Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/uunl2fvgtoZVl9qTLPA9QMxl6eI.roa
File: uunl2fvgtoZVl9qTLPA9QMxl6eI.roa (raw, json)
Hash identifier: 8FYOmmGHJNbEM+DidMGc+PktN2KhepsXgUs8gMEKtvc=
Subject key identifier: BA:E9:E5:D9:FB:E0:B6:86:55:97:DA:93:2C:F0:3D:40:CC:65:E9:E2
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 37235D81
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/uunl2fvgtoZVl9qTLPA9QMxl6eI.roa
Signing time: Mon 20 Jun 2022 10:05:44 +0000
ROA not before: Mon 20 Jun 2022 10:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 192.109.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925064577 (0x37235d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jun 20 10:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae9e5d9fbe0b6865597da932cf03d40cc65e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:15:1f:83:b2:80:9e:df:01:b2:5b:cd:d1:
84:9d:bf:73:4c:ac:8e:62:0f:dd:44:26:55:d1:2e:
8a:0c:53:8e:62:5f:a4:03:58:24:2c:61:50:1f:76:
11:57:dc:71:57:47:4a:ee:94:ab:c0:80:77:b6:64:
5a:ea:43:23:e3:11:4f:84:62:02:41:5e:ce:08:8e:
1e:f2:1f:c9:5d:95:a9:c4:af:25:d8:12:61:60:b8:
d1:d4:36:71:d5:1f:0d:1d:fa:0b:1d:21:5a:0b:95:
88:10:d0:fb:16:a0:ca:4c:88:1b:4a:45:b2:94:d0:
d0:95:6c:0c:a2:64:60:27:c6:b6:3d:21:b1:44:5c:
4d:24:f8:fa:04:15:50:f6:96:b3:0a:4c:95:c6:cb:
6a:99:50:7f:cc:d3:22:c1:33:cb:40:45:6f:97:6a:
1e:3c:1e:07:57:10:4f:cb:3f:e3:5e:0b:c6:de:34:
be:76:74:ab:91:27:44:dc:b7:55:e3:4d:1f:bc:fc:
63:85:eb:9c:98:f1:e7:b9:51:ab:64:d6:16:d2:94:
1b:65:6e:a2:8e:0f:c0:a0:aa:ef:b8:c5:31:51:39:
26:a3:31:d5:91:de:ac:3e:74:07:99:a3:53:ca:de:
2e:c8:f4:4c:11:b6:d4:c9:b6:67:8c:52:03:cb:93:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:E5:D9:FB:E0:B6:86:55:97:DA:93:2C:F0:3D:40:CC:65:E9:E2
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/uunl2fvgtoZVl9qTLPA9QMxl6eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.201.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e9:1c:92:99:b4:9a:ef:d4:db:d3:2e:2f:d8:6c:ba:81:91:
8f:5b:3f:64:16:ed:aa:7c:f2:6c:c3:b8:11:10:99:a2:a3:59:
2a:36:00:c9:8f:9d:51:41:b2:97:7d:5b:31:c2:10:7d:1a:b4:
41:ff:fe:c4:ce:3f:a2:d1:78:e2:86:9d:11:f8:3b:57:24:c7:
06:24:5c:42:90:05:32:e2:80:d6:d1:d5:2e:26:fc:75:38:45:
2a:7a:4e:d2:86:fe:0b:2c:7d:87:0d:02:ef:0f:b0:41:53:e3:
aa:5b:f2:51:ff:95:d9:4f:a9:ff:c9:ed:8a:84:15:34:29:be:
80:68:e8:39:90:e8:2c:cf:96:0c:70:a0:5b:df:1f:15:94:4a:
72:fb:c2:75:f8:40:94:84:93:29:62:84:e1:a3:b5:59:a9:f0:
d2:95:fa:ba:1a:23:59:bd:b8:eb:9e:cb:67:4b:42:44:ef:cd:
09:b8:21:c3:90:cc:d2:8c:2c:dc:4f:72:da:b8:e6:a0:07:d5:
11:8c:6c:a1:a7:a9:92:b7:43:9c:e3:14:96:00:cd:5b:5f:97:
80:69:30:67:71:4c:bc:b0:1d:7e:e0:94:ce:f1:8e:36:a9:41:
f7:36:22:cd:4a:6b:b3:f7:d7:74:d1:4e:93:ef:50:fe:65:16:
e6:c2:63:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENyNdgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MWY1YTEwZTRmZDI2NTVhZGJiYjQwZWRlMThiMjYxNWFjNTU4ZWE5MB4XDTIyMDYy
MDEwMDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFlOWU1ZDlmYmUw
YjY4NjU1OTdkYTkzMmNmMDNkNDBjYzY1ZTllMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJs0FR+DsoCe3wGyW83RhJ2/c0ysjmIP3UQmVdEuigxTjmJf
pANYJCxhUB92EVfccVdHSu6Uq8CAd7ZkWupDI+MRT4RiAkFezgiOHvIfyV2VqcSv
JdgSYWC40dQ2cdUfDR36Cx0hWguViBDQ+xagykyIG0pFspTQ0JVsDKJkYCfGtj0h
sURcTST4+gQVUPaWswpMlcbLaplQf8zTIsEzy0BFb5dqHjweB1cQT8s/414Lxt40
vnZ0q5EnRNy3VeNNH7z8Y4XrnJjx57lRq2TWFtKUG2Vuoo4PwKCq77jFMVE5JqMx
1ZHerD50B5mjU8reLsj0TBG21Mm2Z4xSA8uTEXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS66eXZ++C2hlWX2pMs8D1AzGXp4jAfBgNVHSMEGDAWgBRB9aEOT9JlWtu7
QO3hiyYVrFWOqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FmV2hEa19TWlZyYnUwRHQ0WXNtRmF4Vmpxay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvOGQzYzgyLWU0MDMtNGRhNi1iMzE1LTg3OTAyMDZmMGQ3NC8x
L3V1bmwyZnZndG9aVmw5cVRMUEE5UU14bDZlSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
OGQzYzgyLWU0MDMtNGRhNi1iMzE1LTg3OTAyMDZmMGQ3NC8xL1FmV2hEa19TWlZy
YnUwRHQ0WXNtRmF4Vmpxay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtyTANBgkqhkiG9w0BAQsFAAOC
AQEAUukckpm0mu/U29MuL9hsuoGRj1s/ZBbtqnzybMO4ERCZoqNZKjYAyY+dUUGy
l31bMcIQfRq0Qf/+xM4/otF44oadEfg7VyTHBiRcQpAFMuKA1tHVLib8dThFKnpO
0ob+Cyx9hw0C7w+wQVPjqlvyUf+V2U+p/8ntioQVNCm+gGjoOZDoLM+WDHCgW98f
FZRKcvvCdfhAlISTKWKE4aO1Wanw0pX6uhojWb24657LZ0tCRO/NCbghw5DM0ows
3E9y2rjmoAfVEYxsoaepkrdDnOMUlgDNW1+XgGkwZ3FMvLAdfuCUzvGONqlB9zYi
zUprs/fXdNFOk+9Q/mUW5sJjqQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:36 2025 by rpki-client