Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/CWWrjSSjwbRVWONiunous5SbDd4.roa
File: CWWrjSSjwbRVWONiunous5SbDd4.roa (raw, json)
Hash identifier: gqVPcsZy3DLcjwuGavDnWzUZrbSP7JRiF6Om6wyvELg=
Subject key identifier: 09:65:AB:8D:24:A3:C1:B4:55:58:E3:62:BA:7A:2E:B3:94:9B:0D:DE
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 0185710C1ACB048EE990C564A3C6BA44F31A
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/CWWrjSSjwbRVWONiunous5SbDd4.roa
Signing time: Mon 02 Jan 2023 05:54:56 +0000
ROA not before: Mon 02 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16190
IP address blocks: 91.195.255.0/24 maxlen: 24
91.195.254.0/24 maxlen: 24
91.195.254.0/23 maxlen: 23
2.56.206.0/23 maxlen: 23
2.56.204.0/22 maxlen: 24
2.56.204.0/23 maxlen: 23
91.198.109.0/24 maxlen: 24
91.198.108.0/24 maxlen: 24
91.198.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1a:cb:04:8e:e9:90:c5:64:a3:c6:ba:44:f3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Jan 2 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0965ab8d24a3c1b45558e362ba7a2eb3949b0dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:c1:a2:0e:2b:10:c5:47:82:68:a8:a9:a7:
c6:44:16:c3:0e:df:ea:46:b7:1a:60:c5:e8:fc:06:
c5:cf:05:52:98:be:25:21:3c:65:e2:53:e3:13:d5:
ef:51:09:22:b7:5d:ee:bf:35:6e:09:23:55:f5:d2:
69:f9:23:07:ce:fd:e3:fa:76:b5:7c:ca:97:b8:04:
ef:6e:14:7c:5e:1f:6a:2a:8e:c3:4f:72:84:d8:0e:
e9:8e:e3:34:15:98:cb:07:71:f9:a2:42:b3:5a:1d:
99:c7:24:1c:fd:8e:e3:04:34:cb:49:92:3f:9d:d4:
9d:e6:d4:e6:70:e8:44:00:f9:2c:8c:a3:a9:70:28:
e0:63:09:f4:07:03:2d:db:d5:73:11:f4:21:79:c3:
8d:af:87:f7:9e:4f:b2:eb:a7:c6:0a:2d:78:94:e5:
4e:57:92:9e:0e:ad:f3:73:51:cc:b3:6c:93:e0:c1:
b4:d3:9e:b3:94:16:4e:0d:24:2b:96:80:75:26:96:
9f:9a:e7:0b:b0:6c:3d:56:f9:56:7b:1c:16:5a:11:
17:3e:e9:d6:79:50:1d:c8:d2:e1:f8:43:72:b4:88:
3f:d0:f3:1d:77:58:a2:94:7a:e6:a4:15:f2:c2:6e:
da:04:17:aa:d9:5d:a7:08:4e:cc:7d:2a:c6:35:27:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:AB:8D:24:A3:C1:B4:55:58:E3:62:BA:7A:2E:B3:94:9B:0D:DE
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/CWWrjSSjwbRVWONiunous5SbDd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
91.195.254.0/23
91.198.108.0/23
Signature Algorithm: sha256WithRSAEncryption
00:d6:97:84:fe:2c:24:01:81:d9:14:7d:4b:60:77:70:d0:6f:
85:9c:61:00:a2:8d:26:9d:c6:f8:a2:b0:d8:7a:d6:8b:f0:f7:
9d:12:65:cc:a5:8b:32:48:34:bc:4b:26:dc:eb:1a:ae:b5:19:
46:78:f2:ff:af:c6:ab:13:ff:93:d1:fb:94:6f:6e:e5:ce:cf:
7a:8f:99:0b:b4:cf:1b:a8:17:16:88:86:23:6a:22:58:65:e6:
15:32:3d:ce:8f:d4:16:b6:6f:6a:df:cd:ad:b6:83:f0:61:3c:
a5:95:7d:a8:f7:b6:24:7c:b5:da:96:15:f1:e4:9b:b5:93:98:
d6:50:63:7e:e5:9a:87:29:20:90:51:5a:6d:eb:5e:be:82:6f:
69:07:12:19:0c:87:e9:ae:aa:0c:6c:9b:2d:4d:55:81:71:40:
4c:98:43:27:1a:a7:0f:37:c2:78:4f:85:05:da:2c:3f:fa:86:
6f:51:c9:28:25:dc:b9:e3:1f:8b:a0:69:f4:74:f3:63:07:b4:
0f:ae:cf:1d:1b:e3:bb:2b:91:dd:88:c9:f6:de:fa:bf:0c:c0:
d8:1e:d5:51:d5:9e:3e:32:d1:2e:a3:b6:39:cb:87:33:b4:df:
a7:e6:46:53:4d:a1:c9:dd:5c:ce:41:ab:35:74:6b:8a:66:86:
66:5e:01:9b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVxDBrLBI7pkMVko8a6RPMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTBjYTRhYWIyYTNmOGFiYzZjOTczYWE3YzBmYTEzZjI1
NzEwODEwHhcNMjMwMTAyMDU1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTY1YWI4ZDI0YTNjMWI0NTU1OGUzNjJiYTdhMmViMzk0OWIwZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy/Bog4rEMVHgmioqafGRBbDDt/q
RrcaYMXo/AbFzwVSmL4lITxl4lPjE9XvUQkit13uvzVuCSNV9dJp+SMHzv3j+na1
fMqXuATvbhR8Xh9qKo7DT3KE2A7pjuM0FZjLB3H5okKzWh2ZxyQc/Y7jBDTLSZI/
ndSd5tTmcOhEAPksjKOpcCjgYwn0BwMt29VzEfQhecONr4f3nk+y66fGCi14lOVO
V5KeDq3zc1HMs2yT4MG0056zlBZODSQrloB1JpafmucLsGw9VvlWexwWWhEXPunW
eVAdyNLh+ENytIg/0PMdd1iilHrmpBXywm7aBBeq2V2nCE7MfSrGNSdqZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAllq40ko8G0VVjjYrp6LrOUmw3eMB8GA1UdIwQY
MBaAFCRQykqrKj+KvGyXOqfA+hPyVxCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAt
ZTBkNTc2ZDU1NzdhLzEvQ1dXcmpTU2p3YlJWV09OaXVub3VzNVNiRGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAtZTBkNTc2ZDU1Nzdh
LzEvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjjMAwQB
W8P+AwQBW8ZsMA0GCSqGSIb3DQEBCwUAA4IBAQAA1peE/iwkAYHZFH1LYHdw0G+F
nGEAoo0mncb4orDYetaL8PedEmXMpYsySDS8Sybc6xqutRlGePL/r8arE/+T0fuU
b27lzs96j5kLtM8bqBcWiIYjaiJYZeYVMj3Oj9QWtm9q382ttoPwYTyllX2o97Yk
fLXalhXx5Ju1k5jWUGN+5ZqHKSCQUVpt616+gm9pBxIZDIfprqoMbJstTVWBcUBM
mEMnGqcPN8J4T4UF2iw/+oZvUckoJdy54x+LoGn0dPNjB7QPrs8dG+O7K5HdiMn2
3vq/DMDYHtVR1Z4+MtEuo7Y5y4cztN+n5kZTTaHJ3VzOQas1dGuKZoZmXgGb
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:03 2025 by rpki-client