Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kPlW8N3NBTyjkbnDHlz968_WjvU.roa
File: kPlW8N3NBTyjkbnDHlz968_WjvU.roa (raw, json)
Hash identifier: pAkXeX5Dx0JcYNB2R4/I7Vr04f/c8TfPXvdfZMblWKU=
Subject key identifier: 90:F9:56:F0:DD:CD:05:3C:A3:91:B9:C3:1E:5C:FD:EB:CF:D6:8E:F5
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01856F0B593EBA7A831347E206011C340EF3
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kPlW8N3NBTyjkbnDHlz968_WjvU.roa
Signing time: Sun 01 Jan 2023 20:34:52 +0000
ROA not before: Sun 01 Jan 2023 20:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201525
IP address blocks: 5.149.252.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
79.141.166.0/23 maxlen: 23
2a01:8640:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:59:3e:ba:7a:83:13:47:e2:06:01:1c:34:0e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 20:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90f956f0ddcd053ca391b9c31e5cfdebcfd68ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:a2:54:d1:d2:24:d9:55:9d:0a:90:db:cb:
4d:03:38:60:dc:f1:21:64:8d:2e:cc:70:ce:44:d1:
f3:01:d9:be:36:e1:39:94:b5:1b:00:f5:40:1a:1f:
53:58:4f:69:d0:5c:0b:73:76:63:57:a6:76:69:a7:
24:17:ae:7b:e2:03:a1:13:bc:05:41:43:90:14:c6:
29:c8:7a:d0:b5:d7:95:1f:5a:eb:59:35:5b:98:0e:
db:50:5b:af:eb:f2:22:79:6f:b2:ad:1a:9b:b7:1d:
ab:59:d9:03:03:7f:1b:ef:8b:64:c9:5a:ad:56:1b:
e2:e3:c3:d0:67:26:e7:6d:f5:c9:53:e0:85:ff:45:
70:6b:0f:ac:a6:cd:95:fd:d2:d7:93:f0:56:f9:6c:
24:32:f0:33:60:d8:bd:99:9b:a2:ac:b9:b7:b2:4c:
0b:cd:91:07:90:21:7f:b1:43:b9:6e:cc:79:1d:d6:
bc:e6:0d:8f:77:b6:36:76:20:47:ee:62:a9:6d:16:
09:df:5b:3e:2c:e3:1a:fc:a1:3f:9d:2a:02:e6:d4:
95:c2:06:87:d7:db:84:fb:80:1d:23:69:ee:f3:12:
0b:12:35:37:13:7e:33:1e:6c:bb:00:a8:02:79:3b:
2e:e1:47:4c:f3:e1:4b:1f:5d:c1:f7:7b:d4:ba:7b:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:56:F0:DD:CD:05:3C:A3:91:B9:C3:1E:5C:FD:EB:CF:D6:8E:F5
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/kPlW8N3NBTyjkbnDHlz968_WjvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.252.0/23
79.141.166.0/23
79.141.172.0/24
IPv6:
2a01:8640:3::/48
Signature Algorithm: sha256WithRSAEncryption
82:7a:4a:4d:be:2f:32:1c:cf:cd:04:ca:0f:16:8c:34:83:06:
fe:02:fb:03:c6:c5:25:8a:72:6b:d0:f4:8f:7a:36:cc:9e:a2:
1b:bd:e2:60:80:7e:8e:42:d7:a2:a2:ac:2a:c1:ae:f0:9c:ad:
a1:e8:4f:cf:43:9e:68:61:54:0d:71:d7:4c:ff:83:2f:0c:af:
97:de:c7:12:09:ed:72:96:90:3e:88:25:64:23:04:03:71:ca:
09:20:15:a2:b0:46:a4:5c:ea:ef:92:63:d2:d0:90:2e:2b:7a:
d8:b5:cd:7f:81:13:02:3f:82:94:da:1c:7e:0d:cb:25:ee:e5:
e6:ae:de:78:76:ce:87:45:31:d4:23:c7:71:f5:52:3e:ee:c9:
0c:e4:53:fd:e9:b2:f5:c7:2d:6e:a4:1d:77:da:59:a4:1a:d8:
e3:4a:a1:6e:26:11:59:84:4f:f6:c2:83:ca:fb:59:d9:a0:c3:
c3:13:3f:08:5b:d5:15:42:db:00:b1:9e:43:8d:83:6b:53:de:
b3:60:4d:8c:f1:c7:82:bb:e3:34:eb:70:e8:44:a3:53:59:35:
40:fe:7c:ff:f5:b4:3b:c2:8b:6c:9e:c8:58:a8:68:87:09:28:
a8:d6:97:f4:bc:9a:15:78:c7:94:c8:10:c6:01:ab:44:2d:f7:
76:c3:e9:96
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVvC1k+unqDE0fiBgEcNA7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjMwMTAxMjAzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGY5NTZmMGRkY2QwNTNjYTM5MWI5YzMxZTVjZmRlYmNmZDY4ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu++iVNHSJNlVnQqQ28tNAzhg3PEh
ZI0uzHDORNHzAdm+NuE5lLUbAPVAGh9TWE9p0FwLc3ZjV6Z2aackF6574gOhE7wF
QUOQFMYpyHrQtdeVH1rrWTVbmA7bUFuv6/IieW+yrRqbtx2rWdkDA38b74tkyVqt
Vhvi48PQZybnbfXJU+CF/0Vwaw+sps2V/dLXk/BW+WwkMvAzYNi9mZuirLm3skwL
zZEHkCF/sUO5bsx5Hda85g2Pd7Y2diBH7mKpbRYJ31s+LOMa/KE/nSoC5tSVwgaH
19uE+4AdI2nu8xILEjU3E34zHmy7AKgCeTsu4UdM8+FLH13B93vUuntRnQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJD5VvDdzQU8o5G5wx5c/evP1o71MB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEva1BsVzhOM05CVHlqa2JuREhsejk2OF9XanZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBBZX8AwQB
T42mAwQAT42sMA8EAgACMAkDBwAqAYZAAAMwDQYJKoZIhvcNAQELBQADggEBAIJ6
Sk2+LzIcz80Eyg8WjDSDBv4C+wPGxSWKcmvQ9I96Nsyeohu94mCAfo5C16KirCrB
rvCcraHoT89DnmhhVA1x10z/gy8Mr5fexxIJ7XKWkD6IJWQjBANxygkgFaKwRqRc
6u+SY9LQkC4reti1zX+BEwI/gpTaHH4NyyXu5eau3nh2zodFMdQjx3H1Uj7uyQzk
U/3psvXHLW6kHXfaWaQa2ONKoW4mEVmET/bCg8r7Wdmgw8MTPwhb1RVC2wCxnkON
g2tT3rNgTYzxx4K74zTrcOhEo1NZNUD+fP/1tDvCi2yeyFioaIcJKKjWl/S8mhV4
x5TIEMYBq0Qt93bD6ZY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:46 2025 by rpki-client