Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mUkGfA91mMik0Ww3ACeL6EonXa0.roa
File: mUkGfA91mMik0Ww3ACeL6EonXa0.roa (raw, json)
Hash identifier: um7SGsL2NZcW/ixBhUnn0uWLLutKvy2FgDBpKutPycQ=
Subject key identifier: 99:49:06:7C:0F:75:98:C8:A4:D1:6C:37:00:27:8B:E8:4A:27:5D:AD
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 04AEC2A8
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mUkGfA91mMik0Ww3ACeL6EonXa0.roa
Signing time: Mon 18 Apr 2022 02:04:42 +0000
ROA not before: Mon 18 Apr 2022 02:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61430
IP address blocks: 185.237.211.0/24 maxlen: 24
185.237.210.0/24 maxlen: 24
185.237.208.0/23 maxlen: 23
185.126.101.0/24 maxlen: 24
185.126.100.0/22 maxlen: 22
185.126.100.0/24 maxlen: 24
185.126.103.0/24 maxlen: 24
185.126.102.0/24 maxlen: 24
91.213.252.0/24 maxlen: 24
91.228.191.0/24 maxlen: 24
91.228.190.0/23 maxlen: 23
91.228.190.0/24 maxlen: 24
2a06:c040::/32 maxlen: 32
2a06:c041::/32 maxlen: 32
2001:67c:2ad4::/48 maxlen: 48
2001:67c:1944::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78561960 (0x4aec2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Apr 18 02:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9949067c0f7598c8a4d16c3700278be84a275dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:ba:41:32:46:05:81:67:11:1c:5e:ab:97:
d9:ff:22:9b:79:d5:69:b7:01:33:7f:d0:9f:7b:a9:
2a:a7:82:a3:09:eb:d2:91:90:b6:ed:c7:9b:bd:0d:
8d:0a:6b:c9:aa:c2:de:c5:21:57:50:66:a6:bb:63:
10:3c:fa:5c:1a:58:cf:43:58:af:df:85:e8:f7:f8:
e7:3c:39:df:96:08:8f:e7:c1:97:19:d7:ec:5b:eb:
d3:10:d0:80:5d:15:07:ee:68:f4:42:8b:ac:ad:4c:
b1:db:6d:4d:01:9e:61:68:7d:c5:42:73:c3:6f:8b:
75:55:ca:32:3f:2d:a5:de:c5:fa:26:f8:7f:0e:45:
b5:45:bd:2b:8e:6d:0e:6b:17:ae:3e:a5:e0:60:81:
0f:66:a9:53:1f:b1:0b:38:45:75:b3:81:20:87:b2:
47:b1:35:83:83:55:9c:93:cb:a8:8d:fb:65:77:9e:
5b:23:3d:d1:15:fb:8d:13:e8:09:0c:a7:94:fa:cd:
b3:9f:17:92:b6:ba:a6:0d:6d:be:e9:b5:f7:b4:6d:
5d:a3:86:c6:ed:c9:2d:8a:d3:42:56:78:e2:27:c7:
ae:10:2c:27:a1:18:98:73:b9:a2:b5:f3:14:7f:9e:
ce:06:5d:e4:3b:65:bc:ef:2a:7f:27:7a:9b:29:8a:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:06:7C:0F:75:98:C8:A4:D1:6C:37:00:27:8B:E8:4A:27:5D:AD
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/mUkGfA91mMik0Ww3ACeL6EonXa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.252.0/24
91.228.190.0/23
185.126.100.0/22
185.237.208.0/22
IPv6:
2001:67c:1944::/48
2001:67c:2ad4::/48
2a06:c040::/31
Signature Algorithm: sha256WithRSAEncryption
03:8f:c7:9b:58:4a:e1:42:0e:56:24:a4:5f:30:53:c6:64:e8:
37:08:c3:f3:c5:02:a0:f0:9b:b7:1e:cd:ab:b4:45:50:4c:db:
ec:9c:a5:7a:63:b9:14:fc:4d:7b:2c:bc:54:48:67:64:18:55:
9a:ff:c6:a6:fd:25:88:98:9a:29:c4:bb:b1:ab:1b:8d:24:2d:
ca:71:45:fc:a1:a1:fa:d4:2d:27:9e:06:33:42:3a:8f:59:61:
c1:6a:7f:b6:11:75:ab:e1:46:55:99:e0:17:f1:08:b7:2c:81:
74:8b:70:1c:2b:be:a5:cb:c9:bc:db:6f:f4:a3:41:52:c8:e6:
f3:31:b3:43:6c:5c:8b:ed:61:3e:57:ca:76:a8:06:a5:7b:1e:
45:26:c0:05:d3:18:f4:4d:e9:fc:c1:a2:cf:3f:31:78:b8:c2:
69:8e:28:c8:e3:b2:46:91:bb:97:82:6d:8a:c0:48:9c:be:ab:
0f:af:b0:5f:a9:1c:1a:8a:4b:81:98:31:fa:5e:15:fa:6c:79:
3f:8c:e9:62:43:f0:46:b1:15:32:62:f0:ef:66:48:98:4a:ca:
75:95:9c:13:bc:f2:a1:65:09:a0:1b:2b:64:08:91:ab:4e:28:
54:df:3a:59:99:80:04:18:69:e0:fa:f7:9e:4d:55:80:1d:3f:
a3:53:80:55
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEBK7CqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MzQ1ZDA3NzNjN2FkZTA4ZDQ0ODE5ZTNiNjExYmQyOTdhMzk4OWQzMB4XDTIyMDQx
ODAyMDQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTk0OTA2N2MwZjc1
OThjOGE0ZDE2YzM3MDAyNzhiZTg0YTI3NWRhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMS5ukEyRgWBZxEcXquX2f8im3nVabcBM3/Qn3upKqeCownr
0pGQtu3Hm70NjQpryarC3sUhV1BmprtjEDz6XBpYz0NYr9+F6Pf45zw535YIj+fB
lxnX7Fvr0xDQgF0VB+5o9EKLrK1MsdttTQGeYWh9xUJzw2+LdVXKMj8tpd7F+ib4
fw5FtUW9K45tDmsXrj6l4GCBD2apUx+xCzhFdbOBIIeyR7E1g4NVnJPLqI37ZXee
WyM90RX7jRPoCQynlPrNs58Xkra6pg1tvum197RtXaOGxu3JLYrTQlZ44ifHrhAs
J6EYmHO5orXzFH+ezgZd5DtlvO8qfyd6mymKhMsCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBSZSQZ8D3WYyKTRbDcAJ4voSiddrTAfBgNVHSMEGDAWgBRDRdB3PHreCNRI
GeO2Eb0pejmJ0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1EwWFFkeng2M2dqVVNCbmp0aEc5S1hvNWlkTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvYmI5OTQ3LTE3MmMtNDhiMS1iZThlLTRjOTA1YWRiZjA3Ni8x
L21Va0dmQTkxbU1pazBXdzNBQ2VMNkVvblhhMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
YmI5OTQ3LTE3MmMtNDhiMS1iZThlLTRjOTA1YWRiZjA3Ni8xL1EwWFFkeng2M2dq
VVNCbmp0aEc5S1hvNWlkTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwHgQCAAEwGAMEAFvV/AMEAVvkvgMEArl+ZAMEArnt
0DAfBAIAAjAZAwcAIAEGfBlEAwcAIAEGfCrUAwUBKgbAQDANBgkqhkiG9w0BAQsF
AAOCAQEAA4/Hm1hK4UIOViSkXzBTxmToNwjD88UCoPCbtx7Nq7RFUEzb7JylemO5
FPxNeyy8VEhnZBhVmv/Gpv0liJiaKcS7sasbjSQtynFF/KGh+tQtJ54GM0I6j1lh
wWp/thF1q+FGVZngF/EItyyBdItwHCu+pcvJvNtv9KNBUsjm8zGzQ2xci+1hPlfK
dqgGpXseRSbABdMY9E3p/MGizz8xeLjCaY4oyOOyRpG7l4JtisBInL6rD6+wX6kc
GopLgZgx+l4V+mx5P4zpYkPwRrEVMmLw72ZImErKdZWcE7zyoWUJoBsrZAiRq04o
VN86WZmABBhp4Pr3nk1VgB0/o1OAVQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:44 2025 by rpki-client