Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/UxHxnQHtpDXNLwqOo5Ug1HLL7Wc.roa
File: UxHxnQHtpDXNLwqOo5Ug1HLL7Wc.roa (raw, json)
Hash identifier: 4D76Pj5YDHPRy8+Nk4h9EYJi1Ai7/8DXAT6FOfw9SYA=
Subject key identifier: 53:11:F1:9D:01:ED:A4:35:CD:2F:0A:8E:A3:95:20:D4:72:CB:ED:67
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 0186B87B197003BF03E9BBB1DCBE058C6CA4
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/UxHxnQHtpDXNLwqOo5Ug1HLL7Wc.roa
Signing time: Mon 06 Mar 2023 19:52:00 +0000
ROA not before: Mon 06 Mar 2023 19:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20722
IP address blocks: 85.204.44.0/24 maxlen: 24
194.102.188.0/24 maxlen: 24
185.88.130.0/23 maxlen: 23
185.88.131.0/24 maxlen: 24
85.204.56.0/21 maxlen: 21
85.204.56.0/24 maxlen: 24
85.204.57.0/24 maxlen: 24
85.204.58.0/24 maxlen: 24
85.204.59.0/24 maxlen: 24
85.204.60.0/24 maxlen: 24
85.204.61.0/24 maxlen: 24
85.204.62.0/24 maxlen: 24
85.204.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:7b:19:70:03:bf:03:e9:bb:b1:dc:be:05:8c:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Mar 6 19:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5311f19d01eda435cd2f0a8ea39520d472cbed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:6c:4c:f4:40:9d:e5:ae:61:4a:9b:d2:5d:
65:05:0c:ff:a2:1b:68:4f:5b:ea:28:f0:fb:28:38:
46:b0:f4:ce:6c:d1:b0:1c:48:37:df:40:2e:7d:0b:
2a:00:0c:2d:8d:09:c8:be:87:aa:d1:b8:e4:42:f3:
84:27:dd:46:56:54:8f:68:05:9d:b6:f3:e1:de:43:
76:53:0d:0a:91:74:b9:fa:f2:29:cc:8f:7b:a0:de:
32:d9:f8:32:8c:ad:61:8d:50:1b:ee:de:e2:62:15:
01:f2:51:84:d5:7b:ca:d2:0f:5d:6a:6d:ab:41:fa:
c4:ac:46:0a:63:21:a8:9d:5c:b8:ba:0d:74:ae:7c:
ef:4f:4b:00:08:f6:9e:b4:cd:9a:9f:5d:a1:91:94:
23:5d:54:8d:fe:b6:3e:b9:ac:60:e9:07:8e:88:5c:
14:f7:7a:df:81:a6:e8:05:58:09:dc:f6:fe:c7:59:
b8:70:10:7b:b2:82:35:8b:15:a0:3f:55:22:66:8c:
bd:0a:4c:c0:4d:cc:1c:4d:c7:b1:46:86:d7:91:7a:
22:f4:77:1a:1a:c2:66:d7:2a:bb:a0:9e:c8:02:bd:
d5:b8:5d:38:33:9a:00:fb:03:b1:59:ce:c6:d9:ad:
4b:ac:6c:a6:64:dc:a7:82:71:c0:33:8d:59:72:9a:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:F1:9D:01:ED:A4:35:CD:2F:0A:8E:A3:95:20:D4:72:CB:ED:67
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/UxHxnQHtpDXNLwqOo5Ug1HLL7Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.44.0/24
85.204.56.0/21
185.88.130.0/23
194.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5e:ff:e2:1d:22:37:09:6a:a6:72:d7:f7:aa:56:77:a1:ac:
9a:ed:19:33:e5:f4:84:99:17:53:7b:40:05:ab:91:40:42:34:
2d:70:61:01:2d:be:7d:88:91:91:74:fd:2e:62:4d:8f:c6:04:
e6:d4:3a:3d:70:e2:59:b4:2b:cd:da:b8:2f:e2:85:97:9a:26:
7f:0e:4f:63:70:f6:04:f2:cf:52:ad:8d:54:e8:63:f7:aa:18:
a4:7f:fb:6c:7c:e2:63:32:73:50:73:43:8d:46:c0:18:4d:82:
1e:99:61:8e:ed:0f:b8:2f:26:81:70:cd:49:fb:e6:4c:5e:bb:
64:65:19:5f:75:4c:c6:8f:e1:cd:c2:e3:55:c4:e6:52:aa:6a:
c7:5b:2b:3b:27:84:cc:11:c2:de:77:4c:24:97:b7:33:57:35:
ee:fc:8e:e1:57:46:72:67:12:c7:7b:99:10:72:32:2f:85:bd:
31:48:32:ae:2e:4c:6c:9a:b6:a6:a3:30:7a:e9:1a:27:33:d8:
5f:86:4e:33:b9:5e:a6:d9:06:b5:d4:31:e7:08:f6:00:da:9b:
17:18:e6:17:01:06:f6:34:7d:fb:e8:cc:0c:09:44:40:f3:f3:
a2:58:aa:a3:49:d3:9b:86:15:22:56:41:dd:50:57:d2:74:37:
c4:44:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:57:06 2025 by rpki-client