Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/cw2oRIO4IgenGb6CNe0vnPlmjnE.roa
File: cw2oRIO4IgenGb6CNe0vnPlmjnE.roa (raw, json)
Hash identifier: ERmOlgaVJ99WOnjLoXL6LZZsISR89V9mDjYVojUPlfE=
Subject key identifier: 73:0D:A8:44:83:B8:22:07:A7:19:BE:82:35:ED:2F:9C:F9:66:8E:71
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811D2C1BA41F570CB3A3BC667D1F80
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/cw2oRIO4IgenGb6CNe0vnPlmjnE.roa
Signing time: Sun 01 Jan 2023 04:05:01 +0000
ROA not before: Sun 01 Jan 2023 04:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49226
IP address blocks: 89.25.95.0/24 maxlen: 24
94.155.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1d:2c:1b:a4:1f:57:0c:b3:a3:bc:66:7d:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730da84483b82207a719be8235ed2f9cf9668e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:2a:b1:59:81:da:be:07:51:72:4a:2e:c2:
4d:b5:7f:55:c3:f6:e1:7f:ca:4d:b6:b5:da:a0:7b:
6e:66:6e:23:7c:f1:8e:54:ce:09:89:d3:ee:05:e4:
c0:c2:ac:d1:31:ee:1d:75:69:b6:65:f7:77:ea:71:
ce:14:80:c2:88:e3:1a:b3:74:d3:af:ab:f1:8e:bb:
42:b3:e0:f8:4b:6e:b2:dc:09:42:58:cc:9d:0f:d9:
d9:2f:8e:c8:07:13:0c:05:ec:7a:70:d9:94:bd:c8:
52:ed:b2:96:b9:52:5b:bb:10:0c:74:ef:26:3f:8f:
a9:2e:d7:ea:80:d7:c8:06:a5:92:ff:e1:06:75:56:
06:ac:4a:cb:81:d5:06:1a:d1:20:6a:22:62:8b:9a:
52:2c:df:04:95:33:0a:ce:b3:d8:29:b3:1a:db:a9:
6a:32:10:43:90:2f:0d:83:d3:22:cc:7e:4d:43:76:
4e:61:03:1e:88:af:ad:a3:2e:cb:c7:f1:fd:a9:12:
af:96:a5:c1:23:03:9d:7a:11:f8:a1:05:60:8a:8b:
4c:d6:f6:da:9b:16:0d:08:e7:6e:46:50:dc:b0:b5:
60:28:51:9e:bd:30:c5:c4:06:5d:18:6d:79:bb:ce:
78:8a:56:6e:6c:24:7b:68:41:f0:69:c1:c7:ae:26:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:A8:44:83:B8:22:07:A7:19:BE:82:35:ED:2F:9C:F9:66:8E:71
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/cw2oRIO4IgenGb6CNe0vnPlmjnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.95.0/24
94.155.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:49:b8:c9:97:cf:64:e7:26:21:a4:83:f9:4a:61:6f:2c:f2:
8f:a9:66:88:7f:9f:11:44:ab:c6:ee:a3:62:d1:7d:03:8e:9e:
18:29:b6:92:86:cd:e5:80:70:5f:4b:be:ab:c5:e6:c9:93:fb:
99:3a:a9:20:4c:a2:37:1d:56:bf:2f:7f:9d:f6:11:09:fe:e8:
c1:d3:a7:35:21:42:f2:ca:11:85:19:2d:c1:e1:4b:e5:38:f6:
e6:04:52:6f:fc:ba:95:e6:c3:94:f2:43:f8:51:ad:f6:19:93:
5d:26:5e:59:67:24:6b:e9:95:1a:6c:f9:f2:94:94:6a:a4:c1:
91:36:84:36:a0:41:fe:fc:a6:71:3e:a4:15:a6:3e:27:32:ab:
b2:d9:9f:1b:62:91:aa:ea:98:a7:34:5e:a9:7a:f1:65:dc:dd:
88:a2:54:8f:59:b1:4e:c3:c0:a8:cc:4d:13:5c:5f:9c:42:17:
c8:f4:06:e8:80:2b:22:47:ed:6d:ea:4d:4b:43:ab:a4:1f:23:
69:28:ab:bc:1d:be:bb:5f:ed:00:44:1a:cb:a9:b8:6c:a6:9a:
d1:d8:aa:e7:aa:c5:ba:63:4e:62:52:27:b1:57:87:cb:94:74:
5f:95:d9:ef:1e:de:34:28:c0:52:99:5e:47:74:c2:6e:17:49:
5a:49:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:28 2025 by rpki-client