Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/Wd82RivU6ZMnnCqlV062xP097zs.roa
File: Wd82RivU6ZMnnCqlV062xP097zs.roa (raw, json)
Hash identifier: 777mENCD59uIGRPSPakvtlFYVZezw1MS3XKtCzDySnY=
Subject key identifier: 59:DF:36:46:2B:D4:E9:93:27:9C:2A:A5:57:4E:B6:C4:FD:3D:EF:3B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 01856EEFFD97C1F86D434084DAC37D036696
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/Wd82RivU6ZMnnCqlV062xP097zs.roa
Signing time: Sun 01 Jan 2023 20:04:59 +0000
ROA not before: Sun 01 Jan 2023 20:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 91.227.4.0/24 maxlen: 24
91.227.5.0/24 maxlen: 24
91.227.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:fd:97:c1:f8:6d:43:40:84:da:c3:7d:03:66:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jan 1 20:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59df36462bd4e993279c2aa5574eb6c4fd3def3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:64:0a:42:94:e0:ba:c1:3d:0e:04:2d:15:
89:6e:09:36:6d:ff:ed:65:54:ca:e7:6d:26:ec:5e:
fb:54:f7:ee:c3:58:33:24:f7:26:bd:08:12:24:89:
70:0b:93:69:dc:2d:84:6f:59:c4:fe:bc:52:98:45:
07:99:36:07:e3:5a:ca:6d:4c:8d:3e:f2:9c:6e:d6:
12:31:62:84:6e:81:f5:42:28:22:17:ea:56:44:9c:
cb:3e:18:17:9d:04:5b:a4:f6:f4:c0:66:14:c8:ad:
47:d7:e3:6d:b3:1a:c7:a9:c5:af:8d:8d:b4:d5:dc:
be:ea:89:0c:92:9e:7a:ba:f9:0d:0a:07:fe:1e:5b:
0b:6f:4a:83:f9:73:3c:c5:0a:39:f9:f7:69:17:24:
6e:3f:82:4f:11:a5:a4:54:a4:0b:d5:61:26:d8:b5:
8b:76:90:64:07:47:11:5b:b7:89:1d:b4:fb:2f:4a:
78:60:f4:6c:41:67:c3:7f:5a:89:8e:da:85:55:32:
ec:dc:71:40:46:4b:a8:e0:74:b7:2c:15:09:05:92:
b7:03:c7:12:a2:ae:1b:d9:62:c5:2c:ea:fd:9b:a5:
11:86:26:22:ba:5d:5a:d2:89:5a:88:aa:78:3c:c2:
4f:3a:5b:0a:70:f5:f6:bf:9a:38:3a:ab:16:0d:8a:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:36:46:2B:D4:E9:93:27:9C:2A:A5:57:4E:B6:C4:FD:3D:EF:3B
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/Wd82RivU6ZMnnCqlV062xP097zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.4.0-91.227.6.255
Signature Algorithm: sha256WithRSAEncryption
3a:1e:ec:1f:80:78:4b:9f:07:fc:9c:52:ff:d3:cd:04:29:42:
41:7d:e8:a4:57:da:0c:8a:af:c2:6f:5e:64:45:58:da:1a:ce:
6e:27:44:21:0f:53:06:8a:cd:04:a4:0f:4e:75:ef:00:5c:bc:
fd:c6:7b:5b:5b:43:df:fb:81:c5:23:d1:61:95:b8:50:6f:9e:
6a:5b:6a:5c:26:06:3e:2b:1a:22:10:23:c3:c9:b7:a0:17:0e:
64:74:f8:18:34:3a:24:70:eb:d2:24:af:a2:8e:0c:81:78:56:
e4:5f:8f:21:de:56:f5:b2:7d:47:75:75:b5:0b:22:bf:77:54:
73:92:ce:95:d8:c6:53:00:db:2d:23:31:c6:6d:cc:57:af:8c:
d9:d0:91:2c:43:28:e8:b2:a2:40:67:fb:9c:c0:55:11:2e:77:
6a:1e:a7:54:3a:c7:52:6b:bc:1b:1c:1c:a5:ee:27:ce:db:15:
22:3b:75:c3:9c:51:9d:3d:46:83:f7:12:af:26:3b:72:bc:8d:
31:8e:cb:46:92:1e:9f:79:e7:f3:78:e7:bd:79:34:21:60:b1:
c2:6a:0e:75:10:c6:f0:7f:52:0e:9b:38:9f:a1:a4:de:bc:4b:
2a:f6:44:75:d4:16:1c:34:e6:25:91:f1:74:3d:c2:68:cc:41:
b1:2a:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:22:16 2025 by rpki-client