Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/UQQOI6Ylx2NQt62E8A3LR5IaeA8.roa
File: UQQOI6Ylx2NQt62E8A3LR5IaeA8.roa (raw, json)
Hash identifier: BLuZgAiWm694NNSjxeRK5F/V8ERGYgldrFfH19uFYhg=
Subject key identifier: 51:04:0E:23:A6:25:C7:63:50:B7:AD:84:F0:0D:CB:47:92:1A:78:0F
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 018C6263F1636B247DDFCC9BB7C3F249B9BA
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/UQQOI6Ylx2NQt62E8A3LR5IaeA8.roa
Signing time: Wed 13 Dec 2023 08:56:06 +0000
ROA not before: Wed 13 Dec 2023 08:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25393
IP address blocks: 193.178.144.0/23 maxlen: 23
78.27.224.0/19 maxlen: 19
77.87.192.0/21 maxlen: 21
195.39.197.0/24 maxlen: 24
89.184.72.0/21 maxlen: 21
89.184.88.0/21 maxlen: 21
5.149.120.0/22 maxlen: 24
5.149.124.0/22 maxlen: 24
195.177.116.0/22 maxlen: 22
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:100::/44 maxlen: 56
2a02:2278:208::/48 maxlen: 48
2a02:2279::/32 maxlen: 32
2a02:2279:200::/40 maxlen: 56
2a02:2279:1200::/40 maxlen: 56
2a02:2279::/40 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:63:f1:63:6b:24:7d:df:cc:9b:b7:c3:f2:49:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Dec 13 08:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51040e23a625c76350b7ad84f00dcb47921a780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:27:ed:85:82:08:98:5a:4a:a3:e6:6e:76:
c2:a4:97:cb:1a:d8:0b:c0:79:bd:31:65:f5:70:79:
d3:66:21:6f:d0:44:c9:1e:3f:48:77:68:f0:27:1a:
61:16:4f:01:2d:d1:02:f0:45:83:a8:1b:9e:ee:d7:
ea:51:de:a5:24:d1:3a:e7:a2:c1:e1:4a:2f:cd:11:
a8:09:c9:87:16:48:00:f8:39:2e:b4:e4:4d:e9:e8:
9c:fa:ce:8b:90:d8:84:fb:1a:fd:ed:e7:f3:11:58:
c3:4f:16:36:fb:4d:5a:e8:76:16:3b:89:f7:80:cd:
17:6f:ad:eb:5a:0c:1a:89:e3:dc:a3:71:34:45:26:
48:5e:31:07:58:9e:9f:24:2e:bf:de:f5:2a:d6:c9:
1e:0e:ac:16:f3:31:26:23:04:69:25:3a:33:ba:ec:
96:f0:fb:47:cd:66:32:18:84:ad:ae:94:75:33:9e:
6a:34:94:7a:41:85:ac:3d:9b:90:c1:d0:df:f4:80:
3e:03:e3:4c:92:a4:da:1c:55:4b:9a:c9:78:0f:f8:
9b:cf:2d:bd:80:1e:bd:44:fd:f8:e2:4b:21:62:85:
29:c9:10:6d:5f:f5:50:ca:bc:3f:ce:c0:f3:13:a8:
a1:6d:fb:e1:e1:a8:e9:b6:f7:7c:f7:9d:c7:da:fc:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:0E:23:A6:25:C7:63:50:B7:AD:84:F0:0D:CB:47:92:1A:78:0F
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/UQQOI6Ylx2NQt62E8A3LR5IaeA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.224.0/19
89.184.72.0/21
89.184.88.0/21
193.178.144.0/23
195.39.197.0/24
195.177.116.0/22
IPv6:
2a02:2278:100::/44
2a02:2278:200::/40
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
67:5d:50:6b:ce:b9:aa:75:3b:a4:15:b1:d4:68:78:96:08:b2:
3a:29:0f:14:95:29:95:f1:af:b2:f5:9f:c2:b0:d8:5d:b0:7c:
79:ce:00:a7:93:3b:09:d6:55:64:d5:b3:35:d5:72:25:f8:62:
5f:63:14:9f:6e:75:9a:08:24:6e:de:b0:d9:01:5e:9d:99:16:
66:bd:15:ea:42:3b:5b:70:a3:a7:a0:d0:a2:78:4b:13:b3:3e:
39:78:1c:4b:a9:1d:ac:8b:48:80:be:37:a8:8a:1b:22:f4:06:
db:ae:67:cd:b0:15:68:7f:db:ce:1e:ed:6d:cb:a0:95:c5:1c:
db:35:5e:d5:35:3d:bd:da:a0:06:b4:24:5b:16:8b:3d:8b:b3:
f2:02:58:f0:ff:cc:a7:40:2c:cd:23:dd:6f:29:54:53:be:cf:
4a:ff:4e:51:8f:77:4e:b3:50:9b:f9:10:51:b1:b5:ca:e3:87:
7a:fa:92:b0:95:3e:40:1f:ec:b4:48:cf:cd:9e:0b:d6:75:86:
82:48:5c:72:84:4d:45:60:a1:90:8a:cd:62:f1:4d:04:7d:5b:
62:99:cb:63:15:fe:20:64:cf:f9:06:2e:dd:27:7f:c3:82:53:
fa:8b:b7:83:47:35:dc:2f:92:11:c9:82:90:3b:f9:1b:b3:48:
a8:f5:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:14 2025 by rpki-client