Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/UEI7KDPgIffGXZe5z904Aq_1oSw.roa
File: UEI7KDPgIffGXZe5z904Aq_1oSw.roa (raw, json)
Hash identifier: ica8LcN3O8n1eRi99uIbiGsuMQ6r+FoTBuLuzuBa80c=
Subject key identifier: 50:42:3B:28:33:E0:21:F7:C6:5D:97:B9:CF:DD:38:02:AF:F5:A1:2C
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 018570CBD9D070F032DC4BC20B47C4CA92E2
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/UEI7KDPgIffGXZe5z904Aq_1oSw.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205422
IP address blocks: 151.248.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d9:d0:70:f0:32:dc:4b:c2:0b:47:c4:ca:92:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50423b2833e021f7c65d97b9cfdd3802aff5a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:4a:a9:8c:36:07:d3:9d:0b:0e:eb:4b:d6:
59:1d:d6:ca:2d:d1:ba:fd:9b:3f:66:ed:5e:31:10:
b7:f0:71:08:34:cd:f6:fb:00:53:5c:ab:37:f9:4a:
dc:8e:d2:86:95:10:b8:0b:90:c8:63:44:46:ce:65:
b4:db:06:e6:cc:11:9c:cb:e0:ec:1e:76:3c:c3:d2:
bc:57:2c:78:3d:2a:ae:e2:e4:0e:bc:fd:26:b3:52:
ea:2d:de:50:38:86:22:6a:81:f6:2d:4b:4b:ca:ac:
5f:a4:ad:a5:c4:94:4c:1f:15:8f:eb:ae:ef:02:cb:
f0:16:ed:9e:5a:78:a4:f6:71:01:11:c0:67:d8:da:
35:e8:dd:79:d9:12:f6:00:dc:bd:cc:05:71:cb:b4:
7e:b8:f1:df:5d:22:f6:63:f9:dc:fc:57:29:3b:b4:
ac:70:7e:36:91:69:5b:aa:b1:b5:e8:a2:d9:46:87:
3c:13:59:13:eb:06:ec:8a:15:86:8f:d4:e4:62:7e:
c4:d2:4b:1f:ea:b3:39:9a:2c:c9:4b:9d:b9:11:fe:
32:a5:24:fa:34:be:20:12:ee:4e:b9:09:ec:6f:5c:
96:f9:34:5d:72:f3:92:6f:9c:e1:e1:87:1f:19:1b:
b2:7b:df:42:29:1b:f0:37:d0:85:c2:63:24:c3:cb:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:3B:28:33:E0:21:F7:C6:5D:97:B9:CF:DD:38:02:AF:F5:A1:2C
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/UEI7KDPgIffGXZe5z904Aq_1oSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.14.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6d:6a:01:d5:40:6e:c0:4d:5e:66:8b:92:40:ed:76:1c:e2:
9c:b8:57:f8:b2:4c:bb:9a:04:33:e9:a7:1e:3a:04:8b:fc:ca:
b4:07:d4:dc:6d:6d:7f:0c:66:25:be:cf:b3:3a:00:a2:3c:db:
d7:71:5b:cd:ae:99:6a:04:1e:05:53:18:ec:71:77:9c:31:57:
3a:a8:f6:d6:4e:de:c1:21:a5:7b:23:1b:6b:3b:fd:93:69:2d:
15:dd:f8:7f:cb:7d:d5:09:ab:5e:f4:4a:1d:7d:fb:52:18:80:
01:ec:b7:e0:74:56:96:e7:d7:01:25:a2:da:4f:ed:cf:0b:8e:
78:ce:85:c0:a5:2b:63:c3:6e:3a:40:0e:87:39:fc:fe:2d:26:
fc:1b:1e:de:9e:42:0b:75:db:6c:ae:ef:67:3f:a2:ad:1b:ce:
0e:c1:a8:f1:2e:e9:e5:90:bc:25:7b:a0:71:2a:93:80:16:a7:
f4:99:62:6a:98:2f:0f:c7:82:5e:e8:8a:88:ef:33:26:fa:0b:
30:74:67:10:93:7a:00:66:e3:ba:92:a8:0a:ae:43:51:a6:25:
80:43:a0:28:17:fc:f3:cf:f4:ce:36:f3:ac:60:c5:8f:a9:98:
e8:0b:43:c2:6e:1a:2a:b9:78:68:e1:54:7b:62:d8:89:e1:a9:
ec:9e:21:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy9nQcPAy3EvCC0fEypLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk
ZDVjNGIwHhcNMjMwMTAyMDQ0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDQyM2IyODMzZTAyMWY3YzY1ZDk3YjljZmRkMzgwMmFmZjVhMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hdKqYw2B9OdCw7rS9ZZHdbKLdG6
/Zs/Zu1eMRC38HEINM32+wBTXKs3+UrcjtKGlRC4C5DIY0RGzmW02wbmzBGcy+Ds
HnY8w9K8Vyx4PSqu4uQOvP0ms1LqLd5QOIYiaoH2LUtLyqxfpK2lxJRMHxWP667v
AsvwFu2eWnik9nEBEcBn2No16N152RL2ANy9zAVxy7R+uPHfXSL2Y/nc/FcpO7Ss
cH42kWlbqrG16KLZRoc8E1kT6wbsihWGj9TkYn7E0ksf6rM5mizJS525Ef4ypST6
NL4gEu5OuQnsb1yW+TRdcvOSb5zh4YcfGRuye99CKRvwN9CFwmMkw8uPQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBCOygz4CH3xl2Xuc/dOAKv9aEsMB8GA1UdIwQY
MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt
NzYxMGFhYmFhMjc0LzEvVUVJN0tEUGdJZmZHWFplNXo5MDRBcV8xb1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0
LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/gOMA0G
CSqGSIb3DQEBCwUAA4IBAQAAbWoB1UBuwE1eZouSQO12HOKcuFf4sky7mgQz6ace
OgSL/Mq0B9TcbW1/DGYlvs+zOgCiPNvXcVvNrplqBB4FUxjscXecMVc6qPbWTt7B
IaV7IxtrO/2TaS0V3fh/y33VCate9EodfftSGIAB7LfgdFaW59cBJaLaT+3PC454
zoXApStjw246QA6HOfz+LSb8Gx7enkILddtsru9nP6KtG84OwajxLunlkLwle6Bx
KpOAFqf0mWJqmC8Px4Je6IqI7zMm+gswdGcQk3oAZuO6kqgKrkNRpiWAQ6AoF/zz
z/TONvOsYMWPqZjoC0PCbhoquXho4VR7YtiJ4ansniHE
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:41 2025 by rpki-client