Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/w5Uqgo_B7ZSHG5NBeSJL6VwLmVE.roa
File: w5Uqgo_B7ZSHG5NBeSJL6VwLmVE.roa (raw, json)
Hash identifier: uLWiQU5v+0YfwfoIPU4WmPThrl9oMAZLMM01vMWbjQI=
Subject key identifier: C3:95:2A:82:8F:C1:ED:94:87:1B:93:41:79:22:4B:E9:5C:0B:99:51
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 01856D0AD424F5EE3763F81954C171007A11
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/w5Uqgo_B7ZSHG5NBeSJL6VwLmVE.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 213.5.226.0/24 maxlen: 24
91.233.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d4:24:f5:ee:37:63:f8:19:54:c1:71:00:7a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3952a828fc1ed94871b934179224be95c0b9951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:ba:33:3e:18:01:4f:93:05:f5:da:4f:3b:
fe:32:63:d6:e1:27:92:4f:e6:57:b4:38:c3:d0:c4:
8c:4e:ab:5d:7f:8e:bc:bb:84:b2:1d:03:5c:4e:d1:
f7:72:3f:d5:ee:fd:8d:ff:5d:38:8b:ea:7c:99:dd:
0e:a2:2f:f1:72:aa:c9:c2:be:ab:7e:e7:b7:44:8a:
cd:c6:46:3e:a1:d3:ad:ab:0d:1b:0c:49:fe:41:ad:
1e:f2:86:55:ac:c8:75:78:98:23:3a:a0:5c:47:35:
ee:0c:dd:f6:d7:d2:0a:9f:62:08:f4:11:3b:b1:fe:
41:2a:d9:f7:35:a4:86:bd:c1:e7:4d:e7:50:ca:23:
5f:46:e8:95:b8:d8:49:a6:ef:02:c5:fd:87:67:f5:
93:1e:b3:79:22:e2:a0:4a:2e:8f:45:8f:8f:50:bb:
ff:20:6c:19:ba:7b:b9:a0:72:b9:30:bc:b1:0c:5b:
e1:83:7c:e6:55:97:61:b4:28:83:57:f4:52:24:dc:
26:9e:6c:a5:ed:56:45:c5:ef:15:ef:59:54:3f:4b:
d7:21:82:9c:e6:19:f1:8f:09:57:39:74:e8:e1:4f:
1b:74:f6:de:a0:b8:3b:75:ef:77:a1:82:66:5c:09:
f6:af:15:96:d6:1f:cf:89:8d:9b:0a:ac:11:f3:90:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:2A:82:8F:C1:ED:94:87:1B:93:41:79:22:4B:E9:5C:0B:99:51
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/w5Uqgo_B7ZSHG5NBeSJL6VwLmVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.61.0/24
213.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a1:c8:9d:f3:ed:14:c7:93:83:f9:9b:37:f5:5f:d0:22:b4:
c4:0c:41:fb:66:30:70:ed:7e:0a:77:01:5b:86:81:ff:c9:46:
f7:18:98:7b:d2:03:8b:b6:67:09:8a:a6:b3:97:62:30:bc:b6:
f8:6a:65:1a:e3:1b:ad:45:42:2b:6c:bd:11:3d:36:2e:d5:45:
1f:05:8e:76:aa:59:7f:d3:df:3c:be:ce:ab:13:8e:cd:07:fe:
e1:32:1c:eb:3c:ed:6b:b1:50:57:43:ad:f1:93:90:2f:b5:32:
2d:fd:d2:93:24:c8:24:9c:93:7e:7a:73:14:01:7c:02:a7:e3:
07:51:3a:69:80:f8:77:96:6e:c2:af:9b:7b:82:0c:8b:a0:41:
d4:e2:63:9f:fc:bd:68:9f:46:71:5f:b8:49:e4:2d:8c:48:e3:
81:ea:61:e6:e8:db:c0:78:ab:c6:44:16:bd:0c:77:f9:22:ca:
6c:b0:44:ce:36:78:0d:3b:28:c5:32:51:86:bc:35:3b:5c:7e:
14:75:eb:dc:3e:b2:fd:ba:fc:f7:6d:60:b5:59:ee:67:3a:19:
50:10:8d:e1:19:40:48:95:20:57:e4:37:d7:ae:82:f5:3b:f0:
d1:98:af:53:89:e2:d9:3d:ba:c1:a5:e7:79:0d:dd:9d:e8:53:
03:51:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:49 2025 by rpki-client