Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wr_9a-XDC-ZYdHaG4z6OXdWyMgY.roa
File: wr_9a-XDC-ZYdHaG4z6OXdWyMgY.roa (raw, json)
Hash identifier: vOmch+ybWOxscEmRqAmbPngft9x9NFGLfIGWJI/XF7A=
Subject key identifier: C2:BF:FD:6B:E5:C3:0B:E6:58:74:76:86:E3:3E:8E:5D:D5:B2:32:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01867259DCB42711B79FE852EA4BFD9D2655
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wr_9a-XDC-ZYdHaG4z6OXdWyMgY.roa
Signing time: Tue 21 Feb 2023 05:02:17 +0000
ROA not before: Tue 21 Feb 2023 05:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:59:dc:b4:27:11:b7:9f:e8:52:ea:4b:fd:9d:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 21 05:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2bffd6be5c30be658747686e33e8e5dd5b23206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:db:32:3e:f5:56:38:4b:c9:27:06:f4:79:
d8:e7:ec:18:16:16:07:4c:d8:d6:42:aa:28:0a:4e:
02:94:d6:e9:02:25:fd:0b:58:c7:9a:0e:86:bc:f4:
41:a0:3f:88:42:76:3f:ad:b5:c7:78:33:d8:86:5f:
9f:48:24:f7:0f:cf:0b:1b:a3:04:99:d3:11:63:1d:
75:e6:81:fc:ad:36:13:32:d4:07:50:18:c6:f0:27:
f7:5e:e1:14:34:84:2d:9f:66:60:34:56:95:96:a2:
e8:4f:b9:cf:f2:4b:4a:ef:98:9a:bf:6f:35:86:de:
c4:b2:67:5d:a2:5c:62:a0:05:c3:38:6e:2f:de:18:
48:50:87:96:06:d8:c9:f9:ea:9e:f3:41:c2:31:cc:
03:61:c7:01:b1:30:d9:8a:3f:c0:33:cd:f5:4b:9c:
1a:83:6d:1a:56:be:e2:a8:98:00:d4:e0:42:18:13:
67:89:c3:6f:0a:d3:40:3f:6b:a9:f5:6e:bf:3a:68:
17:ae:e9:60:64:cc:0b:24:aa:e2:61:c4:51:4f:7d:
1d:7c:a1:d7:72:e6:fe:ec:12:0e:9b:69:83:62:6d:
44:42:f5:5f:18:4d:e9:4b:ed:52:ba:23:10:6a:91:
00:29:c6:12:81:4b:45:46:7c:f2:ef:66:b5:f7:0b:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:FD:6B:E5:C3:0B:E6:58:74:76:86:E3:3E:8E:5D:D5:B2:32:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wr_9a-XDC-ZYdHaG4z6OXdWyMgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
89.34.219.0/24
89.35.73.0/24
89.35.129.0/24
89.39.125.0/24
89.40.215.0/24
89.47.36.0/24
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
78:bf:09:67:3a:5b:88:ae:5b:bf:a2:7e:b7:d6:0a:ef:e3:12:
80:2f:6b:31:36:0a:aa:61:cf:8c:1b:d2:2d:8e:ba:36:34:f9:
e9:f3:ca:f3:89:18:ff:8c:b7:e2:30:99:66:f7:10:e5:91:a2:
e2:9d:ce:11:d5:43:64:dd:cd:6d:1a:62:4d:d0:e1:b3:a8:6d:
6b:ea:19:2f:84:d9:61:53:34:94:51:5c:0b:67:e2:9f:57:11:
c2:37:77:ef:06:a5:0c:72:e9:db:b1:c5:8a:db:a9:15:dc:ce:
5c:07:b8:b8:cb:77:75:8f:59:20:fc:f8:b4:c6:38:ca:66:20:
1b:25:e3:8c:42:8d:28:7c:65:9a:2d:05:e2:7e:8a:88:5e:86:
d8:88:69:d9:ca:67:d0:a7:0a:56:61:d2:d3:cd:30:1b:50:1c:
fb:0a:f2:fe:23:72:b1:b2:4a:5f:96:b4:68:c0:b4:f8:d9:07:
66:68:60:19:a2:e0:15:7b:29:39:5d:08:a9:64:91:9d:61:22:
e0:37:59:d2:36:74:2a:eb:f7:b4:b4:cc:73:dc:e4:2f:ee:42:
24:34:6b:1c:01:ad:7d:34:08:45:09:2f:49:5a:b3:1b:b4:bd:
c5:ae:e3:e3:75:76:56:aa:53:ef:c2:82:ee:4c:56:41:20:b9:
ed:33:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:44 2025 by rpki-client