Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/UKQzrP-huu4bLKippg1JVor3BNE.roa
File: UKQzrP-huu4bLKippg1JVor3BNE.roa (raw, json)
Hash identifier: Xzl5MTR+6ppUkXrRgiT2a7VMZBYWtLwvoSMNOS6GMvA=
Subject key identifier: 50:A4:33:AC:FF:A1:BA:EE:1B:2C:A8:A9:A6:0D:49:56:8A:F7:04:D1
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 37C1DE5F
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/UKQzrP-huu4bLKippg1JVor3BNE.roa
Signing time: Sat 01 Jan 2022 06:56:23 +0000
ROA not before: Sat 01 Jan 2022 06:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44567
IP address blocks: 91.241.14.0/23 maxlen: 23
93.92.152.0/21 maxlen: 21
91.240.214.0/23 maxlen: 23
2a01:9c00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935452255 (0x37c1de5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Jan 1 06:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50a433acffa1baee1b2ca8a9a60d49568af704d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:60:b7:e5:ee:af:96:45:d7:fa:3d:9f:e3:
f3:72:45:46:70:aa:be:75:62:a6:13:56:25:d9:e5:
34:d4:e9:fd:86:74:4f:65:74:fc:70:8c:08:9e:3b:
de:be:53:a9:01:66:8c:f1:60:ac:80:6f:41:c3:45:
19:7d:cb:6f:38:3c:72:4e:8c:14:37:cf:79:aa:ce:
42:4a:96:44:81:de:23:3a:62:82:cb:1b:db:e3:b1:
b1:7c:72:58:eb:d6:c7:84:c4:2b:17:1c:b1:ac:94:
df:e6:ec:3b:12:0d:b8:39:f0:55:e8:c7:1d:c6:b9:
e6:d2:52:fd:0e:52:ac:12:05:b7:94:19:a6:10:df:
21:e6:f0:24:c6:1b:8e:9d:11:5c:f7:0d:fb:7d:90:
2c:cc:1d:87:4c:48:48:cd:b1:ba:77:d7:93:f9:20:
3e:ac:9b:77:94:58:77:9a:d4:bf:56:3b:61:b2:57:
5c:df:ff:13:24:b2:13:38:91:ee:95:7e:cf:d4:f7:
75:2d:49:35:a7:7b:4d:80:ce:1a:55:b5:86:78:9f:
dd:54:f2:46:c7:8e:80:16:07:dd:48:b9:29:6d:d9:
70:70:72:31:47:4b:13:3b:07:87:b3:5e:e3:18:b1:
9a:61:a8:31:44:51:c2:48:9d:6b:28:ff:1b:64:39:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A4:33:AC:FF:A1:BA:EE:1B:2C:A8:A9:A6:0D:49:56:8A:F7:04:D1
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/UKQzrP-huu4bLKippg1JVor3BNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.214.0/23
91.241.14.0/23
93.92.152.0/21
IPv6:
2a01:9c00::/32
Signature Algorithm: sha256WithRSAEncryption
0a:78:6d:8f:0b:72:76:5f:0d:b6:dd:88:48:e2:f0:f8:13:df:
2f:c9:bb:3f:40:29:09:cd:6f:61:dc:68:4a:8d:e4:bb:ba:b8:
82:01:35:84:ab:94:63:ee:19:a9:48:f1:58:55:91:46:60:38:
fd:c8:3a:8f:c7:5f:51:e8:bf:33:49:f0:ae:21:18:2d:4a:aa:
fe:78:7c:25:53:16:1d:f0:78:3d:49:65:b3:ae:2a:c2:e3:be:
16:a4:16:3e:64:79:af:36:91:67:92:c1:d6:f6:1d:59:07:f1:
31:9d:78:2d:b4:c9:78:bb:a9:27:e6:ae:5b:cb:19:3e:af:da:
00:2c:d4:54:88:02:fb:03:cc:c6:a1:d1:a2:3c:9f:4a:4d:b5:
d3:ee:08:41:e5:33:14:cd:57:e3:90:8f:f6:74:c8:91:3e:cd:
49:a4:45:17:41:5f:93:72:b6:99:46:bc:db:92:ac:76:17:de:
dc:19:cd:70:4e:b8:0c:37:ee:e9:1d:dc:91:6e:c4:8b:f8:b4:
d7:23:24:ab:e9:fa:1e:d9:09:cb:fb:da:79:ed:3c:af:a2:61:
6b:bb:f9:8a:ad:e9:14:e8:70:f7:8a:6d:3d:25:51:cd:95:91:
e2:3e:96:44:da:25:5e:67:ea:99:d4:83:3a:02:78:d1:82:0b:
20:92:07:68
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEN8HeXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
M2Q2NjI5N2M1Y2RiZDM2ZDg2ODQ5ZGRlYWU3OTg1OTc5ZjQ1MGNhMB4XDTIyMDEw
MTA2NTYyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBhNDMzYWNmZmEx
YmFlZTFiMmNhOGE5YTYwZDQ5NTY4YWY3MDRkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEtYLfl7q+WRdf6PZ/j83JFRnCqvnViphNWJdnlNNTp/YZ0
T2V0/HCMCJ473r5TqQFmjPFgrIBvQcNFGX3Lbzg8ck6MFDfPearOQkqWRIHeIzpi
gssb2+OxsXxyWOvWx4TEKxccsayU3+bsOxINuDnwVejHHca55tJS/Q5SrBIFt5QZ
phDfIebwJMYbjp0RXPcN+32QLMwdh0xISM2xunfXk/kgPqybd5RYd5rUv1Y7YbJX
XN//EySyEziR7pV+z9T3dS1JNad7TYDOGlW1hnif3VTyRseOgBYH3Ui5KW3ZcHBy
MUdLEzsHh7Ne4xixmmGoMURRwkidayj/G2Q5XrsCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRQpDOs/6G67hssqKmmDUlWivcE0TAfBgNVHSMEGDAWgBSz1mKXxc29Ntho
Sd3q55hZefRQyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3M5WmlsOFhOdlRiWWFFbmQ2dWVZV1huMFVNby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2EvOTJjMWNmLTVhMjItNDUzYy05MDdmLWViMWY4NzE1ZWVjMC8x
L1VLUXpyUC1odXU0YkxLaXBwZzFKVm9yM0JORS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Ev
OTJjMWNmLTVhMjItNDUzYy05MDdmLWViMWY4NzE1ZWVjMC8xL3M5WmlsOFhOdlRi
WWFFbmQ2dWVZV1huMFVNby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAVvw1gMEAVvxDgMEA11cmDANBAIA
AjAHAwUAKgGcADANBgkqhkiG9w0BAQsFAAOCAQEACnhtjwtydl8Ntt2ISOLw+BPf
L8m7P0ApCc1vYdxoSo3ku7q4ggE1hKuUY+4ZqUjxWFWRRmA4/cg6j8dfUei/M0nw
riEYLUqq/nh8JVMWHfB4PUlls64qwuO+FqQWPmR5rzaRZ5LB1vYdWQfxMZ14LbTJ
eLupJ+auW8sZPq/aACzUVIgC+wPMxqHRojyfSk210+4IQeUzFM1X45CP9nTIkT7N
SaRFF0Ffk3K2mUa825Ksdhfe3BnNcE64DDfu6R3ckW7Ei/i01yMkq+n6HtkJy/va
ee08r6Jha7v5iq3pFOhw94ptPSVRzZWR4j6WRNolXmfqmdSDOgJ40YILIJIHaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org