Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/w4oEDTixWY_du6Fv4Hj6w3Ibvdc.roa
File: w4oEDTixWY_du6Fv4Hj6w3Ibvdc.roa (raw, json)
Hash identifier: FtVlt3Aom97l+qhxtXIKSpzeJxqEiiiueVuRbGLJ4lU=
Subject key identifier: C3:8A:04:0D:38:B1:59:8F:DD:BB:A1:6F:E0:78:FA:C3:72:1B:BD:D7
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0185713094BCBCC6330DBFA585A42770A432
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/w4oEDTixWY_du6Fv4Hj6w3Ibvdc.roa
Signing time: Mon 02 Jan 2023 06:34:47 +0000
ROA not before: Mon 02 Jan 2023 06:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50719
IP address blocks: 195.191.252.0/23 maxlen: 23
5.206.200.0/21 maxlen: 21
91.227.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:94:bc:bc:c6:33:0d:bf:a5:85:a4:27:70:a4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 2 06:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38a040d38b1598fddbba16fe078fac3721bbdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:b3:88:6a:a8:bb:de:33:9e:a3:50:40:28:
c1:88:15:02:03:ac:bd:6d:70:92:e3:45:1e:be:e2:
5c:fc:f7:c6:62:8b:59:08:2a:5f:af:fd:52:28:49:
86:ca:cf:7f:bb:9f:8c:79:31:2c:6c:06:ee:44:a8:
da:2c:8c:47:ed:68:a8:d4:c4:6a:24:11:e2:f3:87:
67:b4:38:c8:0f:44:fd:64:c0:29:22:57:a5:00:59:
4b:ba:a0:94:96:d4:86:31:dd:8d:91:ef:2a:a1:a6:
7b:20:f3:be:59:35:a7:0d:f4:be:78:8a:a9:8c:b2:
3d:e4:eb:f3:5c:13:00:af:a3:7f:fb:ac:5a:2b:c3:
3b:dd:91:12:94:f3:b4:be:63:9a:f7:94:f0:6f:46:
97:77:1a:76:de:be:54:94:fe:98:2c:6d:5d:78:1b:
23:79:6a:79:b3:18:f7:a6:97:5e:89:e1:f1:56:97:
d6:f0:a0:2b:6b:a1:9c:9e:62:35:93:49:42:e8:8e:
78:51:1b:ee:46:e0:02:34:54:93:9d:a8:2b:a0:69:
93:d2:54:b1:f2:41:6a:cf:51:06:59:4d:ad:78:00:
ef:33:80:94:49:4f:9a:92:41:f7:25:58:06:0f:d5:
f5:fd:e4:e5:81:aa:56:82:74:d7:ee:69:85:80:fc:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:04:0D:38:B1:59:8F:DD:BB:A1:6F:E0:78:FA:C3:72:1B:BD:D7
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/w4oEDTixWY_du6Fv4Hj6w3Ibvdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.200.0/21
91.227.231.0/24
195.191.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:22:68:bb:27:71:f1:20:91:6c:44:46:8c:fb:d1:2b:d8:89:
e8:9d:3e:7f:75:e2:c7:15:a8:c5:bf:38:b4:67:fc:69:e4:d8:
3e:04:1a:12:4a:75:fa:f9:ff:f8:13:fa:77:93:81:30:40:7d:
d0:c5:6b:6f:1d:47:e8:a6:4c:e8:ed:bb:a8:a8:d6:af:9a:c9:
81:45:65:eb:ef:dc:f5:df:6a:15:79:82:9f:9b:35:df:bf:71:
4e:93:93:fa:40:b7:24:6d:3f:16:8f:b2:ae:bb:70:2b:8a:8b:
35:d1:ac:01:cd:b4:81:a9:f2:4f:0c:8c:05:49:96:c6:03:2b:
c1:de:f8:27:2f:33:20:6f:c3:20:6f:5d:0b:d7:9e:c3:e0:7d:
29:b2:6f:df:55:a3:72:b7:c2:6a:7b:7c:ce:7c:43:2e:e2:e6:
b4:c1:53:1c:ec:09:ec:78:13:85:bd:38:d2:08:68:4e:82:f7:
c5:2b:ed:14:59:09:4e:f5:7c:92:a1:55:a7:af:c2:27:6a:d9:
fb:6b:db:6f:38:3e:28:cd:94:f6:bd:8b:0e:d6:5f:cf:d2:5f:
60:c0:8d:5e:a3:26:fd:72:7e:48:e2:22:5f:c1:85:6d:bd:de:
c5:0d:81:f4:50:6b:da:01:ea:f4:76:72:50:83:05:15:b7:cf:
07:73:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:31:12 2025 by rpki-client