Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/wMxXxAYlwiGbUxDF00rZ3XTSrcA.roa
File: wMxXxAYlwiGbUxDF00rZ3XTSrcA.roa (raw, json)
Hash identifier: prplwp+PZVIXiwNOVCdnniX+r/6Eh1gUHACefZY5j84=
Subject key identifier: C0:CC:57:C4:06:25:C2:21:9B:53:10:C5:D3:4A:D9:DD:74:D2:AD:C0
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 06331A56
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/wMxXxAYlwiGbUxDF00rZ3XTSrcA.roa
Signing time: Fri 11 Mar 2022 15:51:49 +0000
ROA not before: Fri 11 Mar 2022 15:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41477
IP address blocks: 91.215.164.0/22 maxlen: 23
91.215.166.0/24 maxlen: 24
91.215.165.0/24 maxlen: 24
91.215.167.0/24 maxlen: 24
185.34.164.0/22 maxlen: 23
185.34.165.0/24 maxlen: 24
185.34.166.0/24 maxlen: 24
185.34.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104012374 (0x6331a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Mar 11 15:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0cc57c40625c2219b5310c5d34ad9dd74d2adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:12:7f:e5:1d:4a:ff:ee:82:83:77:c0:bd:
cb:1d:fd:dd:57:80:d1:3a:20:4f:db:3b:7b:f6:f6:
74:43:b7:2c:02:4a:cf:a1:ad:e4:a5:22:5d:e9:b2:
65:94:9b:0a:8b:08:6b:5e:7c:89:74:b3:af:0b:29:
8b:d3:87:b3:d2:07:21:64:8f:e8:3b:56:30:88:11:
fc:6e:a8:4c:92:af:04:5b:09:4a:f4:68:46:26:72:
d2:1f:8a:3c:80:2c:b3:d2:01:a8:17:d3:4c:fd:2f:
e9:1b:18:6b:db:8d:13:44:3f:36:27:7d:28:e7:9e:
69:5e:50:f4:9d:ce:62:19:0b:c4:1b:d7:e5:75:fc:
df:89:d0:0c:ee:d7:3f:33:f4:e2:53:bf:b7:c5:ae:
fe:86:ab:70:12:7f:c4:7c:08:d9:25:f4:18:dd:50:
89:d9:8f:1d:6f:de:d4:a6:f2:8d:ee:cb:56:ad:9b:
6d:da:f2:36:e9:6a:a1:d1:62:9b:53:aa:fe:4a:3f:
66:e1:95:ce:19:dd:21:f5:fa:5a:49:44:7c:f1:47:
56:d0:6f:26:41:bc:19:37:c6:0b:44:83:ee:11:4a:
78:a3:ec:90:56:38:d4:ca:43:af:61:50:96:1a:fe:
20:0f:2b:26:72:fe:3e:5c:c3:fe:0e:0c:24:3c:0f:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:57:C4:06:25:C2:21:9B:53:10:C5:D3:4A:D9:DD:74:D2:AD:C0
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/wMxXxAYlwiGbUxDF00rZ3XTSrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.164.0/22
185.34.164.0/22
Signature Algorithm: sha256WithRSAEncryption
81:11:bf:59:db:1f:ef:86:90:ee:4f:b0:ec:91:fa:58:e4:95:
99:18:48:4d:1c:7d:ba:5d:9c:ef:b6:ce:e9:f8:dc:63:6d:81:
e8:b8:bc:f5:b4:23:e2:fe:f1:48:a8:ea:06:0e:4e:c0:67:7e:
38:ce:90:23:a7:da:47:83:1c:f9:5a:5b:30:1c:77:1a:cc:fe:
37:c8:e1:3e:ad:73:29:b1:b9:61:e5:dd:e3:83:1b:05:de:f1:
e3:fb:e9:5c:ab:10:42:85:ee:8e:c0:a2:d0:e3:85:14:00:95:
b4:ea:30:de:d6:3e:f6:2d:7e:cd:e0:d4:6f:f9:83:93:7a:ca:
ce:be:a4:6a:57:68:fe:4d:02:71:b7:b2:38:02:54:fa:6c:f1:
fb:a8:3e:79:99:d7:ff:2f:67:13:5f:10:ce:bf:1d:72:e2:40:
02:29:b1:f6:f4:d5:db:51:79:1c:1c:7c:2a:12:f7:26:a5:36:
9c:04:d1:45:33:14:36:68:e0:32:e7:cb:7f:10:94:40:bc:06:
56:81:33:f6:b0:49:ee:14:db:b7:4d:ea:40:4e:21:84:36:21:
b6:de:51:0c:55:5b:16:03:a7:00:ce:cb:4c:02:73:a2:5a:83:
f7:08:16:95:e0:bf:99:6f:17:31:68:7c:0f:81:4e:f8:4a:eb:
79:d4:2c:87
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBjMaVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzU3OTlmZjQzMzViN2IxYWU3MTg4ZWRmYTUzZmQ3ZTIxM2ViMjE2MB4XDTIyMDMx
MTE1NTE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzBjYzU3YzQwNjI1
YzIyMTliNTMxMGM1ZDM0YWQ5ZGQ3NGQyYWRjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyDEn/lHUr/7oKDd8C9yx393VeA0TogT9s7e/b2dEO3LAJK
z6Gt5KUiXemyZZSbCosIa158iXSzrwspi9OHs9IHIWSP6DtWMIgR/G6oTJKvBFsJ
SvRoRiZy0h+KPIAss9IBqBfTTP0v6RsYa9uNE0Q/Nid9KOeeaV5Q9J3OYhkLxBvX
5XX834nQDO7XPzP04lO/t8Wu/oarcBJ/xHwI2SX0GN1QidmPHW/e1Kbyje7LVq2b
bdryNulqodFim1Oq/ko/ZuGVzhndIfX6WklEfPFHVtBvJkG8GTfGC0SD7hFKeKPs
kFY41MpDr2FQlhr+IA8rJnL+PlzD/g4MJDwPzWsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTAzFfEBiXCIZtTEMXTStnddNKtwDAfBgNVHSMEGDAWgBTHV5n/QzW3sa5x
iO36U/1+IT6yFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gxZVpfME0xdDdHdWNZanQtbFA5ZmlFLXNoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMWU0YzAzLWY2MTktNDdhMy04MWJkLTM2ZWY3YWVlYmUzYi8x
L3dNeFh4QVlsd2lHYlV4REYwMHJaM1hUU3JjQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MWU0YzAzLWY2MTktNDdhMy04MWJkLTM2ZWY3YWVlYmUzYi8xL3gxZVpfME0xdDdH
dWNZanQtbFA5ZmlFLXNoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvXpAMEArkipDANBgkqhkiG9w0B
AQsFAAOCAQEAgRG/Wdsf74aQ7k+w7JH6WOSVmRhITRx9ul2c77bO6fjcY22B6Li8
9bQj4v7xSKjqBg5OwGd+OM6QI6faR4Mc+VpbMBx3Gsz+N8jhPq1zKbG5YeXd44Mb
Bd7x4/vpXKsQQoXujsCi0OOFFACVtOow3tY+9i1+zeDUb/mDk3rKzr6kaldo/k0C
cbeyOAJU+mzx+6g+eZnX/y9nE18Qzr8dcuJAAimx9vTV21F5HBx8KhL3JqU2nATR
RTMUNmjgMufLfxCUQLwGVoEz9rBJ7hTbt03qQE4hhDYhtt5RDFVbFgOnAM7LTAJz
olqD9wgWleC/mW8XMWh8D4FO+ErredQshw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:42 2025 by rpki-client