Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WrMcY1DQ88r7jeL3jvExrAp9mRQ.roa
File: WrMcY1DQ88r7jeL3jvExrAp9mRQ.roa (raw, json)
Hash identifier: LrrHd+NF8vW+F9P9G1eJsKW9cRQTepn/wvR/dNwuRZo=
Subject key identifier: 5A:B3:1C:63:50:D0:F3:CA:FB:8D:E2:F7:8E:F1:31:AC:0A:7D:99:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957CCF1408141A931761FA66F04F8D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WrMcY1DQ88r7jeL3jvExrAp9mRQ.roa
Signing time: Mon 02 Jan 2023 03:45:23 +0000
ROA not before: Mon 02 Jan 2023 03:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62008
IP address blocks: 92.38.36.0/23 maxlen: 24
146.120.208.0/22 maxlen: 24
2a02:128:15::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7c:cf:14:08:14:1a:93:17:61:fa:66:f0:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab31c6350d0f3cafb8de2f78ef131ac0a7d9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:8f:39:b1:be:bf:9a:8a:e7:76:e2:bd:31:
ae:e3:8d:4d:fe:80:ca:0f:56:d2:f9:6d:6f:e8:20:
84:23:d1:9c:e5:9b:a6:b1:0c:f4:6c:3f:14:22:f6:
b8:42:2a:33:9c:31:85:1d:e7:ac:d9:07:9c:ba:1b:
21:6b:e0:34:dd:bc:80:fb:81:91:95:29:67:1c:9c:
26:19:44:a5:f2:b8:7e:d7:a8:79:cb:96:06:fe:f2:
8b:39:7f:ec:9c:9b:0a:3b:60:f2:6f:2d:b6:38:ad:
5c:a4:f9:95:73:74:e8:44:dc:53:59:00:c8:88:bc:
43:f3:64:8c:da:c1:73:61:e5:ba:b3:c1:52:9f:80:
0c:31:8c:30:3e:a8:26:74:89:37:bd:7d:16:c1:c2:
f9:69:3a:d1:a3:ef:db:fa:91:23:23:b4:c8:c9:4f:
36:e5:7b:ae:bd:b1:4a:b7:e3:a1:b3:d4:e0:5d:7e:
57:85:68:f6:0e:ac:dc:e3:d4:43:b9:a7:f0:40:0b:
77:e0:5e:28:7d:ed:3f:ef:5c:49:e9:8c:19:5b:71:
71:8d:40:4b:a6:a5:d7:28:ec:bb:eb:cc:48:df:8e:
6d:7d:8b:e0:34:03:2b:71:1f:1c:6b:54:b7:88:e7:
50:ef:5c:8a:58:3e:ac:72:e4:bd:00:c1:35:1c:c0:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:1C:63:50:D0:F3:CA:FB:8D:E2:F7:8E:F1:31:AC:0A:7D:99:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WrMcY1DQ88r7jeL3jvExrAp9mRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.36.0/23
146.120.208.0/22
IPv6:
2a02:128:15::/48
Signature Algorithm: sha256WithRSAEncryption
8f:54:d0:25:6b:6d:f8:6b:72:a2:3a:03:5a:a2:46:3e:23:34:
09:6d:16:6d:cc:e9:64:99:24:91:b9:d3:81:24:55:60:b5:d1:
3d:09:43:03:29:f6:97:05:65:66:4d:1c:9e:4f:2b:e7:f5:e0:
ff:56:7f:f8:15:38:9a:5c:ef:33:b1:c8:1d:ae:d4:28:b9:b5:
a2:fc:2c:60:91:44:db:e9:21:97:f3:48:ef:ae:54:9d:b9:70:
11:0f:9a:bf:63:84:d3:33:3e:6e:9c:a6:14:de:1d:94:1d:cb:
d3:45:5b:ed:3c:d7:d9:33:86:72:64:a5:9a:30:0b:35:94:f1:
45:83:17:ec:f6:d8:66:8d:90:1c:4b:5f:42:c6:cb:38:72:93:
aa:80:1d:d5:d5:d2:ee:49:5c:52:a7:1e:34:56:c6:67:12:8a:
fe:79:04:fa:d9:d4:5b:a3:f8:f6:0e:3e:f7:fc:6c:cb:b7:f6:
d2:67:cb:6e:c0:ff:33:e4:dc:56:4f:cc:c6:a5:8a:fa:45:a7:
13:af:ce:82:f2:2a:ef:36:37:c6:3a:2e:ed:f4:31:84:f7:13:
f9:35:44:33:1a:1d:95:e5:87:7c:ad:aa:56:b9:1d:13:b6:90:
5f:3e:36:ac:96:cf:f7:b4:41:64:5d:a3:d5:a2:a5:34:ee:35:
b9:91:56:ba
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVwlXzPFAgUGpMXYfpm8E+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWIzMWM2MzUwZDBmM2NhZmI4ZGUyZjc4ZWYxMzFhYzBhN2Q5OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJiPObG+v5qK53bivTGu441N/oDK
D1bS+W1v6CCEI9Gc5ZumsQz0bD8UIva4QioznDGFHees2Qecuhsha+A03byA+4GR
lSlnHJwmGUSl8rh+16h5y5YG/vKLOX/snJsKO2Dyby22OK1cpPmVc3ToRNxTWQDI
iLxD82SM2sFzYeW6s8FSn4AMMYwwPqgmdIk3vX0WwcL5aTrRo+/b+pEjI7TIyU82
5XuuvbFKt+Ohs9TgXX5XhWj2Dqzc49RDuafwQAt34F4ofe0/71xJ6YwZW3FxjUBL
pqXXKOy768xI345tfYvgNAMrcR8ca1S3iOdQ71yKWD6scuS9AME1HMCxCQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFqzHGNQ0PPK+43i947xMawKfZkUMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvV3JNY1kxRFE4OHI3amVMM2p2RXhyQXA5bVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXCYkAwQC
knjQMA8EAgACMAkDBwAqAgEoABUwDQYJKoZIhvcNAQELBQADggEBAI9U0CVrbfhr
cqI6A1qiRj4jNAltFm3M6WSZJJG504EkVWC10T0JQwMp9pcFZWZNHJ5PK+f14P9W
f/gVOJpc7zOxyB2u1Ci5taL8LGCRRNvpIZfzSO+uVJ25cBEPmr9jhNMzPm6cphTe
HZQdy9NFW+0819kzhnJkpZowCzWU8UWDF+z22GaNkBxLX0LGyzhyk6qAHdXV0u5J
XFKnHjRWxmcSiv55BPrZ1Fuj+PYOPvf8bMu39tJny27A/zPk3FZPzMalivpFpxOv
zoLyKu82N8Y6Lu30MYT3E/k1RDMaHZXlh3ytqla5HRO2kF8+NqyWz/e0QWRdo9Wi
pTTuNbmRVro=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:30 2025 by rpki-client