Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uwx296Ln-R3LY9JgNA7SxvOdcJI.roa
File: uwx296Ln-R3LY9JgNA7SxvOdcJI.roa (raw, json)
Hash identifier: R0D90CrAq11SquF63T6wPSq8acjSsNHp4mWAiLXGuEA=
Subject key identifier: BB:0C:76:F7:A2:E7:F9:1D:CB:63:D2:60:34:0E:D2:C6:F3:9D:70:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B24171AF597A8E27B0BBC772499F6EB40
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uwx296Ln-R3LY9JgNA7SxvOdcJI.roa
Signing time: Thu 12 Oct 2023 13:32:55 +0000
ROA not before: Thu 12 Oct 2023 13:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 212.192.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:17:1a:f5:97:a8:e2:7b:0b:bc:77:24:99:f6:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 12 13:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0c76f7a2e7f91dcb63d260340ed2c6f39d7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:64:db:0b:4e:b1:6f:95:ec:63:33:6f:14:
13:8d:55:5e:d4:10:74:fd:7a:60:47:b5:ee:95:08:
56:79:55:ac:c0:db:66:bc:1f:54:3e:2c:84:9f:63:
e9:41:2e:c1:5a:0c:b5:71:a3:bd:9b:ee:29:50:d6:
e9:d8:51:15:58:c1:2a:3d:fe:32:65:68:fc:b3:cb:
d0:cb:fc:14:97:16:7a:09:77:00:e8:6a:e7:3e:0e:
57:48:c6:35:12:68:8e:43:08:1c:eb:18:bc:5f:03:
ce:c5:9c:76:60:8e:b7:d0:1b:c6:17:b3:e3:13:24:
b2:1a:c5:42:1e:20:f0:be:1f:0b:86:28:7f:af:3c:
7d:66:b9:58:44:c2:a4:06:17:00:32:21:12:f7:04:
85:e4:84:9f:c6:67:c5:0e:72:a3:e1:09:71:07:88:
9e:9b:89:3f:e2:2c:8d:8c:52:35:ad:09:f5:b8:ba:
3f:c9:a9:da:e3:8a:1d:42:15:8e:02:00:d4:82:99:
bc:c5:5a:36:ea:06:eb:a2:11:4c:a3:e9:74:11:51:
84:1b:e4:70:cf:be:bd:59:80:99:a3:67:7a:23:44:
60:7d:12:c2:79:bd:7c:9a:a5:5e:66:9b:74:5a:43:
14:8f:94:5e:ec:57:ee:11:35:dc:4b:e9:de:9f:fa:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:76:F7:A2:E7:F9:1D:CB:63:D2:60:34:0E:D2:C6:F3:9D:70:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uwx296Ln-R3LY9JgNA7SxvOdcJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.254.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9e:41:48:90:c5:83:d7:a6:a0:f6:16:94:11:0e:7f:21:26:
1c:55:9a:d2:12:e4:63:26:fb:06:68:02:5d:78:cd:5d:96:40:
ac:f1:cd:fb:7e:a5:61:1c:d3:db:fa:1b:45:1c:12:e7:90:ed:
bc:99:94:4b:4c:bb:53:f1:c2:bd:51:b3:f1:b4:0e:00:95:65:
ee:5e:96:d2:e1:79:a4:d7:ae:27:6a:05:93:01:2e:d7:30:4b:
d9:51:3b:2b:3c:71:40:9d:79:57:62:87:3e:70:db:f8:96:21:
88:07:27:a1:ef:6b:f7:2c:2e:41:17:0d:be:a4:c1:33:23:13:
1f:33:85:b5:f4:04:b1:c9:3b:9e:20:62:28:98:28:f3:8c:68:
e4:ab:dd:a3:5a:57:01:5a:d6:87:77:78:74:1c:2f:39:38:06:
99:12:a5:b8:64:08:c9:4f:04:25:9a:52:a3:c9:79:a2:2a:41:
fb:21:ae:d1:8a:5b:81:d9:c4:03:d9:2d:a7:34:96:7c:15:16:
a8:4f:9f:60:67:25:9a:ca:a7:fa:1e:89:96:12:f6:8d:c8:ec:
ac:8c:b2:f4:8a:4a:33:a7:2f:e9:2c:9d:92:f2:e6:b3:28:00:
38:e5:09:4c:83:98:c1:dc:df:b7:fd:dc:3d:b3:8f:f3:8c:ed:
c7:c5:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:49:31 2025 by rpki-client