Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RWBddtyMmndMgC8UgGmaa-o9irg.roa
File: RWBddtyMmndMgC8UgGmaa-o9irg.roa (raw, json)
Hash identifier: nAUi0QuzyxZX2XhS9F/b0h+iRIsTsmD3ue4iYESgUL8=
Subject key identifier: 45:60:5D:76:DC:8C:9A:77:4C:80:2F:14:80:69:9A:6B:EA:3D:8A:B8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27FF03C1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RWBddtyMmndMgC8UgGmaa-o9irg.roa
Signing time: Sat 01 Jan 2022 16:09:20 +0000
ROA not before: Sat 01 Jan 2022 16:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61312
IP address blocks: 93.171.152.0/24 maxlen: 24
92.38.34.0/24 maxlen: 24
31.148.25.0/24 maxlen: 24
93.170.55.0/24 maxlen: 24
93.170.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671024065 (0x27ff03c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45605d76dc8c9a774c802f1480699a6bea3d8ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:be:da:ac:c7:b9:4a:28:c8:93:eb:42:98:
e3:dd:95:64:47:77:44:aa:e3:6e:db:67:9e:de:c6:
a3:37:e6:f0:e6:83:e8:99:7a:e9:ed:a4:7a:2a:66:
b5:af:ba:d7:7c:b9:85:44:3b:4b:53:ac:b9:6e:b6:
25:3c:ec:e7:87:56:35:a6:94:fc:6e:80:c6:a9:91:
fa:37:ff:8a:43:45:91:15:4b:9b:32:2d:c1:29:6d:
bc:33:29:4d:a5:5f:ae:e5:d3:90:20:00:09:f8:f5:
d7:25:24:3a:69:e9:c8:f5:92:e0:ef:e2:b5:13:d1:
e8:8f:c8:c0:c7:2c:fc:6b:94:96:b1:50:76:20:10:
74:32:69:fd:54:fc:f9:9e:83:6f:f3:4f:75:9b:78:
e9:52:f5:2f:21:e2:3c:e5:04:50:e2:ed:9c:3e:e7:
78:99:dd:6d:4f:4a:f5:ec:8a:1d:ed:13:77:5a:d7:
27:50:4a:8b:a0:ad:2c:15:70:19:13:ba:18:c6:22:
de:ce:01:7b:c3:24:2a:25:b8:e3:de:d7:82:c7:f3:
70:10:da:1b:34:e5:8e:d0:c7:59:1c:02:e4:7e:88:
02:d7:37:75:35:fe:f0:c6:e0:51:3d:24:01:e0:c1:
4a:bb:0d:83:10:c3:66:f4:c4:ae:8c:85:2d:5b:11:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:5D:76:DC:8C:9A:77:4C:80:2F:14:80:69:9A:6B:EA:3D:8A:B8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RWBddtyMmndMgC8UgGmaa-o9irg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.25.0/24
92.38.34.0/24
93.170.55.0/24
93.170.175.0/24
93.171.152.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7d:94:88:4e:09:c3:3e:1f:f8:cc:74:29:2d:c7:04:53:15:
86:42:b4:02:c2:8c:c1:26:53:30:80:86:6f:8c:f2:be:72:4d:
83:6d:22:15:d3:8e:33:2d:28:e1:97:d6:ee:26:37:2c:79:39:
02:18:cd:16:c1:e4:bb:e5:e5:7f:da:81:1d:04:65:3e:56:df:
31:0a:9c:14:fe:1a:bf:53:04:c5:18:f8:ca:34:42:00:ad:8f:
09:b7:f9:50:31:9b:20:2d:6c:33:25:c0:9e:92:6f:01:f7:79:
a2:ec:ec:a2:b7:42:0c:ba:1c:e7:5f:8d:58:3a:c0:b4:b1:98:
ce:59:f9:d1:ad:82:2c:a8:41:6e:45:88:b9:de:62:86:e4:42:
f6:f0:ba:a6:4c:81:c5:8b:9c:34:bf:70:97:5b:2d:78:c8:15:
f8:df:98:02:2c:95:68:99:bd:d8:1e:6d:a5:e1:74:35:7c:8c:
d4:6c:61:c7:95:f8:28:73:b4:78:c4:9a:2e:79:a2:cb:81:d8:
c4:86:5a:c3:5e:f5:e6:80:f0:77:52:6e:e2:48:49:fe:9c:4a:
51:76:14:ae:57:91:17:ff:13:b7:37:f8:33:e0:64:ce:25:da:
bd:e7:b8:5f:4e:e7:10:be:4d:ec:c0:4c:2f:d8:8f:69:88:d3:
b2:04:2b:77
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEJ/8DwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDU2MDVkNzZkYzhj
OWE3NzRjODAyZjE0ODA2OTlhNmJlYTNkOGFiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7Fvtqsx7lKKMiT60KY492VZEd3RKrjbttnnt7Gozfm8OaD
6Jl66e2keipmta+613y5hUQ7S1OsuW62JTzs54dWNaaU/G6AxqmR+jf/ikNFkRVL
mzItwSltvDMpTaVfruXTkCAACfj11yUkOmnpyPWS4O/itRPR6I/IwMcs/GuUlrFQ
diAQdDJp/VT8+Z6Db/NPdZt46VL1LyHiPOUEUOLtnD7neJndbU9K9eyKHe0Td1rX
J1BKi6CtLBVwGRO6GMYi3s4Be8MkKiW4497XgsfzcBDaGzTljtDHWRwC5H6IAtc3
dTX+8MbgUT0kAeDBSrsNgxDDZvTEroyFLVsRE3cCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRFYF123Iyad0yALxSAaZpr6j2KuDAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1JXQmRkdHlNbW5kTWdDOFVnR21hYS1vOWlyZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAB+UGQMEAFwmIgMEAF2qNwMEAF2q
rwMEAF2rmDANBgkqhkiG9w0BAQsFAAOCAQEAGX2UiE4Jwz4f+Mx0KS3HBFMVhkK0
AsKMwSZTMICGb4zyvnJNg20iFdOOMy0o4ZfW7iY3LHk5AhjNFsHku+Xlf9qBHQRl
PlbfMQqcFP4av1MExRj4yjRCAK2PCbf5UDGbIC1sMyXAnpJvAfd5ouzsordCDLoc
51+NWDrAtLGYzln50a2CLKhBbkWIud5ihuRC9vC6pkyBxYucNL9wl1steMgV+N+Y
AiyVaJm92B5tpeF0NXyM1Gxhx5X4KHO0eMSaLnmiy4HYxIZaw1715oDwd1Ju4khJ
/pxKUXYUrleRF/8Ttzf4M+BkziXavee4X07nEL5N7MBML9iPaYjTsgQrdw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:50 2025 by rpki-client