Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/BRE4UVkT1iAo6AQ868omvMMxP6g.roa
File: BRE4UVkT1iAo6AQ868omvMMxP6g.roa (raw, json)
Hash identifier: KF5hjsPTloy7iIYWsSh26kCjNSS5VXaos86lZf079iQ=
Subject key identifier: 05:11:38:51:59:13:D6:20:28:E8:04:3C:EB:CA:26:BC:C3:31:3F:A8
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 0188B3EFE641731F0EEA56A8F33A2F8DAB85
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/BRE4UVkT1iAo6AQ868omvMMxP6g.roa
Signing time: Tue 13 Jun 2023 08:47:03 +0000
ROA not before: Tue 13 Jun 2023 08:47:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51380
IP address blocks: 195.20.4.0/23 maxlen: 23
91.218.192.0/23 maxlen: 23
195.20.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:ef:e6:41:73:1f:0e:ea:56:a8:f3:3a:2f:8d:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Jun 13 08:47:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=051138515913d62028e8043cebca26bcc3313fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:e8:bf:0c:eb:88:75:7c:42:fa:e2:ff:dc:
4c:8d:41:7b:48:9f:0a:6b:cc:bc:1c:39:27:57:d5:
67:ed:27:67:2a:a0:76:93:78:d1:47:24:ee:de:98:
1e:46:a4:41:f2:06:20:78:a3:37:00:1b:7c:22:5b:
45:c1:00:c3:77:cb:fa:07:ab:e7:da:04:43:09:08:
cc:e7:55:b7:81:23:08:e7:88:62:a7:0c:69:d6:33:
ea:30:fa:2e:ca:ea:5d:15:92:59:5c:8c:84:b4:68:
e7:c9:c8:f1:e7:5d:40:c8:e4:3f:8a:21:4b:1b:1f:
3f:50:1f:7f:3e:50:32:09:b4:58:e8:8e:c8:ae:b3:
de:6e:a2:aa:ad:d6:dc:9b:30:94:86:5c:51:33:fe:
ec:55:15:86:10:9a:b8:4f:e5:f5:ca:f4:4a:72:b1:
c1:a4:39:54:23:32:07:0c:18:fe:7f:cf:49:17:c1:
ef:4b:2c:37:48:25:f9:71:28:bf:de:e0:4e:ce:77:
1c:ab:d4:bd:4b:ba:43:d9:70:6d:bc:4b:0f:9d:c2:
bc:29:45:f2:44:3c:8a:d0:31:a0:e0:06:cb:8e:ea:
d4:03:47:24:a9:4e:a1:db:6d:76:18:ec:f6:f7:2e:
12:f8:23:3e:1b:a1:a2:bb:3e:5a:1f:19:ab:70:51:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:38:51:59:13:D6:20:28:E8:04:3C:EB:CA:26:BC:C3:31:3F:A8
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/BRE4UVkT1iAo6AQ868omvMMxP6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.192.0/23
195.20.4.0-195.20.6.255
Signature Algorithm: sha256WithRSAEncryption
25:55:2f:bf:74:b4:06:de:5b:f2:0c:9a:f9:e0:e7:83:b3:20:
df:85:a1:e3:96:f1:92:ec:d5:1e:26:2c:82:e5:1e:52:8f:92:
d4:a8:72:54:6f:36:72:5b:00:20:a6:dc:3c:d5:dc:3c:29:12:
85:4d:72:8a:42:eb:f6:2f:fe:15:20:b4:34:b0:c1:22:46:2a:
2e:79:de:7f:ce:f2:fb:c7:19:db:15:ae:b1:0c:7c:06:97:5d:
cd:c9:45:91:83:aa:f2:7a:07:ac:f6:8c:4e:07:35:b6:90:28:
2e:c2:f0:99:90:80:84:d6:e0:76:86:28:30:ea:93:46:40:8d:
ff:ce:c9:30:fc:d7:34:c6:78:96:0c:7f:c2:46:76:e6:a6:5a:
b9:cd:94:34:ae:4f:60:f2:77:00:72:3d:02:5a:db:30:92:75:
2d:3b:d1:43:dc:0c:f6:72:6b:5d:bc:4e:4a:68:13:80:cf:2f:
69:a5:32:47:bb:a5:e5:83:8d:7d:93:10:3f:88:e8:59:0b:fa:
24:61:c3:8d:ae:55:f1:cf:ea:c5:fa:78:05:42:e9:0e:b5:1f:
2d:4c:ce:6e:c2:28:de:d9:48:c6:fc:da:d3:6e:05:ef:15:3f:
b9:8f:fe:e4:82:f9:6b:97:4e:68:66:dc:b3:9d:ab:68:0a:36:
41:2a:32:02
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYiz7+ZBcx8O6lao8zovjauFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1
OTVmNzYwHhcNMjMwNjEzMDg0NzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTExMzg1MTU5MTNkNjIwMjhlODA0M2NlYmNhMjZiY2MzMzEzZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh03ovwzriHV8Qvri/9xMjUF7SJ8K
a8y8HDknV9Vn7SdnKqB2k3jRRyTu3pgeRqRB8gYgeKM3ABt8IltFwQDDd8v6B6vn
2gRDCQjM51W3gSMI54hipwxp1jPqMPouyupdFZJZXIyEtGjnycjx511AyOQ/iiFL
Gx8/UB9/PlAyCbRY6I7IrrPebqKqrdbcmzCUhlxRM/7sVRWGEJq4T+X1yvRKcrHB
pDlUIzIHDBj+f89JF8HvSyw3SCX5cSi/3uBOznccq9S9S7pD2XBtvEsPncK8KUXy
RDyK0DGg4AbLjurUA0ckqU6h2212GOz29y4S+CM+G6Giuz5aHxmrcFGpWQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAUROFFZE9YgKOgEPOvKJrzDMT+oMB8GA1UdIwQY
MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct
YjgyYjBlZDJkMzIzLzEvQlJFNFVWa1QxaUFvNkFRODY4b212TU14UDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz
LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBW9rAMAwD
BALDFAQDBADDFAYwDQYJKoZIhvcNAQELBQADggEBACVVL790tAbeW/IMmvng54Oz
IN+FoeOW8ZLs1R4mLILlHlKPktSoclRvNnJbACCm3DzV3DwpEoVNcopC6/Yv/hUg
tDSwwSJGKi553n/O8vvHGdsVrrEMfAaXXc3JRZGDqvJ6B6z2jE4HNbaQKC7C8JmQ
gITW4HaGKDDqk0ZAjf/OyTD81zTGeJYMf8JGduamWrnNlDSuT2DydwByPQJa2zCS
dS070UPcDPZya128TkpoE4DPL2mlMke7peWDjX2TED+I6FkL+iRhw42uVfHP6sX6
eAVC6Q61Hy1Mzm7CKN7ZSMb82tNuBe8VP7mP/uSC+WuXTmhm3LOdq2gKNkEqMgI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:29 2025 by rpki-client