: UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa (raw, json)
Hash identifier: w2NgkcuN94Xx5R//F5y8tH9BigJFM6CvwmbfE3uz9KQ=
Subject key identifier: 53:09:CF:C0:72:5B:D8:03:F6:2C:F5:AD:D2:AD:56:6D:CB:7A:89:1E
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 0189CF4BCC32693C9380900C8A8E55DD6E07
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa
Signing time: Mon 07 Aug 2023 09:19:58 +0000
ROA not before: Mon 07 Aug 2023 09:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21320
IP address blocks: 83.97.88.0/21 maxlen: 21
2001:799::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:4b:cc:32:69:3c:93:80:90:0c:8a:8e:55:dd:6e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Aug 7 09:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5309cfc0725bd803f62cf5add2ad566dcb7a891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:00:4c:f3:74:06:a1:09:7c:f8:9e:b5:2e:
b6:00:7c:30:3a:09:00:cd:51:17:c6:1e:0d:af:c6:
bb:9e:c9:1a:0d:cf:b6:13:a0:ec:52:e6:1d:a7:1d:
41:d8:fb:70:04:7f:33:ec:f6:48:40:4d:90:62:bd:
f7:1c:0f:5b:51:4c:6a:e3:d4:9b:ca:37:a5:a0:57:
33:0f:b4:d6:20:d8:21:f8:47:3b:6a:ca:eb:bd:0b:
3c:2e:57:b5:89:f6:aa:e9:fd:5e:44:39:60:d7:21:
f0:07:54:f7:87:d0:22:bc:c1:54:08:58:39:4d:0c:
2c:98:cb:84:58:1a:46:97:9d:ee:88:11:b8:92:56:
d9:74:a2:d3:28:8c:e7:2f:ef:86:6f:2a:c7:b6:82:
d8:c1:c0:8a:4f:2d:c6:01:60:37:dd:75:ea:59:a7:
70:10:8b:92:7a:da:01:e0:16:7f:50:14:1a:a8:64:
3d:c7:a2:00:70:42:3a:5c:b5:a5:3d:42:3a:39:3d:
a9:db:5d:3b:1f:3e:55:80:0e:1b:d4:e5:6d:f7:d3:
ad:f2:be:1c:99:12:79:65:76:27:7f:3a:b2:83:1a:
c2:1e:f0:7f:1a:f7:37:83:a2:ed:82:9d:84:5f:e0:
c5:67:4f:d0:34:c0:ae:78:0f:48:a3:99:bf:22:ac:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:CF:C0:72:5B:D8:03:F6:2C:F5:AD:D2:AD:56:6D:CB:7A:89:1E
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.88.0/21
IPv6:
2001:799::/32
Signature Algorithm: sha256WithRSAEncryption
65:42:d4:0c:fa:c3:65:17:a3:38:d4:83:63:df:8b:59:c8:d5:
6e:4c:cb:08:81:62:e6:6c:ff:9b:4d:de:c8:f4:68:71:7e:e9:
15:f8:f0:7a:6d:29:2b:d1:80:9d:d5:55:16:86:88:04:ad:02:
2a:44:2e:f7:6a:e4:a6:41:72:f3:8b:23:e9:f0:4d:0c:b4:fa:
9b:84:84:fe:6c:cb:7f:97:b9:e9:45:8c:9a:b6:e3:38:87:34:
f3:29:18:a7:2d:a8:1a:17:49:1a:c6:1c:6d:ed:ce:72:d6:77:
df:ce:3d:11:c0:60:7d:73:51:1e:b8:17:57:32:e4:f9:91:47:
72:74:73:3b:38:ad:bb:5d:62:8c:22:3e:b4:e8:f4:6a:c8:e0:
66:49:7d:3a:b9:2f:2e:bd:c2:c8:32:a4:5a:50:92:95:6d:b7:
b4:d1:7c:32:65:5c:4e:ef:e0:8e:b4:4b:10:29:10:8a:13:fa:
23:69:05:4e:9c:80:6a:f8:9c:55:60:dc:ab:62:0d:cb:3a:5a:
b5:ad:cf:27:bd:f2:f5:76:0c:79:f7:88:77:3d:47:fe:94:c1:
ab:dd:1d:0b:98:50:69:02:12:82:5a:92:d1:ad:7b:bd:4b:d4:
ab:02:c8:3f:97:28:3e:d8:3c:d8:bd:5a:7b:ae:cf:4f:6f:b0:
c2:d0:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:57 2025 by rpki-client