Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/xKUETITXnCZipw9vk25HScmpnGI.roa
File: xKUETITXnCZipw9vk25HScmpnGI.roa (raw, json)
Hash identifier: sGzuWJCY/ZOn5bceNI3c3qRBDHYZUqNkZNyI5msJtVc=
Subject key identifier: C4:A5:04:4C:84:D7:9C:26:62:A7:0F:6F:93:6E:47:49:C9:A9:9C:62
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 04462E9A
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/xKUETITXnCZipw9vk25HScmpnGI.roa
Signing time: Sat 01 Jan 2022 01:54:50 +0000
ROA not before: Sat 01 Jan 2022 01:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208310
IP address blocks: 94.137.128.0/20 maxlen: 20
193.223.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71708314 (0x4462e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Jan 1 01:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4a5044c84d79c2662a70f6f936e4749c9a99c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:30:d4:fb:35:14:69:4b:29:ac:98:fa:aa:
9f:55:1f:14:81:a9:1a:6e:a8:b3:ba:d0:8e:f7:86:
66:19:da:b1:b8:80:e9:27:1a:b9:0e:06:43:46:e9:
ac:1f:84:ca:d0:3c:82:e6:a3:8c:50:43:18:16:6f:
a5:fc:35:b3:66:ec:d5:eb:54:0a:35:7d:a2:6c:7b:
37:43:bc:d5:a9:ff:20:c7:f4:35:d7:c0:98:2d:cc:
5e:13:9b:0e:b4:9f:3e:44:6f:fc:c8:31:59:f8:d8:
53:c2:5b:5b:f7:68:53:4c:78:0c:ea:aa:1d:34:89:
81:a9:9a:c4:52:6f:ce:b1:c4:6a:69:7b:b7:d3:91:
d3:c7:0a:46:ed:4b:d4:97:a0:2b:37:23:c4:77:30:
e7:f0:be:df:57:f1:72:66:64:46:82:c6:7e:49:9c:
fe:1e:bc:fa:de:45:5b:84:a2:0d:a2:80:bf:89:0f:
fe:c6:a6:ee:cb:ea:7f:93:e8:33:6c:88:6c:13:28:
4f:da:cf:ba:b4:bb:68:90:fd:35:1f:9a:d6:da:d2:
cb:92:2d:e6:03:94:6f:18:8d:84:19:31:00:91:50:
96:19:fd:45:4a:d4:e0:94:bc:11:6b:3a:22:1a:c9:
63:73:f6:55:82:ae:c4:19:a6:6d:57:bb:2a:71:ce:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:04:4C:84:D7:9C:26:62:A7:0F:6F:93:6E:47:49:C9:A9:9C:62
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/xKUETITXnCZipw9vk25HScmpnGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.128.0/20
193.223.248.0/22
Signature Algorithm: sha256WithRSAEncryption
83:b8:b0:fa:da:59:47:b3:11:8e:ce:59:71:1f:e5:c0:2d:a9:
74:72:64:36:21:09:e9:52:07:a6:60:a5:dd:e3:8c:b4:95:e4:
47:90:e1:76:41:57:57:e8:e0:16:8e:a0:f7:81:89:73:b4:cb:
b6:71:ac:7d:8b:1c:13:dc:75:84:92:5a:19:05:61:c2:8b:1e:
95:89:67:5e:79:13:96:03:55:24:35:b6:69:48:87:ff:be:87:
51:dc:ea:f8:9c:15:45:f8:4b:21:36:42:e5:f3:26:d3:3e:84:
10:d3:c7:26:bd:6f:3c:72:e9:4a:70:5d:83:fe:78:67:35:0c:
70:6c:8c:36:11:fc:9c:53:b0:d6:cf:8d:df:96:27:61:54:eb:
f8:f3:af:55:4f:bc:82:1c:ed:c8:9b:d8:05:16:ce:ed:96:e6:
6c:f9:9a:4b:d5:35:2f:c5:3f:7b:8d:8d:94:9e:74:cb:50:42:
89:27:5c:66:b3:dc:58:45:f8:68:e2:bd:72:9c:40:b3:2e:04:
ae:50:9f:0b:cb:e7:bd:ca:f7:b2:dd:04:68:7d:25:b4:8a:fb:
57:52:83:f8:92:c9:84:ed:b6:ec:e4:50:61:75:c7:9a:2e:12:
b2:54:ed:49:8b:74:94:1d:58:db:71:82:d5:5d:bb:f9:8e:b2:
44:96:cf:f0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBEYumjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NDk1MDJjOTc0ODJiMjg1MDI4NTJjOTdlZjliZDNhMGEyYTVlOWYwMB4XDTIyMDEw
MTAxNTQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzRhNTA0NGM4NGQ3
OWMyNjYyYTcwZjZmOTM2ZTQ3NDljOWE5OWM2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNCMNT7NRRpSymsmPqqn1UfFIGpGm6os7rQjveGZhnasbiA
6ScauQ4GQ0bprB+EytA8guajjFBDGBZvpfw1s2bs1etUCjV9omx7N0O81an/IMf0
NdfAmC3MXhObDrSfPkRv/MgxWfjYU8JbW/doU0x4DOqqHTSJgamaxFJvzrHEaml7
t9OR08cKRu1L1JegKzcjxHcw5/C+31fxcmZkRoLGfkmc/h68+t5FW4SiDaKAv4kP
/sam7svqf5PoM2yIbBMoT9rPurS7aJD9NR+a1trSy5It5gOUbxiNhBkxAJFQlhn9
RUrU4JS8EWs6IhrJY3P2VYKuxBmmbVe7KnHO/FsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTEpQRMhNecJmKnD2+TbkdJyamcYjAfBgNVHSMEGDAWgBT0lQLJdIKyhQKF
LJfvm9OgoqXp8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlKVUN5WFNDc29VQ2hTeVg3NXZUb0tLbDZmQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvMWY4NmQzLTA4N2QtNGQ2OS1iOGU3LTczYjBjNzRlOWI2NC8x
L3hLVUVUSVRYbkNaaXB3OXZrMjVIU2NtcG5HSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
MWY4NmQzLTA4N2QtNGQ2OS1iOGU3LTczYjBjNzRlOWI2NC8xLzlKVUN5WFNDc29V
Q2hTeVg3NXZUb0tLbDZmQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBF6JgAMEAsHf+DANBgkqhkiG9w0B
AQsFAAOCAQEAg7iw+tpZR7MRjs5ZcR/lwC2pdHJkNiEJ6VIHpmCl3eOMtJXkR5Dh
dkFXV+jgFo6g94GJc7TLtnGsfYscE9x1hJJaGQVhwoselYlnXnkTlgNVJDW2aUiH
/76HUdzq+JwVRfhLITZC5fMm0z6EENPHJr1vPHLpSnBdg/54ZzUMcGyMNhH8nFOw
1s+N35YnYVTr+POvVU+8ghztyJvYBRbO7ZbmbPmaS9U1L8U/e42NlJ50y1BCiSdc
ZrPcWEX4aOK9cpxAsy4ErlCfC8vnvcr3st0EaH0ltIr7V1KD+JLJhO227ORQYXXH
mi4SslTtSYt0lB1Y23GC1V27+Y6yRJbP8A==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:47:46 2025 by rpki-client