Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/UNMQtCe2PkYKjam_4xHflh-lvdo.roa
File: UNMQtCe2PkYKjam_4xHflh-lvdo.roa (raw, json)
Hash identifier: DNTRxEUL4BhzA5rtIR8pWM3D1BAYAVqG28CuMNygTYM=
Subject key identifier: 50:D3:10:B4:27:B6:3E:46:0A:8D:A9:BF:E3:11:DF:96:1F:A5:BD:DA
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 01856FF05B5D68E0460E7097EF5E809CE105
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/UNMQtCe2PkYKjam_4xHflh-lvdo.roa
Signing time: Mon 02 Jan 2023 00:45:00 +0000
ROA not before: Mon 02 Jan 2023 00:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57007
IP address blocks: 91.229.252.0/22 maxlen: 22
2001:678:84c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:5b:5d:68:e0:46:0e:70:97:ef:5e:80:9c:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Jan 2 00:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50d310b427b63e460a8da9bfe311df961fa5bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:a6:2e:c0:39:92:20:98:34:30:2d:11:c3:
13:d2:81:1b:79:48:dd:62:19:f1:3d:a2:b9:ba:86:
44:db:8f:6f:90:b6:25:7a:b3:e2:c1:4d:78:c2:6d:
06:89:c4:f2:33:80:82:c5:f6:ea:18:0a:3e:bd:6d:
f1:15:8e:43:24:26:99:6c:31:87:3b:59:04:6c:ee:
65:fa:e3:39:bc:90:d0:8d:a1:49:53:f9:ec:bf:15:
1e:37:dc:3c:b5:cf:84:2c:15:ed:d5:37:a1:be:7c:
69:2d:cd:cb:e0:19:c5:36:9f:e4:ce:81:1c:7f:55:
e4:96:a2:98:43:4f:97:d6:8f:e2:38:d6:2b:f9:ac:
3e:76:cd:cc:03:7b:96:eb:1a:76:c0:45:79:75:0c:
4c:8e:4b:44:db:77:d6:00:64:4a:47:c4:a9:74:98:
ca:3e:3b:a7:10:5a:a0:44:ab:08:b6:81:fd:cf:4d:
92:b0:7a:72:ac:fd:f5:1b:dc:9a:9c:c7:4f:9f:e9:
96:33:58:a9:c2:a3:b6:11:0d:d0:46:b4:17:2b:17:
79:94:5f:ae:e4:5d:05:58:d0:df:98:97:e5:cd:14:
e9:5b:05:95:f0:39:92:26:71:16:a5:87:52:2a:60:
73:e9:e7:89:0a:27:cc:ef:a6:29:23:b3:85:49:c4:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:10:B4:27:B6:3E:46:0A:8D:A9:BF:E3:11:DF:96:1F:A5:BD:DA
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/UNMQtCe2PkYKjam_4xHflh-lvdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.252.0/22
IPv6:
2001:678:84c::/48
Signature Algorithm: sha256WithRSAEncryption
b0:c3:f1:5a:c1:25:63:5a:49:c3:86:c9:f0:a9:1b:54:50:e7:
53:23:20:4b:2a:68:df:01:46:1d:5c:a8:83:aa:9e:c8:a0:eb:
ce:62:14:2c:c5:f0:ce:73:ed:c2:5d:e7:bb:d2:34:7a:0d:5c:
54:f3:ad:f4:8c:ce:ac:6a:d0:6c:2f:f6:b8:2f:29:33:b6:0c:
09:5a:c9:a9:d4:10:4e:b3:2b:4f:a8:0e:d8:78:4f:14:32:5f:
85:c0:af:8a:4f:39:9e:f3:89:20:c8:13:a1:7f:cc:ec:a8:a4:
4d:38:9e:b7:31:0a:30:81:06:aa:b4:64:7d:c2:69:cc:4a:c2:
62:e1:66:f4:7b:3e:b9:4c:7c:cc:d1:09:15:75:cc:60:73:21:
b2:14:b3:d4:6e:01:aa:59:e8:1d:f6:4f:3e:84:b0:5d:52:d1:
2c:c2:82:b3:f8:24:8d:bf:5f:e1:71:2f:92:ec:49:5f:0a:a2:
04:32:6f:e8:98:13:36:27:42:c9:b6:60:99:e4:33:6f:7e:45:
f7:38:a9:40:f4:93:06:0b:2c:78:c2:32:52:06:bd:9f:40:8f:
6a:d9:c4:d8:36:b7:a7:21:79:f3:93:66:af:a5:ac:34:ae:c8:
51:61:ad:ed:63:1c:54:be:e7:ce:b4:26:2a:17:5f:40:4d:84:
84:9c:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:36:33 2025 by rpki-client