Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/W-fFuGdq70k9h-ZzwadpAdPdmog.roa
File: W-fFuGdq70k9h-ZzwadpAdPdmog.roa (raw, json)
Hash identifier: IWzcMJk7g0xbq5+aXGvJrZnMvfIg86q0nFNIAe6MdwU=
Subject key identifier: 5B:E7:C5:B8:67:6A:EF:49:3D:87:E6:73:C1:A7:69:01:D3:DD:9A:88
Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial: 01858184CC55BD3BD8B891E408CD62E6373F
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/W-fFuGdq70k9h-ZzwadpAdPdmog.roa
Signing time: Thu 05 Jan 2023 10:40:41 +0000
ROA not before: Thu 05 Jan 2023 10:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198356
IP address blocks: 91.234.24.0/23 maxlen: 23
91.234.24.0/24 maxlen: 24
91.234.24.0/22 maxlen: 22
91.234.26.0/24 maxlen: 24
91.234.26.0/23 maxlen: 23
91.234.27.0/24 maxlen: 24
91.234.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:84:cc:55:bd:3b:d8:b8:91:e4:08:cd:62:e6:37:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Validity
Not Before: Jan 5 10:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be7c5b8676aef493d87e673c1a76901d3dd9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:f2:94:d0:54:13:00:6f:f1:dd:fd:30:9b:
9a:9f:2e:1e:6a:d8:42:89:64:03:bc:85:8f:90:c5:
af:66:ce:9a:45:f7:48:93:4d:e2:b7:bb:e4:47:ca:
a1:2e:53:2b:94:56:91:3a:37:dc:46:ec:ab:df:e9:
2b:bd:f9:8a:b7:2d:0b:02:7b:07:ec:36:8a:14:d7:
69:09:d1:7d:ef:30:df:9a:74:5c:38:de:36:98:2b:
b1:68:0b:56:40:53:29:43:30:b6:94:61:c9:03:a3:
5d:6e:27:90:ec:c0:41:ae:34:18:07:ee:f8:0b:a7:
e2:2b:12:9e:79:43:6c:19:76:6b:32:a0:0c:e7:55:
5e:14:18:8a:3b:65:23:c3:0d:60:98:a6:c2:b7:c0:
44:aa:b6:39:16:5e:8b:35:da:a9:8d:b9:75:25:fa:
2b:9d:80:70:40:95:a7:b5:7e:85:cc:b0:ac:74:d5:
9f:ba:37:2d:d8:36:71:f4:4f:cf:8c:e5:82:0b:34:
29:fd:16:25:de:c7:d5:49:a1:2b:dd:af:87:5c:3c:
44:e0:73:ee:ff:75:4e:b5:e2:2e:6f:40:b4:ab:bc:
1f:5b:43:91:50:16:02:6a:34:b4:0e:6b:3c:4a:54:
23:d2:3b:53:1f:d8:5b:88:b5:b0:d9:74:55:52:1c:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:C5:B8:67:6A:EF:49:3D:87:E6:73:C1:A7:69:01:D3:DD:9A:88
X509v3 Authority Key Identifier:
keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/W-fFuGdq70k9h-ZzwadpAdPdmog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ad:de:dd:2c:bd:ca:39:aa:f9:30:1f:48:2e:a5:30:ec:a6:
88:19:9c:5e:56:a8:93:1c:34:e0:99:f0:3a:b5:de:14:3e:24:
93:14:a1:dc:0b:7f:7f:4f:22:ed:39:95:55:83:d8:08:75:a1:
3a:c7:ae:96:6a:dd:f4:e6:21:73:62:1b:2b:72:7b:62:96:78:
80:c9:17:83:0a:e1:8e:b5:c5:57:35:7b:dc:88:ec:92:e4:a3:
3c:f5:6f:19:d8:5d:9f:57:ad:2e:62:02:46:c8:27:24:33:e5:
05:43:f4:c9:c4:07:88:a0:76:de:e6:fe:b5:95:39:92:55:b5:
6d:1e:12:60:4e:a0:a4:d8:ea:28:52:a7:2b:91:43:2b:21:19:
6f:18:b3:35:16:fb:a9:50:34:b2:08:bf:0a:c3:f8:89:b9:df:
7a:f6:aa:73:0b:f7:87:c1:d8:56:1c:82:dc:0a:8b:f4:21:76:
e7:23:81:1e:81:8c:a1:c7:fd:3f:93:2c:2b:38:1b:e8:d5:96:
c0:2f:6e:98:a0:38:4f:f6:68:30:d3:8e:7f:60:d0:d0:be:9d:
31:40:9f:a7:98:4a:d3:76:5e:28:a6:27:22:7e:6f:7b:b6:fd:
55:6c:03:df:48:f5:77:68:43:fc:85:62:d4:1e:f0:66:e9:bc:
97:c2:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:31 2025 by rpki-client