Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/Wszsk6BU6Mxm2qhecDQkhMO7O4Y.roa
File: Wszsk6BU6Mxm2qhecDQkhMO7O4Y.roa (raw, json)
Hash identifier: kaME2nPRoZM6e7VmbGch3If1C0uCDIjz1Wc6tOh9QBg=
Subject key identifier: 5A:CC:EC:93:A0:54:E8:CC:66:DA:A8:5E:70:34:24:84:C3:BB:3B:86
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 018ACCBA51603F40D92206316CED7EE19541
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/Wszsk6BU6Mxm2qhecDQkhMO7O4Y.roa
Signing time: Mon 25 Sep 2023 14:24:37 +0000
ROA not before: Mon 25 Sep 2023 14:24:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48083
IP address blocks: 94.127.96.0/21 maxlen: 24
193.53.99.0/24 maxlen: 24
193.53.100.0/24 maxlen: 24
193.116.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:ba:51:60:3f:40:d9:22:06:31:6c:ed:7e:e1:95:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Sep 25 14:24:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5accec93a054e8cc66daa85e70342484c3bb3b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:e8:32:1b:cb:77:0c:f5:a8:c5:40:81:ae:
b1:b5:e0:c6:66:9c:5c:5a:da:41:cb:1a:8a:90:8c:
b7:ea:2f:20:d2:28:f2:59:24:0a:d8:5f:d0:af:cb:
f7:89:93:bf:90:dd:de:67:a6:7b:88:cc:16:1d:24:
20:59:89:70:12:f4:fc:34:f1:bc:22:3f:08:4e:81:
7e:0f:6c:8d:71:55:da:be:c4:a2:59:7a:8c:30:cf:
44:0d:a0:cd:03:74:c8:19:bd:f5:c3:da:1b:62:bf:
ae:30:a5:ea:d8:55:e6:7a:b9:02:16:f3:fe:76:39:
af:db:ac:f6:45:42:71:46:ce:fa:31:d2:c8:48:02:
ad:23:32:d5:d7:dc:00:8b:e4:b8:6e:55:98:86:1c:
8f:b7:67:70:be:f4:48:22:e5:ce:14:50:d0:80:89:
01:a7:f0:08:a9:52:e4:43:db:1c:8a:88:d6:35:bf:
68:30:42:11:c9:c0:88:b7:ad:92:8c:8b:e5:bb:24:
23:53:1a:e0:2d:44:79:f5:8d:ad:c1:fe:b6:56:e3:
65:d7:cd:a0:6e:13:b8:29:49:4f:63:54:23:25:64:
6e:8e:b3:9c:b0:96:e1:c1:8a:ee:46:33:aa:22:fa:
31:48:0b:58:ef:ee:81:ce:b0:99:cd:a4:c4:a5:e9:
de:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:EC:93:A0:54:E8:CC:66:DA:A8:5E:70:34:24:84:C3:BB:3B:86
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/Wszsk6BU6Mxm2qhecDQkhMO7O4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.96.0/21
193.53.99.0-193.53.100.255
193.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:6b:5b:3b:cb:76:66:b1:dc:39:3e:29:b6:71:8f:0e:b0:3a:
ad:dc:96:3b:0e:6f:29:f4:bf:db:53:32:cf:15:85:f7:14:38:
28:af:53:8f:74:7a:fb:ac:1a:e0:4d:47:49:c4:f3:c8:b4:c8:
55:8d:1b:e8:b4:cb:96:a0:18:25:0d:23:07:af:a6:6d:25:8a:
1a:52:2e:08:d2:d6:ff:ba:a5:ca:3c:1b:dc:7e:84:11:f2:08:
d9:3b:4b:be:b1:fe:19:bb:74:e4:0a:81:4e:d9:29:99:f3:dc:
38:74:64:2e:1a:44:c6:fd:e6:5c:c3:2a:3b:d6:2e:1a:47:2c:
05:ef:08:25:9b:a6:7e:f3:a4:12:ba:13:65:1b:de:85:a5:84:
54:87:52:90:bf:f1:ef:a3:89:01:60:a6:aa:f8:09:69:75:b9:
30:50:bf:3a:c9:7e:71:75:cc:3e:fc:9e:a7:f4:b0:29:b0:a1:
3a:da:3e:9b:fa:87:54:06:83:5e:63:80:1b:cf:c8:3d:ca:dd:
2e:cd:24:f6:32:7a:66:81:ab:6b:08:49:d9:69:4d:aa:45:f9:
bc:db:9a:ef:cc:0b:50:7b:fc:ed:9e:8f:56:56:68:a9:00:5e:
4d:67:ec:81:d6:74:16:3b:4c:93:4e:d0:58:30:fd:06:15:77:
da:7c:37:ca
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYrMulFgP0DZIgYxbO1+4ZVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGQyOTdkMDg5OGZmZmRlMjhkNzY5Njc5NWJkYmQ1MjIz
ZjhhNjYwHhcNMjMwOTI1MTQyNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWNjZWM5M2EwNTRlOGNjNjZkYWE4NWU3MDM0MjQ4NGMzYmIzYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+voMhvLdwz1qMVAga6xteDGZpxc
WtpByxqKkIy36i8g0ijyWSQK2F/Qr8v3iZO/kN3eZ6Z7iMwWHSQgWYlwEvT8NPG8
Ij8IToF+D2yNcVXavsSiWXqMMM9EDaDNA3TIGb31w9obYr+uMKXq2FXmerkCFvP+
djmv26z2RUJxRs76MdLISAKtIzLV19wAi+S4blWYhhyPt2dwvvRIIuXOFFDQgIkB
p/AIqVLkQ9sciojWNb9oMEIRycCIt62SjIvluyQjUxrgLUR59Y2twf62VuNl182g
bhO4KUlPY1QjJWRujrOcsJbhwYruRjOqIvoxSAtY7+6BzrCZzaTEpenehwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFrM7JOgVOjMZtqoXnA0JITDuzuGMB8GA1UdIwQY
MBaAFMfdKX0ImP/94o12lnlb29UiP4pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEt
MWYzYjViMDU2ZGZjLzEvV3N6c2s2QlU2TXhtMnFoZWNEUWtoTU83TzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEtMWYzYjViMDU2ZGZj
LzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDXn9gMAwD
BADBNWMDBADBNWQDBAXBdKAwDQYJKoZIhvcNAQELBQADggEBAI9rWzvLdmax3Dk+
KbZxjw6wOq3cljsObyn0v9tTMs8VhfcUOCivU490evusGuBNR0nE88i0yFWNG+i0
y5agGCUNIwevpm0lihpSLgjS1v+6pco8G9x+hBHyCNk7S76x/hm7dOQKgU7ZKZnz
3Dh0ZC4aRMb95lzDKjvWLhpHLAXvCCWbpn7zpBK6E2Ub3oWlhFSHUpC/8e+jiQFg
pqr4CWl1uTBQvzrJfnF1zD78nqf0sCmwoTraPpv6h1QGg15jgBvPyD3K3S7NJPYy
emaBq2sISdlpTapF+bzbmu/MC1B7/O2ej1ZWaKkAXk1n7IHWdBY7TJNO0Fgw/QYV
d9p8N8o=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:18 2025 by rpki-client