Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UkDipcrslKCt12iw8madBjaC9oY.roa
File: UkDipcrslKCt12iw8madBjaC9oY.roa (raw, json)
Hash identifier: zZk+RyE+cMKgfgVuZK7ztoZtQBypqnGLo1E0Jemvqy0=
Subject key identifier: 52:40:E2:A5:CA:EC:94:A0:AD:D7:68:B0:F2:66:9D:06:36:82:F6:86
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0182D93FBDD7A7C736C88C7D70BFA9CE01FE
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UkDipcrslKCt12iw8madBjaC9oY.roa
Signing time: Fri 26 Aug 2022 08:23:29 +0000
ROA not before: Fri 26 Aug 2022 08:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2102123
IP address blocks: 195.244.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:3f:bd:d7:a7:c7:36:c8:8c:7d:70:bf:a9:ce:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Aug 26 08:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5240e2a5caec94a0add768b0f2669d063682f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:cb:6c:33:e2:6c:c8:bd:6b:af:7f:29:ba:
72:a0:1b:93:73:90:47:4c:f0:8d:28:5b:40:d6:12:
7d:e4:60:d8:ff:d0:d5:63:09:6d:a0:d0:99:5a:d1:
1e:6a:60:47:6c:74:56:b3:0e:b3:d5:4e:fc:31:b0:
67:cd:53:d2:a0:75:fe:79:2f:2b:89:e2:bc:e1:66:
84:5d:8a:61:9a:1b:45:b7:78:49:d4:8b:d6:d3:9e:
ab:0d:12:96:4a:74:0e:d8:19:e6:a9:c2:f2:02:29:
d5:f9:5a:c3:06:d3:d0:ad:c5:4a:24:40:4d:1c:4f:
7c:6d:12:dd:c4:a6:db:e1:6b:c8:16:cb:8e:a4:40:
a5:de:b8:2f:87:3b:99:77:fd:41:b1:f1:bf:15:76:
b7:3b:79:c6:a0:2f:7e:07:d7:0a:74:3e:91:6d:14:
8d:fd:81:ec:b8:62:45:43:3c:77:cd:74:bd:65:35:
fd:14:94:60:eb:95:fc:4d:ee:39:0b:9d:c1:84:56:
f4:c1:59:b3:d6:f7:d5:22:66:fe:6b:2f:88:2f:37:
a8:8e:94:5a:51:6e:a3:b5:6c:c4:61:53:24:ad:83:
a0:ca:d6:2d:dd:0e:00:b8:d0:ed:9b:1d:ac:37:9c:
21:23:37:b5:3f:ca:4b:8b:fc:90:20:64:51:2c:df:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:E2:A5:CA:EC:94:A0:AD:D7:68:B0:F2:66:9D:06:36:82:F6:86
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UkDipcrslKCt12iw8madBjaC9oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:2d:67:eb:9b:8f:5c:d4:16:31:cb:0f:c3:5e:26:77:10:
c3:cd:38:09:a6:af:8b:78:ed:29:04:c2:7a:0f:a2:7d:eb:6f:
14:3b:96:37:bb:03:66:8f:83:a1:13:a1:68:eb:23:67:77:fa:
f3:00:40:68:15:6e:15:c5:16:f2:77:7c:ca:d9:7c:de:54:54:
a9:e2:49:f0:1f:c5:f0:26:0f:74:b7:17:08:82:58:60:d2:33:
0e:34:b2:f7:63:37:c8:d7:4a:97:c1:d0:c3:3f:26:ad:ce:8f:
90:64:30:c5:67:a7:27:bd:50:a3:41:7d:b2:fe:ff:c1:21:a0:
c8:e8:86:13:a2:e6:47:a1:2d:b7:c3:36:ea:ca:ee:fa:43:bc:
2b:67:ce:59:a6:2a:cc:68:2a:ab:8a:7e:33:e1:a0:7a:44:17:
0b:fa:ec:f8:ec:cf:8e:5d:66:34:72:4a:dd:f3:22:0e:49:79:
33:c1:62:ba:3f:2e:92:93:8d:17:bd:07:54:46:43:65:a1:ee:
fc:62:1f:d4:9b:9b:95:6b:e8:81:e6:f4:f8:4c:4d:ff:47:c4:
15:45:11:bf:6a:61:63:2f:b5:68:ac:65:3e:67:a2:c5:71:05:
72:db:4a:d5:35:5e:80:67:2f:fa:1f:78:70:f2:33:c7:26:20:
d7:c1:43:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLZP73Xp8c2yIx9cL+pzgH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjIwODI2MDgyMzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQwZTJhNWNhZWM5NGEwYWRkNzY4YjBmMjY2OWQwNjM2ODJmNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73LbDPibMi9a69/KbpyoBuTc5BH
TPCNKFtA1hJ95GDY/9DVYwltoNCZWtEeamBHbHRWsw6z1U78MbBnzVPSoHX+eS8r
ieK84WaEXYphmhtFt3hJ1IvW056rDRKWSnQO2BnmqcLyAinV+VrDBtPQrcVKJEBN
HE98bRLdxKbb4WvIFsuOpECl3rgvhzuZd/1BsfG/FXa3O3nGoC9+B9cKdD6RbRSN
/YHsuGJFQzx3zXS9ZTX9FJRg65X8Te45C53BhFb0wVmz1vfVImb+ay+ILzeojpRa
UW6jtWzEYVMkrYOgytYt3Q4AuNDtmx2sN5whIze1P8pLi/yQIGRRLN+D/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJA4qXK7JSgrddosPJmnQY2gvaGMB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvVWtEaXBjcnNsS0N0MTJpdzhtYWRCamFDOW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/SZMA0G
CSqGSIb3DQEBCwUAA4IBAQB7Li1n65uPXNQWMcsPw14mdxDDzTgJpq+LeO0pBMJ6
D6J9628UO5Y3uwNmj4OhE6Fo6yNnd/rzAEBoFW4VxRbyd3zK2XzeVFSp4knwH8Xw
Jg90txcIglhg0jMONLL3YzfI10qXwdDDPyatzo+QZDDFZ6cnvVCjQX2y/v/BIaDI
6IYTouZHoS23wzbqyu76Q7wrZ85ZpirMaCqrin4z4aB6RBcL+uz47M+OXWY0ckrd
8yIOSXkzwWK6Py6Sk40XvQdURkNloe78Yh/Um5uVa+iB5vT4TE3/R8QVRRG/amFj
L7VorGU+Z6LFcQVy20rVNV6AZy/6H3hw8jPHJiDXwUNU
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:24:23 2025 by rpki-client