Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/excw3lW1gLVWVtNBbTNibco4MwU.roa
File: excw3lW1gLVWVtNBbTNibco4MwU.roa (raw, json)
Hash identifier: u5iZ7qPvar71qSKoUtGx0g8dpyZI8lvUf7ucAgUVoZw=
Subject key identifier: 7B:17:30:DE:55:B5:80:B5:56:56:D3:41:6D:33:62:6D:CA:38:33:05
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 0185727124C735C038431FBA774512780F2B
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/excw3lW1gLVWVtNBbTNibco4MwU.roa
Signing time: Mon 02 Jan 2023 12:24:55 +0000
ROA not before: Mon 02 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12521
IP address blocks: 91.195.72.0/23 maxlen: 24
91.195.102.0/23 maxlen: 24
212.85.32.0/20 maxlen: 24
212.85.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:24:c7:35:c0:38:43:1f:ba:77:45:12:78:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: Jan 2 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b1730de55b580b55656d3416d33626dca383305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:e2:3d:0f:ba:83:64:7f:f0:20:ea:43:29:
f8:05:35:47:ae:89:cc:a5:35:ab:69:36:08:f4:3e:
a4:5e:0e:ce:68:2e:cf:91:e1:88:9d:8f:09:95:dc:
1c:9f:51:01:24:5b:60:b3:ab:2b:39:4a:f4:81:65:
aa:24:d9:09:b9:3b:0a:4a:79:da:bc:7b:60:52:d8:
75:38:d6:87:6b:fa:20:6c:c2:1e:3e:67:c9:f9:e7:
ea:5a:fb:27:b9:f2:7e:d0:da:19:f8:3c:87:42:98:
08:cc:f2:99:50:a1:44:50:a3:bc:e5:82:f1:ae:38:
ea:15:54:9d:16:92:37:fd:74:f2:0a:c9:33:63:9d:
38:24:f5:0e:1c:63:94:ef:8b:da:f3:25:aa:7b:af:
40:a8:3c:79:f3:ae:d5:ff:a0:83:50:92:c8:a0:5b:
df:77:71:ce:5b:33:bf:52:41:3c:17:47:8e:ad:25:
cd:c8:8a:0b:cf:8c:72:c4:31:06:59:62:7b:ea:b1:
9d:fe:26:4a:92:c9:1d:7f:d0:3b:17:11:59:35:d9:
2a:bf:f1:8c:c9:d8:b6:15:40:95:ec:73:22:4f:86:
aa:c3:10:05:68:b1:76:8d:37:7f:e5:88:43:a4:da:
16:b5:c8:3b:aa:c7:8a:85:de:fb:a9:ce:6d:9c:4b:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:30:DE:55:B5:80:B5:56:56:D3:41:6D:33:62:6D:CA:38:33:05
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/excw3lW1gLVWVtNBbTNibco4MwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.72.0/23
91.195.102.0/23
212.85.32.0-212.85.55.255
Signature Algorithm: sha256WithRSAEncryption
4c:64:5b:f7:a9:c8:84:c9:cc:c8:1a:a2:b6:a7:30:14:53:9f:
d5:3f:bd:9f:80:f8:48:51:83:ea:df:c1:17:0f:e6:06:ac:21:
57:eb:9c:48:d3:dc:c0:f7:76:96:20:3b:e7:aa:b8:97:1c:90:
dd:67:cc:e0:5d:f0:01:e7:35:27:52:db:c5:68:c6:b8:b1:c6:
3b:78:3c:dd:e2:41:4b:48:ef:aa:77:1c:f3:12:64:f4:96:49:
15:53:11:a1:9d:d1:6f:1a:32:44:59:0b:f9:e9:a6:b0:5f:8b:
56:94:3b:a3:01:d4:d7:89:b8:37:84:07:04:f2:2f:93:62:36:
a3:d5:68:83:f7:59:e0:37:28:58:52:f9:56:4b:6f:06:43:94:
bd:94:ce:d2:94:21:76:82:5c:e3:c8:3e:7f:af:0c:ae:75:5f:
b2:f2:3e:e5:02:36:f5:f7:30:5c:fc:7e:0c:01:c0:53:68:80:
66:92:94:f4:40:b8:de:8c:86:c0:b3:17:c6:df:5d:46:c5:93:
4e:17:b0:d5:7d:f6:4d:db:3f:b6:1f:c6:3e:46:1b:52:f2:e9:
2d:52:2c:d5:cf:d0:3f:75:ff:74:87:3b:aa:18:17:1e:02:55:
cf:73:c3:97:25:f5:5e:81:4e:ba:d6:6b:66:8c:1c:04:b5:dc:
a3:d2:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:42:20 2025 by rpki-client