Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BVHgHYT1Yo6jPuIz3ruegKdu-uk.roa
File: BVHgHYT1Yo6jPuIz3ruegKdu-uk.roa (raw, json)
Hash identifier: Rm8W5I3VkDEDArfOmpAx8ojV72PNzfiM37lhI/R49Ac=
Subject key identifier: 05:51:E0:1D:84:F5:62:8E:A3:3E:E2:33:DE:BB:9E:80:A7:6E:FA:E9
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01857246AD5B9588EB66BCEA5DE4CAE07281
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BVHgHYT1Yo6jPuIz3ruegKdu-uk.roa
Signing time: Mon 02 Jan 2023 11:38:32 +0000
ROA not before: Mon 02 Jan 2023 11:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44306
IP address blocks: 213.186.25.0/24 maxlen: 24
213.186.26.0/24 maxlen: 24
213.186.27.0/24 maxlen: 24
213.186.28.0/22 maxlen: 24
185.151.132.0/24 maxlen: 24
185.151.133.0/24 maxlen: 24
185.151.134.0/24 maxlen: 24
85.222.164.0/22 maxlen: 24
91.233.36.0/23 maxlen: 24
213.186.0.0/24 maxlen: 24
213.186.1.0/24 maxlen: 24
213.186.0.0/19 maxlen: 19
213.186.0.0/20 maxlen: 20
213.186.4.0/23 maxlen: 23
213.186.9.0/24 maxlen: 24
213.186.16.0/23 maxlen: 23
213.186.23.0/24 maxlen: 24
213.186.18.0/24 maxlen: 24
213.186.19.0/24 maxlen: 24
213.186.22.0/23 maxlen: 23
213.186.22.0/24 maxlen: 24
91.199.77.0/24 maxlen: 24
2a02:2608:fffe::/48 maxlen: 48
2a02:2608:fffe:1::/64 maxlen: 64
2a02:2608::/32 maxlen: 32
2a02:2608:2000::/48 maxlen: 48
2a02:2608:3000::/48 maxlen: 48
2a02:2608:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ad:5b:95:88:eb:66:bc:ea:5d:e4:ca:e0:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 2 11:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0551e01d84f5628ea33ee233debb9e80a76efae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:5b:f3:3c:84:78:12:ce:ad:ec:3f:0b:10:
3c:a5:06:95:d0:58:0d:06:cd:56:16:55:23:2d:a2:
fa:3b:f7:f0:73:47:5d:0f:38:dd:f3:1f:2d:f4:9e:
c7:83:71:8c:f9:79:42:07:2f:f4:7b:ac:3a:16:5e:
f3:28:1f:cc:5e:e9:a3:eb:ec:5d:b0:a5:09:e9:ca:
31:5f:cb:24:b1:a8:c0:37:41:d7:86:aa:ba:d9:eb:
63:b0:35:8a:b2:f5:c2:35:72:dc:40:b9:75:4b:3e:
f5:be:8a:15:a9:95:9f:f3:fb:01:e6:ec:15:16:8c:
18:ec:6b:73:55:43:3d:b2:c8:ae:1a:72:6b:d4:6a:
08:59:50:24:4f:69:44:b9:33:8c:4c:62:d7:88:ab:
60:6a:b8:38:21:0f:21:08:92:42:3f:90:4d:09:70:
ff:fc:a0:86:c1:fe:bf:c0:c8:59:21:e7:c8:2b:35:
80:fb:3a:d5:76:20:d5:d9:16:74:60:b8:c8:16:ed:
a5:4a:6d:eb:c7:67:fc:0c:54:02:e3:af:68:bb:42:
61:81:8f:33:86:e6:e7:1b:2e:29:7f:e4:48:71:86:
a1:d7:8a:9c:ba:db:02:48:6e:fe:de:c1:36:de:5e:
59:09:60:c2:48:55:cd:7e:e8:39:e6:71:ef:7c:74:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:E0:1D:84:F5:62:8E:A3:3E:E2:33:DE:BB:9E:80:A7:6E:FA:E9
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BVHgHYT1Yo6jPuIz3ruegKdu-uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.164.0/22
91.199.77.0/24
91.233.36.0/23
185.151.132.0-185.151.134.255
213.186.0.0/19
IPv6:
2a02:2608::/32
Signature Algorithm: sha256WithRSAEncryption
3b:3f:8c:aa:35:15:3c:6d:ce:81:91:60:21:74:c4:63:a6:b8:
5c:46:72:f2:e2:33:b0:b5:4d:cf:2e:10:10:ea:94:7c:3d:c9:
0d:3f:c6:8c:3a:75:56:94:83:12:9e:a0:0e:1d:77:e2:fa:be:
71:e4:d3:d0:b1:58:49:03:50:1f:74:be:cf:82:ea:96:e7:3f:
61:2d:fe:29:f3:c4:de:86:84:b6:09:d3:f8:06:48:a3:65:f2:
b8:f6:ba:c0:64:64:8a:ab:9f:46:94:7a:8e:f8:bc:a1:14:3b:
84:65:51:86:eb:e1:48:cb:8c:b2:8c:7a:14:f2:60:22:27:17:
47:d0:47:82:cf:14:ce:91:f9:60:dc:bd:fa:1c:6f:30:8a:4d:
b1:8b:d2:3a:d9:3a:7b:3d:d0:c5:00:71:01:d9:13:ea:e9:21:
d5:09:ac:00:11:84:9c:07:93:26:43:4f:9d:1b:30:1d:3b:8e:
50:50:a1:c4:df:26:77:09:aa:45:bb:2f:7d:f2:f3:dc:62:70:
d0:66:4a:da:e9:7f:01:91:c9:6f:5a:d0:a1:68:c5:c8:2e:f0:
52:2a:6e:9c:a5:30:67:6c:e6:d8:a8:54:d7:ac:e7:11:93:17:
49:cd:3c:d3:02:f6:e8:e8:47:51:6e:3a:a4:39:7e:d6:41:af:
64:bf:86:02
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYVyRq1blYjrZrzqXeTK4HKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5
NGVlYzMwHhcNMjMwMTAyMTEzODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTUxZTAxZDg0ZjU2MjhlYTMzZWUyMzNkZWJiOWU4MGE3NmVmYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPlb8zyEeBLOrew/CxA8pQaV0FgN
Bs1WFlUjLaL6O/fwc0ddDzjd8x8t9J7Hg3GM+XlCBy/0e6w6Fl7zKB/MXumj6+xd
sKUJ6coxX8sksajAN0HXhqq62etjsDWKsvXCNXLcQLl1Sz71vooVqZWf8/sB5uwV
FowY7GtzVUM9ssiuGnJr1GoIWVAkT2lEuTOMTGLXiKtgarg4IQ8hCJJCP5BNCXD/
/KCGwf6/wMhZIefIKzWA+zrVdiDV2RZ0YLjIFu2lSm3rx2f8DFQC469ou0JhgY8z
hubnGy4pf+RIcYah14qcutsCSG7+3sE23l5ZCWDCSFXNfug55nHvfHQvlwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFAVR4B2E9WKOoz7iM967noCnbvrpMB8GA1UdIwQY
MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt
MjhkNWI2MDdhNDdmLzEvQlZIZ0hZVDFZbzZqUHVJejNydWVnS2R1LXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm
LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCVd6kAwQA
W8dNAwQBW+kkMAwDBAK5l4QDBAC5l4YDBAXVugAwDQQCAAIwBwMFACoCJggwDQYJ
KoZIhvcNAQELBQADggEBADs/jKo1FTxtzoGRYCF0xGOmuFxGcvLiM7C1Tc8uEBDq
lHw9yQ0/xow6dVaUgxKeoA4dd+L6vnHk09CxWEkDUB90vs+C6pbnP2Et/inzxN6G
hLYJ0/gGSKNl8rj2usBkZIqrn0aUeo74vKEUO4RlUYbr4UjLjLKMehTyYCInF0fQ
R4LPFM6R+WDcvfocbzCKTbGL0jrZOns90MUAcQHZE+rpIdUJrAARhJwHkyZDT50b
MB07jlBQocTfJncJqkW7L33y89xicNBmStrpfwGRyW9a0KFoxcgu8FIqbpylMGds
5tioVNes5xGTF0nNPNMC9ujoR1FuOqQ5ftZBr2S/hgI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:48 2025 by rpki-client