Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/UaZkNHzozKFMTKz4qUeMVQ3YKgs.roa
File: UaZkNHzozKFMTKz4qUeMVQ3YKgs.roa (raw, json)
Hash identifier: JSPNdp2OK27CoiwtPSVgGVFElVogIcEHrMTD6qt16NQ=
Subject key identifier: 51:A6:64:34:7C:E8:CC:A1:4C:4C:AC:F8:A9:47:8C:55:0D:D8:2A:0B
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 18E5FAE6
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/UaZkNHzozKFMTKz4qUeMVQ3YKgs.roa
Signing time: Thu 17 Mar 2022 08:23:52 +0000
ROA not before: Thu 17 Mar 2022 08:23:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57498
IP address blocks: 91.227.42.0/24 maxlen: 24
91.221.74.0/23 maxlen: 23
194.187.30.0/23 maxlen: 23
194.187.30.0/24 maxlen: 24
194.187.31.0/24 maxlen: 24
2001:678:b8c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417725158 (0x18e5fae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Mar 17 08:23:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a664347ce8cca14c4cacf8a9478c550dd82a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:e4:f2:53:a0:e7:dc:68:fa:9a:f4:fa:c0:
c8:b8:4c:a1:ef:9f:e0:f8:2c:a7:c7:06:48:ab:d9:
f6:30:b7:2a:3c:9c:34:67:15:9f:7d:a1:17:92:76:
21:49:bc:8c:af:b5:69:a5:8f:1f:19:f8:92:fe:77:
3d:88:e2:bd:5f:06:01:5c:29:29:8d:3e:a3:39:f1:
02:af:de:a8:1e:b8:77:87:52:f4:f6:5d:21:e5:2e:
7d:b0:11:37:94:e6:2c:81:41:99:28:2e:1b:66:b0:
1b:a5:95:b4:dc:23:ab:51:52:ec:f8:cd:5f:49:fc:
82:75:39:57:7a:3b:e5:c3:1d:70:9e:9b:c7:6e:ff:
36:96:04:fa:eb:28:20:f8:01:d3:dc:32:d3:c2:58:
0c:7b:3a:38:3c:b7:75:f0:9c:3c:8a:8f:9a:48:35:
95:27:e3:91:95:7a:ac:b0:42:b3:42:30:4e:36:57:
b4:15:82:12:3b:cb:0f:62:fa:58:1f:f0:94:ac:a2:
f0:66:7d:71:51:31:a4:e4:c2:0f:70:dd:84:bc:6c:
6b:84:87:d3:15:6d:f6:e7:6b:f9:63:74:84:21:8d:
fc:71:fe:1c:2f:5a:b3:e9:cf:ea:e0:ab:e2:4a:b4:
8d:29:e6:27:09:00:c0:e9:90:fa:cd:53:4b:0c:00:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:64:34:7C:E8:CC:A1:4C:4C:AC:F8:A9:47:8C:55:0D:D8:2A:0B
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/UaZkNHzozKFMTKz4qUeMVQ3YKgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.74.0/23
91.227.42.0/24
194.187.30.0/23
IPv6:
2001:678:b8c::/48
Signature Algorithm: sha256WithRSAEncryption
cd:3d:65:93:42:ec:ef:80:a4:b7:f4:88:89:e2:2d:37:a9:d0:
7b:34:76:e1:88:d5:7f:33:11:ee:07:3f:04:f5:b5:da:38:2e:
03:49:6d:16:a4:9d:ab:0f:60:eb:17:fc:ad:79:74:8b:9f:02:
76:06:f7:26:4a:07:0b:93:ec:8e:1d:99:28:d8:16:d7:3e:b5:
df:19:4c:27:14:d6:27:a4:e9:80:49:e2:d5:03:bc:8f:52:89:
37:4d:da:9d:29:cd:de:8f:b0:99:db:93:18:8d:4f:fb:7d:d0:
fe:96:c6:dc:e4:01:85:1d:35:02:0b:50:54:e6:4a:0c:89:95:
c3:c4:88:ee:63:af:ff:04:cd:e2:1a:de:44:15:d1:5f:c4:37:
5b:91:f4:4c:d8:d4:4a:23:92:43:54:b3:85:f0:b0:3d:07:6d:
af:22:07:f6:e9:cc:aa:c4:f2:df:48:e5:9b:0a:c6:ae:9a:01:
e2:53:0f:14:bb:e8:49:20:0d:ea:69:bd:d9:11:7f:f2:ef:82:
97:aa:04:de:a1:2b:5a:37:cc:0b:76:f4:96:7a:c3:eb:9c:0b:
81:9d:19:cb:8c:9f:3a:5a:20:fc:e3:c8:62:39:09:df:c1:74:
dd:d3:9b:0e:d9:96:e0:11:2c:e3:ae:7d:48:93:8b:84:9b:5c:
a2:79:4f:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEGOX65jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODIxYzhmZjA0MzdmN2VkZDgyOTE2NmZkZTAzNDQ2Zjg2MTA5ZDgwMB4XDTIyMDMx
NzA4MjM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFhNjY0MzQ3Y2U4
Y2NhMTRjNGNhY2Y4YTk0NzhjNTUwZGQ4MmEwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKV15PJToOfcaPqa9PrAyLhMoe+f4Pgsp8cGSKvZ9jC3Kjyc
NGcVn32hF5J2IUm8jK+1aaWPHxn4kv53PYjivV8GAVwpKY0+oznxAq/eqB64d4dS
9PZdIeUufbARN5TmLIFBmSguG2awG6WVtNwjq1FS7PjNX0n8gnU5V3o75cMdcJ6b
x27/NpYE+usoIPgB09wy08JYDHs6ODy3dfCcPIqPmkg1lSfjkZV6rLBCs0IwTjZX
tBWCEjvLD2L6WB/wlKyi8GZ9cVExpOTCD3DdhLxsa4SH0xVt9udr+WN0hCGN/HH+
HC9as+nP6uCr4kq0jSnmJwkAwOmQ+s1TSwwA/9cCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBRRpmQ0fOjMoUxMrPipR4xVDdgqCzAfBgNVHSMEGDAWgBRoIcj/BDf37dgp
Fm/eA0RvhhCdgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FDSElfd1EzOS0zWUtSWnYzZ05FYjRZUW5ZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmMvMTNiMTQ0LWJlMTYtNDkyMi1hOTgzLTI1YWU5MjkzZjZiNC8x
L1VhWmtOSHpvektGTVRLejRxVWVNVlEzWUtncy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMv
MTNiMTQ0LWJlMTYtNDkyMi1hOTgzLTI1YWU5MjkzZjZiNC8xL2FDSElfd1EzOS0z
WUtSWnYzZ05FYjRZUW5ZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEAVvdSgMEAFvjKgMEAcK7HjAPBAIA
AjAJAwcAIAEGeAuMMA0GCSqGSIb3DQEBCwUAA4IBAQDNPWWTQuzvgKS39IiJ4i03
qdB7NHbhiNV/MxHuBz8E9bXaOC4DSW0WpJ2rD2DrF/yteXSLnwJ2BvcmSgcLk+yO
HZko2BbXPrXfGUwnFNYnpOmASeLVA7yPUok3TdqdKc3ej7CZ25MYjU/7fdD+lsbc
5AGFHTUCC1BU5koMiZXDxIjuY6//BM3iGt5EFdFfxDdbkfRM2NRKI5JDVLOF8LA9
B22vIgf26cyqxPLfSOWbCsaumgHiUw8Uu+hJIA3qab3ZEX/y74KXqgTeoStaN8wL
dvSWesPrnAuBnRnLjJ86WiD848hiOQnfwXTd05sO2ZbgESzjrn1Ik4uEm1yieU/J
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:30:56 2025 by rpki-client