Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/WE_ojra6vmYy2HHxrFqR58djXw0.roa
File: WE_ojra6vmYy2HHxrFqR58djXw0.roa (raw, json)
Hash identifier: gciJ1HeIhA/EJ3jYoey5G56o6cUUHs471zjvkx2rNEo=
Subject key identifier: 58:4F:E8:8E:B6:BA:BE:66:32:D8:71:F1:AC:5A:91:E7:C7:63:5F:0D
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0185E4F31722FAA987FE661BF9FB84A2C009
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/WE_ojra6vmYy2HHxrFqR58djXw0.roa
Signing time: Tue 24 Jan 2023 18:03:34 +0000
ROA not before: Tue 24 Jan 2023 18:03:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50608
IP address blocks: 83.220.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:f3:17:22:fa:a9:87:fe:66:1b:f9:fb:84:a2:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 24 18:03:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584fe88eb6babe6632d871f1ac5a91e7c7635f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:c4:bb:d2:d5:a2:e9:94:8b:0f:df:52:eb:
57:d5:44:f8:e6:a1:99:54:48:34:82:df:84:82:aa:
41:8b:14:19:b5:83:c5:b4:02:78:2f:1f:ca:47:0d:
5e:e8:e5:34:7b:e9:8d:2b:4c:66:c6:b1:53:5a:94:
ac:11:53:7b:a7:b4:83:6f:f1:82:33:7d:74:0d:b1:
df:5f:af:ab:6f:3f:f7:56:73:c7:c6:aa:09:87:11:
af:37:66:3d:06:73:c0:0f:a7:d8:db:d1:78:6d:2c:
d7:dc:b8:6d:00:ff:5a:08:41:a4:ac:6f:f4:7e:32:
e0:d2:67:29:ce:75:5e:b5:49:be:91:dd:cd:83:9f:
74:e8:3c:17:db:f8:b5:e5:19:8a:e4:65:0b:d6:65:
02:fa:bb:4b:95:63:19:36:0c:01:81:31:a9:19:52:
5d:17:d4:f9:a5:a4:94:0a:3c:66:b6:ee:73:36:7f:
67:94:97:5f:03:c5:f7:39:b7:24:02:3f:6e:d6:54:
df:80:6d:1b:5e:59:6c:79:40:03:6b:fd:8f:51:8d:
5d:d4:4f:d4:b9:4b:70:89:17:70:e5:f0:ce:d7:25:
c1:36:bd:4e:a5:23:bb:6f:cd:26:49:ea:49:4a:7f:
93:eb:dc:47:fc:00:19:ce:37:6e:50:79:65:c0:38:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:E8:8E:B6:BA:BE:66:32:D8:71:F1:AC:5A:91:E7:C7:63:5F:0D
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/WE_ojra6vmYy2HHxrFqR58djXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.167.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:6c:67:a6:8c:a9:73:cf:4d:c3:ff:8d:a4:15:f7:ab:3d:bf:
d4:e1:c4:94:0e:f5:59:75:f5:16:7a:39:4f:f0:e3:11:b1:47:
cf:68:03:60:db:d4:e1:f0:a1:8e:35:ed:c2:f9:f4:c9:88:14:
ea:c7:c0:07:47:70:0b:6b:ec:ba:57:ab:e3:32:c4:e1:cf:98:
27:b1:fd:1f:6a:ef:fd:8b:14:ac:be:bd:47:81:9f:3c:b0:84:
0b:c5:8a:5c:13:a6:dc:f9:81:71:d4:2d:2c:80:c3:36:0e:4f:
82:aa:99:e6:2d:02:c2:e7:22:da:22:6b:9e:33:e4:c4:b2:3d:
c2:6a:dd:a3:8e:a4:53:dd:9f:3d:c2:f1:1b:b6:15:2a:4d:2a:
0c:09:6a:92:2c:88:8f:5a:70:18:86:e7:19:71:87:9b:35:ec:
f7:e8:f3:a0:9c:3d:f8:62:58:8b:fd:22:61:92:53:cf:a2:32:
dd:5a:1e:00:c3:b9:1d:58:f5:ec:5d:28:c5:3c:63:fa:be:fd:
50:bd:cc:d5:0b:ba:5a:b6:34:5d:18:33:62:cb:2e:01:ed:0e:
2a:fc:78:37:c8:c1:c6:80:06:8a:e8:51:0d:d8:59:b5:e5:8f:
4f:dc:5e:d9:c4:ed:34:fe:01:59:26:7b:d5:60:55:8b:b2:93:
59:75:c3:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXk8xci+qmH/mYb+fuEosAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk
ZjljM2IwHhcNMjMwMTI0MTgwMzM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODRmZTg4ZWI2YmFiZTY2MzJkODcxZjFhYzVhOTFlN2M3NjM1ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvbEu9LVoumUiw/fUutX1UT45qGZ
VEg0gt+EgqpBixQZtYPFtAJ4Lx/KRw1e6OU0e+mNK0xmxrFTWpSsEVN7p7SDb/GC
M310DbHfX6+rbz/3VnPHxqoJhxGvN2Y9BnPAD6fY29F4bSzX3LhtAP9aCEGkrG/0
fjLg0mcpznVetUm+kd3Ng5906DwX2/i15RmK5GUL1mUC+rtLlWMZNgwBgTGpGVJd
F9T5paSUCjxmtu5zNn9nlJdfA8X3ObckAj9u1lTfgG0bXllseUADa/2PUY1d1E/U
uUtwiRdw5fDO1yXBNr1OpSO7b80mSepJSn+T69xH/AAZzjduUHllwDgdlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhP6I62ur5mMthx8axakefHY18NMB8GA1UdIwQY
MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt
MGM5OGM1NzBhNmUwLzEvV0Vfb2pyYTZ2bVl5MkhIeHJGcVI1OGRqWHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw
LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9ynMA0G
CSqGSIb3DQEBCwUAA4IBAQDdbGemjKlzz03D/42kFferPb/U4cSUDvVZdfUWejlP
8OMRsUfPaANg29Th8KGONe3C+fTJiBTqx8AHR3ALa+y6V6vjMsThz5gnsf0fau/9
ixSsvr1HgZ88sIQLxYpcE6bc+YFx1C0sgMM2Dk+CqpnmLQLC5yLaImueM+TEsj3C
at2jjqRT3Z89wvEbthUqTSoMCWqSLIiPWnAYhucZcYebNez36POgnD34YliL/SJh
klPPojLdWh4Aw7kdWPXsXSjFPGP6vv1QvczVC7patjRdGDNiyy4B7Q4q/Hg3yMHG
gAaK6FEN2Fm15Y9P3F7ZxO00/gFZJnvVYFWLspNZdcPO
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:50 2025 by rpki-client