Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/U-MpoupbbI67yvrXHd-Kd15ybGk.roa
File: U-MpoupbbI67yvrXHd-Kd15ybGk.roa (raw, json)
Hash identifier: Gs0LDYB+PF8lUmd6pu+/JSK/BvQs0rE40AOn8aXRCl8=
Subject key identifier: 53:E3:29:A2:EA:5B:6C:8E:BB:CA:FA:D7:1D:DF:8A:77:5E:72:6C:69
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 56EC2C
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/U-MpoupbbI67yvrXHd-Kd15ybGk.roa
Signing time: Sat 01 Jan 2022 00:52:33 +0000
ROA not before: Sat 01 Jan 2022 00:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12539
IP address blocks: 212.122.84.0/22 maxlen: 22
212.122.82.0/23 maxlen: 23
212.122.94.0/24 maxlen: 24
212.122.64.0/24 maxlen: 24
212.122.66.0/23 maxlen: 23
212.122.78.0/24 maxlen: 24
212.122.76.0/23 maxlen: 23
212.122.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696556 (0x56ec2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jan 1 00:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53e329a2ea5b6c8ebbcafad71ddf8a775e726c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:5a:10:f6:92:a3:bd:ff:59:27:42:c9:f4:
52:62:30:9f:18:f3:e0:88:53:2b:ac:16:80:e3:19:
e8:29:dc:97:36:de:1d:21:00:41:c4:6b:ba:23:57:
c1:c2:f7:43:7f:95:83:c8:70:00:5e:83:40:2b:f4:
a6:b3:67:b8:d9:c3:62:5d:e1:97:05:13:93:2a:8e:
20:bc:bd:e7:e6:02:33:3e:01:4d:8b:d7:75:bf:63:
5d:d3:41:bc:63:e3:02:dd:cb:3f:b6:10:ff:d9:bc:
04:5c:06:c1:76:3a:a1:45:1f:b2:85:2c:42:10:e5:
36:3a:5b:c8:52:02:cb:ef:ae:34:14:06:0e:5c:dd:
59:d1:c0:c8:e9:f8:13:42:29:73:3a:19:81:75:f6:
eb:2f:3c:b0:7d:dc:9a:ab:88:a3:88:0b:77:a7:12:
bd:d5:67:30:11:f6:26:38:d9:d1:20:09:0b:22:19:
50:f5:4b:d3:6d:0e:70:30:f1:16:e9:bd:71:56:55:
18:cd:b8:66:50:44:27:a9:f3:b7:a3:cb:5d:ff:11:
e8:2c:24:49:b6:8b:52:cf:c2:db:a9:16:9f:0d:5b:
7d:a7:0f:8a:d5:be:e9:c5:e5:78:29:6c:e3:af:96:
d3:d9:b4:37:19:27:3a:27:1e:cf:c2:88:37:76:d3:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:29:A2:EA:5B:6C:8E:BB:CA:FA:D7:1D:DF:8A:77:5E:72:6C:69
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/U-MpoupbbI67yvrXHd-Kd15ybGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.64.0/24
212.122.66.0/23
212.122.74.0-212.122.78.255
212.122.82.0-212.122.87.255
212.122.94.0/24
Signature Algorithm: sha256WithRSAEncryption
18:70:fa:64:75:41:71:61:16:e4:49:cc:9e:df:62:44:d8:37:
7c:ee:a7:9d:3a:34:89:5e:27:a4:9f:53:dc:94:52:77:58:64:
22:8d:9b:77:0f:8d:58:25:7b:f5:a9:24:4f:da:90:c8:d1:f4:
37:47:0d:f8:38:3f:df:52:69:77:2f:c8:d9:96:a2:0c:c9:2b:
7e:e9:71:03:c2:c0:34:2d:de:0b:cd:42:bb:d8:e6:a0:41:56:
b6:62:3e:8d:c8:d4:fe:ed:af:46:a6:a0:9e:a7:08:c7:b0:1c:
69:83:e0:2b:ae:d5:87:4c:88:5a:fe:82:d0:29:c4:58:bc:88:
e7:57:92:7a:40:da:45:41:65:d8:fc:4d:2c:62:bd:0e:7f:48:
7a:1a:71:38:4b:9b:4c:4a:7c:57:95:68:bb:26:30:1c:00:99:
0d:29:55:4c:21:f6:c1:ec:9d:08:b4:06:6c:b1:c5:a2:d4:12:
5c:37:d5:c3:63:b5:d4:56:8f:cc:72:01:f2:cc:e4:91:70:38:
0d:9b:51:a3:91:a1:e1:85:df:9f:71:e3:97:80:f5:6f:d3:27:
a4:67:cb:eb:1c:00:80:28:af:72:21:83:da:7f:00:52:d8:90:
58:90:6c:82:e9:b6:e2:d3:8e:f8:75:b9:e5:84:1f:2e:69:e3:
55:5a:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:52 2025 by rpki-client