Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/UnQKM1xg41YpJTq3yi4WVTR1LUU.roa
File: UnQKM1xg41YpJTq3yi4WVTR1LUU.roa (raw, json)
Hash identifier: MmeEBZSBqi0PfiVTr/q8v7iTE43ejqlN0oFYqmCkQWY=
Subject key identifier: 52:74:0A:33:5C:60:E3:56:29:25:3A:B7:CA:2E:16:55:34:75:2D:45
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 03B54B5C
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/UnQKM1xg41YpJTq3yi4WVTR1LUU.roa
Signing time: Sat 01 Jan 2022 08:56:33 +0000
ROA not before: Sat 01 Jan 2022 08:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 194.213.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62212956 (0x3b54b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Jan 1 08:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52740a335c60e35629253ab7ca2e165534752d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:ed:6c:77:fb:24:b1:5d:77:7e:ed:03:0d:
ca:21:0b:45:73:1d:44:ef:5f:13:70:5b:54:d4:81:
37:7e:88:da:3a:58:48:6c:c7:60:98:98:a1:86:e2:
e6:84:73:ca:08:97:41:37:9f:5a:30:51:c6:c7:f6:
f1:59:1f:78:08:5d:68:cd:c8:5c:cf:52:55:fd:5f:
ff:1a:c9:4d:de:96:d2:d7:f4:97:ed:e1:b9:06:cb:
9b:11:54:53:13:a3:f1:42:3c:de:a8:07:c7:9d:0d:
48:37:1c:bc:e9:31:9b:c8:7a:96:87:8e:8e:0e:2c:
ab:92:a9:34:3d:13:11:27:1e:b3:84:28:ef:c8:6b:
37:cf:2e:4b:ee:31:94:30:81:09:9d:e0:07:27:97:
43:66:22:a4:57:c8:75:47:7f:51:20:bb:81:8d:73:
04:ad:5b:a5:4f:f7:66:82:77:9d:91:35:ab:9c:3f:
de:fc:a1:06:16:bf:19:76:47:9c:44:09:a4:5c:aa:
53:10:b6:94:6a:f6:c6:d7:fe:3f:a3:8b:87:b5:c1:
dd:4d:7f:fb:b4:c8:04:a4:02:68:c6:37:ff:59:29:
bf:1b:1f:e2:4c:f3:0b:2a:db:20:9f:d4:52:80:8d:
7d:cd:38:22:45:2f:93:10:35:db:79:84:a3:bc:21:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:0A:33:5C:60:E3:56:29:25:3A:B7:CA:2E:16:55:34:75:2D:45
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/UnQKM1xg41YpJTq3yi4WVTR1LUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:77:66:88:3e:c2:73:42:9d:e3:3f:4a:32:9b:91:60:58:00:
89:51:0d:1d:a4:8f:39:4d:b5:ca:86:48:06:3e:b1:de:71:d4:
4c:7c:cb:13:a1:62:34:b9:da:95:71:50:58:51:69:6c:f1:bd:
02:02:73:3e:cb:61:7d:ed:d6:9e:d2:59:9b:22:be:d7:20:0f:
27:3a:5a:c0:8d:79:5a:8e:a9:89:04:0b:b4:12:a8:44:8a:0b:
13:e1:58:34:17:ab:6f:f8:88:5e:e0:6a:03:ab:cd:af:f0:6c:
16:2d:ad:6d:f6:0c:46:1c:43:41:2c:b8:39:8a:e2:45:5e:bc:
f7:ec:03:0b:c9:89:0f:b1:0e:f7:c0:76:77:3d:67:c6:ba:55:
20:bf:57:20:d0:83:63:cb:ea:d0:df:e0:da:e9:8e:00:bc:0e:
ec:f6:b4:26:fc:bf:a3:b6:50:63:09:0b:a6:ad:e0:40:29:b8:
93:cd:a2:f1:e3:6c:ba:60:4c:0c:89:2a:d8:c9:fa:ca:a0:ee:
15:79:46:d4:1d:51:7f:55:9b:f5:7f:f4:be:8f:cd:61:a9:72:
23:b7:76:33:78:79:60:07:81:31:2d:01:cf:f6:5e:39:1a:d2:
8e:cd:e0:ec:9d:97:70:a5:2b:53:e4:9a:cc:19:4f:02:d5:ab:
65:1d:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:24 2025 by rpki-client