Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/UJjmJl9OY_YceqIe29gCSJoYB8s.roa
File: UJjmJl9OY_YceqIe29gCSJoYB8s.roa (raw, json)
Hash identifier: f98zkioO3hDtouJ4L9JDfMtkwxZaTzZaKDuSRWX+b/8=
Subject key identifier: 50:98:E6:26:5F:4E:63:F6:1C:7A:A2:1E:DB:D8:02:48:9A:18:07:CB
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 018A9A882C818FA433E23B4149B36CE98D54
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/UJjmJl9OY_YceqIe29gCSJoYB8s.roa
Signing time: Fri 15 Sep 2023 20:28:50 +0000
ROA not before: Fri 15 Sep 2023 20:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48135
IP address blocks: 151.89.128.0/17 maxlen: 17
193.111.46.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.83.0/24 maxlen: 24
94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.86.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.87.0/24 maxlen: 24
151.89.232.0/22 maxlen: 22
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.54.0/24 maxlen: 24
185.51.13.0/24 maxlen: 24
185.51.12.0/24 maxlen: 24
151.89.0.0/17 maxlen: 17
151.89.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:88:2c:81:8f:a4:33:e2:3b:41:49:b3:6c:e9:8d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Sep 15 20:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5098e6265f4e63f61c7aa21edbd802489a1807cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:48:b4:3e:b0:0e:42:d1:55:6b:2c:75:7d:
26:e0:c4:45:1c:77:f6:8c:9a:cd:2c:70:28:ca:22:
62:fe:d6:70:53:03:b8:2e:76:15:e1:4a:e8:9e:57:
31:43:f4:8d:fb:5d:4b:6b:df:ec:13:0b:f5:3e:5d:
be:02:1b:ca:bd:08:fd:c6:cd:7a:22:92:82:58:02:
cd:a6:dd:bf:fc:d2:5f:16:d3:eb:10:32:01:00:a6:
7a:6b:64:6b:13:c8:7f:88:66:7a:85:89:3f:0a:e5:
73:2b:e3:e5:4f:5e:39:ce:06:fb:54:b5:92:2f:26:
4c:52:b1:09:12:5d:aa:54:09:0c:ed:0d:70:8a:29:
51:51:d6:73:19:df:ff:6a:a9:af:d7:c6:5c:97:2e:
db:1c:68:76:40:1a:73:20:62:a8:0d:d5:1e:c1:76:
ef:80:f8:54:5f:61:d6:2c:1d:7a:b5:96:60:a7:28:
4b:6f:40:1d:e4:5d:2d:94:4f:c2:1f:81:04:42:5c:
c0:b9:9b:6f:e9:f0:8c:34:36:81:a7:f4:57:37:b9:
ee:a5:3e:83:f7:45:67:85:2b:d5:a3:0d:f3:b0:46:
0e:41:1f:12:c2:2c:5c:a1:77:91:2b:26:ba:e7:59:
06:8b:54:f6:4d:bc:c7:fd:2b:dc:95:c5:be:b5:9b:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:E6:26:5F:4E:63:F6:1C:7A:A2:1E:DB:D8:02:48:9A:18:07:CB
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/UJjmJl9OY_YceqIe29gCSJoYB8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/23
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:53:0e:26:91:3e:1c:ee:90:6c:80:9c:2c:66:dd:5d:75:e1:
14:ab:31:c1:b5:92:f9:02:17:e9:ab:a7:99:3f:e3:e4:06:1b:
00:06:d2:b2:91:2a:c5:14:79:88:a1:fd:b1:e3:0e:2a:45:f2:
f1:7d:ac:23:4c:f3:70:30:cb:e2:47:54:d4:9d:b7:2e:86:ef:
0a:0e:f0:6b:20:d2:b8:3b:79:d6:b5:92:38:bf:d2:96:72:f2:
36:97:e2:cb:39:c6:46:1a:49:08:d2:66:94:0c:61:eb:5d:1c:
f1:38:00:56:f2:98:27:a8:e5:a2:5e:9f:88:34:ad:a0:94:ee:
a5:bd:4d:a9:5f:88:9d:76:05:47:6f:4e:6b:54:a1:17:b9:af:
44:85:13:29:ea:40:e6:3f:5f:3f:63:5b:d2:71:d3:7a:27:b1:
ed:b4:72:7e:05:52:26:2e:78:a3:a4:f5:72:d7:76:0b:1a:af:
f1:6d:e1:a0:9e:3b:3d:b2:ca:19:97:00:04:f0:9d:b6:e7:20:
66:62:df:66:a3:24:a9:79:64:7e:6b:79:a5:34:49:33:04:66:
df:4a:77:75:ff:1a:1d:52:53:62:79:61:73:4c:73:f6:4f:e9:
8a:83:b5:36:67:f7:60:f7:ee:26:51:f6:94:0f:b4:89:d6:48:
b1:12:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:31:48 2025 by rpki-client