Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/UZE323NWaqmck9Pz8mZ1nuyU8sM.roa
File: UZE323NWaqmck9Pz8mZ1nuyU8sM.roa (raw, json)
Hash identifier: V8gso3CSmrBJpeAx8ZdSyWDd9EdxffN16Qq6q/EDAdc=
Subject key identifier: 51:91:37:DB:73:56:6A:A9:9C:93:D3:F3:F2:66:75:9E:EC:94:F2:C3
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01857002829B54064765B4DF17F7A102382E
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/UZE323NWaqmck9Pz8mZ1nuyU8sM.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60201
IP address blocks: 5.183.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:82:9b:54:06:47:65:b4:df:17:f7:a1:02:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=519137db73566aa99c93d3f3f266759eec94f2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:c0:88:ab:b4:26:41:e8:ff:33:eb:37:60:
ac:d5:48:24:e5:9a:ce:6c:be:06:d4:66:bc:c8:3a:
c6:5c:65:ec:d2:d7:f9:4d:13:ce:74:51:6d:c2:2d:
08:2f:51:4c:87:6c:d6:64:9a:bf:b2:37:46:c3:1d:
01:02:fb:d4:c1:1f:7b:22:16:a2:55:fb:4c:9a:89:
c0:4b:74:7c:47:b6:88:b2:76:42:c7:9e:3a:2c:23:
05:bc:f8:28:0d:5b:f5:37:2a:8d:f6:06:00:c8:e5:
f0:09:1b:11:a4:f1:f7:ae:35:9f:23:32:04:8c:5c:
78:bb:d6:98:eb:f5:fc:5c:d1:9e:2f:65:06:6f:11:
41:a7:bc:57:d7:7a:36:48:8b:6f:46:96:05:59:77:
eb:8d:63:8a:e3:0c:f7:fb:c3:7a:4f:9c:e6:01:d2:
cc:bc:08:a1:ba:76:d5:96:5d:7d:6f:6d:5d:aa:96:
a5:ba:69:27:03:24:06:bd:ef:57:2d:93:28:ad:70:
05:1e:0b:9e:20:6c:e5:81:79:52:0a:ed:fb:49:d5:
c4:44:5c:71:82:95:d6:26:a3:4b:39:bd:db:2d:af:
00:00:32:11:37:55:96:45:cc:ea:f7:be:8c:7f:75:
96:44:b4:15:0b:91:51:61:68:73:ae:c9:58:bf:73:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:37:DB:73:56:6A:A9:9C:93:D3:F3:F2:66:75:9E:EC:94:F2:C3
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/UZE323NWaqmck9Pz8mZ1nuyU8sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.168.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c4:e4:4d:9a:07:d5:60:86:8d:10:5f:68:7a:19:40:49:14:
29:5e:ce:ce:f6:79:59:23:bf:1a:d7:06:30:37:fc:5e:28:f1:
1d:9a:7c:38:40:dc:e4:83:d4:f4:80:16:ad:79:36:a6:ed:22:
00:18:0e:bb:10:14:13:1a:14:1c:3f:f6:42:8c:61:fa:e0:5c:
67:45:99:6a:39:99:1f:d6:8c:e3:58:0a:8d:9e:9c:a0:d3:07:
69:1e:7c:04:fe:9d:ee:1e:9b:d3:6a:49:52:79:20:c7:5e:c7:
25:4f:1d:26:6a:7c:c6:3f:51:96:91:f9:6a:04:ab:a9:a9:9d:
7d:27:a0:c4:07:57:e9:04:8b:2d:85:d3:02:23:82:8b:24:d1:
a6:e1:00:a8:7f:a8:3e:a6:a7:59:88:98:6f:44:f2:e4:6e:e9:
77:bc:a9:ec:6a:07:44:1c:ea:08:82:c9:33:94:58:5e:4c:1e:
b1:0d:75:b8:39:a0:e5:ff:4e:2f:86:c0:81:1a:bb:b4:78:17:
46:aa:93:fb:7b:0f:db:5e:8d:14:df:bc:eb:98:e1:92:f5:f0:
aa:26:54:32:74:58:01:cb:99:e8:73:cc:e3:17:aa:da:f9:22:
a7:cb:69:a6:16:93:df:21:ce:5d:e0:93:ed:4b:5b:41:1a:77:
46:37:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:02:42 2025 by rpki-client