Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/sw183wRP9wSA0sFCdJNFPFiaI34.roa
File: sw183wRP9wSA0sFCdJNFPFiaI34.roa (raw, json)
Hash identifier: Pi+NqOn4hocTtfhwd9CmDKi+Mg4geWFL5dxhblQ+pGI=
Subject key identifier: B3:0D:7C:DF:04:4F:F7:04:80:D2:C1:42:74:93:45:3C:58:9A:23:7E
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 018875E2B5A6933700C66CB8B6B5C21C1CAD
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/sw183wRP9wSA0sFCdJNFPFiaI34.roa
Signing time: Thu 01 Jun 2023 07:36:11 +0000
ROA not before: Thu 01 Jun 2023 07:36:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41644
IP address blocks: 185.144.212.0/22 maxlen: 22
193.219.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:e2:b5:a6:93:37:00:c6:6c:b8:b6:b5:c2:1c:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Jun 1 07:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30d7cdf044ff70480d2c1427493453c589a237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:55:5d:19:b7:4d:f9:3a:a0:cd:23:89:80:
e0:55:2c:6c:52:a0:da:18:6d:10:2e:60:30:fd:ba:
23:1e:b9:1e:6e:0e:4c:f5:52:20:5d:89:5e:08:fc:
b1:16:14:fa:93:b3:0a:c4:9f:77:5b:7d:bc:d1:ad:
28:72:d4:71:3d:62:5a:19:c4:4f:b1:2c:1d:2b:74:
a6:8b:48:9e:93:9c:cc:8d:0f:49:e9:4f:92:cb:77:
18:cb:e1:95:86:ed:10:5b:f7:35:82:47:7a:04:81:
4f:72:19:43:f2:05:4c:33:c8:9f:26:6e:1b:0f:06:
9e:ea:02:95:8d:6d:5f:b3:5c:1c:a3:81:41:63:83:
4c:a8:c7:fe:30:a7:a6:b8:76:e6:2c:b6:90:52:10:
71:3c:74:ee:b6:6c:51:5f:5b:5f:59:4f:64:82:98:
6b:96:db:db:b6:2d:81:2a:85:a5:c8:d3:3b:e1:48:
27:df:ab:bc:da:99:76:e0:c4:d0:52:53:01:bf:6f:
92:33:a8:b4:cc:0d:23:b7:c5:79:0a:9e:5e:25:d8:
cd:53:92:50:c0:80:7b:69:21:e5:88:bf:54:fd:87:
36:6b:dd:82:bd:f3:35:83:02:c7:f1:da:42:96:43:
44:29:9b:36:a5:27:28:72:52:05:b7:31:f3:f2:88:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:7C:DF:04:4F:F7:04:80:D2:C1:42:74:93:45:3C:58:9A:23:7E
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/sw183wRP9wSA0sFCdJNFPFiaI34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.212.0/22
193.219.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:40:9d:5b:08:81:6f:72:e8:d4:53:18:d2:13:9b:0d:69:91:
85:93:e1:1d:40:dd:bc:72:5e:bd:ef:90:1d:b3:7c:bd:54:2c:
10:40:35:f4:aa:f6:d9:5e:50:18:ff:bf:a3:a2:0f:0c:ce:85:
51:bf:5b:14:68:6b:0a:9c:bc:07:c2:f1:4a:e6:9d:99:ca:e2:
38:87:04:1e:67:93:de:a6:a4:4c:12:73:c5:a7:d2:52:0f:32:
51:ae:e8:6a:fe:cd:75:59:1f:9f:61:73:12:12:fa:14:bc:e1:
f0:31:b3:f7:06:44:71:3c:b7:4a:f4:78:e1:81:09:bd:da:18:
dc:15:8c:05:4f:90:63:7d:18:e3:9b:42:ba:5d:dc:92:16:f3:
b8:fd:e2:99:2a:99:0c:35:ee:34:94:36:06:34:71:aa:38:04:
71:58:eb:d9:e8:a1:42:07:8e:25:7b:88:29:1d:a3:ea:11:af:
4c:76:66:56:76:81:4b:c4:a6:88:97:d3:45:93:65:6e:ba:f0:
75:f8:0f:9f:24:14:38:09:f6:7b:18:12:0c:73:f1:37:54:11:
e0:a4:4a:cf:30:5a:49:34:05:fc:18:b4:8c:1d:ca:74:77:5d:
50:9c:e0:9a:8b:8a:19:04:29:3f:33:0e:22:45:72:fd:0f:e0:
49:f5:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:51:16 2025 by rpki-client