Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/UYDMwZfcA1WKztclC8xCEcen3Fc.roa
File: UYDMwZfcA1WKztclC8xCEcen3Fc.roa (raw, json)
Hash identifier: TdUJCnMVGhr08+BZU/5HCG6qa9BcNLWia70RCPO2Qik=
Subject key identifier: 51:80:CC:C1:97:DC:03:55:8A:CE:D7:25:0B:CC:42:11:C7:A7:DC:57
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 01857082B5D141F786C7C24220FF409C9A6C
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/UYDMwZfcA1WKztclC8xCEcen3Fc.roa
Signing time: Mon 02 Jan 2023 03:24:52 +0000
ROA not before: Mon 02 Jan 2023 03:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203730
IP address blocks: 185.106.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b5:d1:41:f7:86:c7:c2:42:20:ff:40:9c:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jan 2 03:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5180ccc197dc03558aced7250bcc4211c7a7dc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:2e:0c:b7:e7:cb:b1:57:c6:c4:f9:24:6e:
be:16:e7:64:91:79:fe:11:e2:3a:f5:c1:6e:80:fc:
66:e4:a4:4b:2e:45:cf:46:fc:92:7f:85:b5:d5:0b:
ac:61:88:af:83:36:73:4c:53:fd:16:25:d7:fc:f8:
97:f6:77:63:ff:da:97:99:79:a3:0d:e9:f6:b8:c8:
72:78:4f:bf:8c:7f:63:d5:ed:a8:6d:62:2f:58:b4:
4f:5a:49:9a:53:4a:6f:92:96:c2:c0:5e:91:5c:7d:
04:86:af:d0:62:f3:fb:82:0e:dc:b1:54:ef:b6:26:
a9:52:c3:2b:ec:b5:8a:10:c8:60:e9:2a:18:21:7b:
8c:c8:ee:fc:00:ec:7e:1e:b1:de:77:c0:5d:56:c8:
fb:34:00:ac:cc:a2:08:69:09:5c:e1:67:de:c8:bf:
cf:79:a2:b5:8b:e0:d9:14:d8:fe:23:63:8c:b9:08:
be:b4:1b:98:eb:7e:a3:7f:45:de:73:40:23:5b:cd:
11:a9:86:f2:fe:48:5b:60:36:ef:0b:38:e9:3d:74:
31:a6:89:cc:47:d9:22:fc:93:2e:60:c3:67:19:23:
ce:5d:7b:2c:94:19:f0:76:48:77:e0:f5:8b:ce:3c:
fe:20:51:10:1d:d6:e8:65:ab:92:81:75:cc:2f:46:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:CC:C1:97:DC:03:55:8A:CE:D7:25:0B:CC:42:11:C7:A7:DC:57
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/UYDMwZfcA1WKztclC8xCEcen3Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:11:51:c9:a9:8e:1c:51:f2:96:b4:3d:a2:fe:8e:92:70:be:
e6:0a:90:9e:e7:1e:62:05:4c:79:9b:e9:98:48:9d:8e:99:3c:
38:66:23:6e:53:08:cf:6e:b3:e8:5b:a2:bd:e7:47:6e:67:ec:
a1:f3:64:75:95:51:f5:04:3c:3c:78:33:b1:db:9d:cb:bb:21:
16:9c:91:4b:e1:01:2f:a6:bb:7b:87:0d:05:3b:c8:3a:7f:c4:
ca:68:85:4b:10:d2:6a:ad:dd:f0:b9:2e:50:ff:0a:c5:df:61:
bf:e2:c4:5d:af:45:46:24:ea:93:32:6f:bf:85:45:25:cc:c5:
20:d4:82:97:6f:db:88:0f:dd:e8:e7:b1:68:61:9f:8b:f7:5d:
a3:b5:83:7c:ee:9a:1c:77:2b:93:50:71:a1:55:89:cc:d9:b1:
82:c5:85:40:86:82:45:0f:ba:1d:ca:68:33:e4:f9:ac:fb:7e:
0e:0d:7d:8f:cb:92:db:12:92:34:0f:1b:8d:f8:46:bd:c1:6e:
4c:98:66:93:f9:ed:7c:18:bd:00:49:49:e1:2b:d1:01:cb:e8:
1f:0e:36:03:62:e9:12:b7:d3:eb:b3:80:4f:8c:79:4f:58:6c:
d1:ca:29:18:ab:ff:db:50:09:a7:ed:d9:49:ea:da:42:0e:73:
da:94:a7:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgrXRQfeGx8JCIP9AnJpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M5Yzc2ZTJhZmM3M2NjZWRiYzllMDI5MmZmYjk5ZjY1
ZTczNTIwHhcNMjMwMTAyMDMyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTgwY2NjMTk3ZGMwMzU1OGFjZWQ3MjUwYmNjNDIxMWM3YTdkYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/IuDLfny7FXxsT5JG6+FudkkXn+
EeI69cFugPxm5KRLLkXPRvySf4W11QusYYivgzZzTFP9FiXX/PiX9ndj/9qXmXmj
Den2uMhyeE+/jH9j1e2obWIvWLRPWkmaU0pvkpbCwF6RXH0Ehq/QYvP7gg7csVTv
tiapUsMr7LWKEMhg6SoYIXuMyO78AOx+HrHed8BdVsj7NACszKIIaQlc4WfeyL/P
eaK1i+DZFNj+I2OMuQi+tBuY636jf0Xec0AjW80RqYby/khbYDbvCzjpPXQxponM
R9ki/JMuYMNnGSPOXXsslBnwdkh34PWLzjz+IFEQHdboZauSgXXML0aUuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGAzMGX3ANVis7XJQvMQhHHp9xXMB8GA1UdIwQY
MBaAFG88nHbir8c8ztvJ4Ckv+5n2XnNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp5Y2R1S3Z4enpPMjhuZ0tTXzdtZlplYzFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNWRmZTYtMThiYi00OGE1LTg2MjIt
NTkyMDdkODQyMGQwLzEvVVlETXdaZmNBMVdLenRjbEM4eENFY2VuM0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNWRmZTYtMThiYi00OGE1LTg2MjItNTkyMDdkODQyMGQw
LzEvYnp5Y2R1S3Z4enpPMjhuZ0tTXzdtZlplYzFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWp0MA0G
CSqGSIb3DQEBCwUAA4IBAQCdEVHJqY4cUfKWtD2i/o6ScL7mCpCe5x5iBUx5m+mY
SJ2OmTw4ZiNuUwjPbrPoW6K950duZ+yh82R1lVH1BDw8eDOx253LuyEWnJFL4QEv
prt7hw0FO8g6f8TKaIVLENJqrd3wuS5Q/wrF32G/4sRdr0VGJOqTMm+/hUUlzMUg
1IKXb9uID93o57FoYZ+L912jtYN87pocdyuTUHGhVYnM2bGCxYVAhoJFD7odymgz
5Pms+34ODX2Py5LbEpI0DxuN+Ea9wW5MmGaT+e18GL0ASUnhK9EBy+gfDjYDYukS
t9Prs4BPjHlPWGzRyikYq//bUAmn7dlJ6tpCDnPalKd8
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:53:07 2025 by rpki-client