Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Ufa7sXOCttEAsw13m5i7rVtnA1E.roa
File: Ufa7sXOCttEAsw13m5i7rVtnA1E.roa (raw, json)
Hash identifier: +7mck5bA0M02Q5Qujxt4Q5W2M4/yvDUJ+hiLr2hnS28=
Subject key identifier: 51:F6:BB:B1:73:82:B6:D1:00:B3:0D:77:9B:98:BB:AD:5B:67:03:51
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 0189636F64100DC0EFDDBE03C2967A5C6784
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Ufa7sXOCttEAsw13m5i7rVtnA1E.roa
Signing time: Mon 17 Jul 2023 10:39:51 +0000
ROA not before: Mon 17 Jul 2023 10:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.54.231.0/24 maxlen: 24
185.54.229.0/24 maxlen: 24
95.142.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:6f:64:10:0d:c0:ef:dd:be:03:c2:96:7a:5c:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jul 17 10:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f6bbb17382b6d100b30d779b98bbad5b670351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:d0:75:27:0d:af:4f:77:68:4a:c1:99:ba:
55:3b:e5:ca:f0:3b:6e:04:1b:1d:b3:7c:16:8f:44:
27:66:62:b9:4e:2c:72:2b:b3:db:39:56:2a:39:0f:
69:ef:9f:91:b2:95:3e:c3:5a:8a:7d:df:f5:a9:4d:
96:8c:93:20:49:80:9d:55:8c:9e:17:84:5c:36:43:
e9:a1:c4:e3:0f:b4:fc:4a:34:7c:fa:fe:6a:27:a0:
92:13:8f:99:5a:24:73:db:e9:a7:9e:31:d2:ac:0f:
f6:8f:8a:b2:f7:c6:92:af:8f:44:68:e5:6e:42:72:
eb:60:cb:c4:6c:94:9e:3c:6a:14:e1:cd:c2:a5:99:
58:ad:25:c7:f5:e9:24:bf:2d:90:18:22:90:ed:40:
7c:6a:3f:60:c1:22:c3:50:e7:96:a7:39:6c:0a:b5:
3f:d7:8b:34:4e:25:19:26:3a:4d:40:13:6f:28:22:
04:99:40:5d:cf:d2:66:c7:81:aa:89:53:bc:a3:90:
4e:5b:d3:5e:14:97:cd:02:f4:3d:ed:00:2e:f3:c9:
8c:91:c9:46:b5:59:1d:e3:6e:6b:ee:65:0d:58:ff:
7c:fa:8c:f4:5a:55:84:9f:d5:86:53:ba:0e:15:3b:
76:b0:4d:94:62:ee:a8:2a:59:89:7e:a7:e5:26:ff:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:BB:B1:73:82:B6:D1:00:B3:0D:77:9B:98:BB:AD:5B:67:03:51
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/Ufa7sXOCttEAsw13m5i7rVtnA1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.120.0/24
185.54.229.0/24
185.54.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1d:a5:6a:81:72:a5:43:d7:21:08:e0:49:63:ad:b4:4e:39:
8d:c7:28:b1:e6:93:65:58:22:b8:83:9e:c3:a0:8c:bd:b2:81:
b3:07:64:47:e9:18:bd:d2:64:7a:97:f5:c6:86:8f:ce:46:45:
f6:75:65:22:39:a8:ed:81:84:43:3d:3c:fc:ae:7b:16:30:4e:
ed:c8:e6:43:d0:80:b6:18:d6:84:37:29:47:74:5f:fd:07:a8:
6f:a6:55:d5:af:0b:1d:1e:e1:ea:38:9d:b1:5d:0b:44:0d:f8:
8b:c1:13:e9:ac:e7:6c:75:d3:07:24:e3:5c:6f:eb:19:70:aa:
19:9e:c9:2f:f1:cf:3b:65:f4:39:12:b6:ac:0e:b5:f7:4f:c3:
e7:c1:f5:0d:55:9f:21:2f:1d:7e:a0:9b:f1:36:fa:94:c5:ad:
6a:75:ff:03:1f:ff:08:64:3f:9f:13:a0:5f:f2:13:ad:c8:97:
f3:ad:40:75:a6:c7:64:ee:cc:14:70:cf:14:da:22:c5:6e:5c:
a3:3b:4d:1b:c3:15:5c:1b:b9:dd:fe:93:86:77:a5:3b:16:1c:
ef:38:45:9e:c9:e7:69:22:33:8e:e2:5a:1b:ee:46:91:0b:48:
31:ae:fb:39:ae:2a:07:d6:78:f6:1e:f6:38:11:18:23:2f:26:
0c:61:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:58 2025 by rpki-client