Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/uwG2qtWvkr9vcHK5DRfR8qzD5B0.roa
File: uwG2qtWvkr9vcHK5DRfR8qzD5B0.roa (raw, json)
Hash identifier: l6qAF+adDAJjok3d02e1qO0gwQymZxEdqr1kw26nIr0=
Subject key identifier: BB:01:B6:AA:D5:AF:92:BF:6F:70:72:B9:0D:17:D1:F2:AC:C3:E4:1D
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 01856F0B51C698EC33D75248B1BADC9E515F
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/uwG2qtWvkr9vcHK5DRfR8qzD5B0.roa
Signing time: Sun 01 Jan 2023 20:34:50 +0000
ROA not before: Sun 01 Jan 2023 20:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42691
IP address blocks: 192.109.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:51:c6:98:ec:33:d7:52:48:b1:ba:dc:9e:51:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Jan 1 20:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb01b6aad5af92bf6f7072b90d17d1f2acc3e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:93:79:ad:39:83:2c:28:79:28:dc:b5:8b:
fd:80:49:5a:bf:f3:5d:1d:84:98:a6:a6:6c:d7:f4:
33:7a:c7:a5:8e:3d:0f:be:3f:18:f2:91:7f:73:62:
39:cf:0d:f6:b3:b4:55:33:8c:31:b5:96:c1:09:86:
ee:2e:bb:3c:a6:bb:ba:53:84:43:86:5e:f5:0a:b6:
8c:2d:50:b9:09:2f:6b:9e:53:f8:d4:29:91:6d:bd:
2d:11:fc:d5:ce:83:b4:7b:41:80:b0:0f:9a:0b:07:
55:57:16:98:2b:19:2a:1f:2c:bf:13:ad:f0:de:2f:
bf:83:12:a2:0a:f2:1f:db:4a:dc:1e:ef:04:dd:5e:
95:57:6e:a0:c7:bc:01:e6:f3:af:ea:02:30:60:21:
18:7d:24:b8:a6:29:a1:b4:1e:16:74:f2:e7:66:9e:
43:af:b8:e4:63:a3:35:ae:a9:f9:f3:ce:6b:71:be:
b5:7a:38:74:cd:eb:c2:6f:39:d3:bd:ed:dc:c1:34:
87:6a:ad:62:b0:97:3c:5a:06:ee:39:3a:0b:22:19:
73:68:cb:7a:90:b6:3a:d1:30:51:b5:15:79:b2:78:
47:dc:54:fe:7c:b3:15:03:98:6a:af:7c:47:64:fa:
74:3d:2e:6e:1f:a1:eb:f2:e9:d7:47:cd:1e:ca:bb:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:B6:AA:D5:AF:92:BF:6F:70:72:B9:0D:17:D1:F2:AC:C3:E4:1D
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/uwG2qtWvkr9vcHK5DRfR8qzD5B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.246.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e7:fc:0f:3f:ad:5b:d3:a8:44:ef:84:0a:b9:75:d9:f8:44:
75:37:86:42:40:d4:51:1b:db:23:a1:e0:82:ed:b3:a5:8a:6b:
eb:93:3d:a7:0b:04:ce:6b:5d:b9:b8:0e:d5:0f:d0:f5:ea:95:
4b:f8:e8:80:fb:7e:51:5a:c4:16:57:27:76:2c:c3:10:4a:26:
5e:8e:7f:3f:7f:6d:ec:44:d4:35:77:be:f1:e5:f8:1d:95:68:
d1:5b:e4:07:ac:d6:26:dc:3b:9d:e5:4d:ee:84:30:f6:76:b8:
44:18:3e:ea:61:14:93:d3:b8:f0:69:8d:61:5f:4f:73:0d:46:
fa:9b:81:d9:44:a9:3d:8d:6a:4e:41:fb:91:5f:40:8e:7a:d1:
3c:c4:5a:87:5f:69:cf:ac:81:82:f0:d2:69:af:17:d4:82:52:
7d:ee:29:4d:29:79:d8:48:61:9a:e9:46:e6:fc:2b:0e:a1:b9:
b6:2f:31:c5:3e:46:53:7d:61:63:bf:e5:4a:e2:13:c3:d0:25:
ab:e3:ce:93:db:a2:94:69:cb:7a:1f:d2:34:77:53:e2:31:48:
07:51:6a:13:84:72:00:70:f8:ad:12:f6:c9:47:8e:e4:6d:4b:
9f:a3:ea:5a:1d:fc:51:99:bb:9a:09:25:37:48:91:71:5e:77:
e4:cf:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:12:01 2025 by rpki-client