Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/0WC-6KRNW0sQggW1xILoqCaWJo8.roa
File: 0WC-6KRNW0sQggW1xILoqCaWJo8.roa (raw, json)
Hash identifier: kMAl+iqUPcfwpJ8e+OZNE+XD4WYO4Re3eE3rv0RXv+4=
Subject key identifier: D1:60:BE:E8:A4:4D:5B:4B:10:82:05:B5:C4:82:E8:A8:26:96:26:8F
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 01856F5DDA7D8F26525C35FDC123D65DA6B8
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/0WC-6KRNW0sQggW1xILoqCaWJo8.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43399
IP address blocks: 91.194.226.0/23 maxlen: 23
91.194.226.0/24 maxlen: 24
91.194.227.0/24 maxlen: 24
91.218.132.0/24 maxlen: 24
91.218.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:da:7d:8f:26:52:5c:35:fd:c1:23:d6:5d:a6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d160bee8a44d5b4b108205b5c482e8a82696268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:72:3d:1f:e7:e8:6f:d0:a0:26:e8:6d:90:
74:20:61:61:cc:20:c0:1d:5c:0a:db:0a:82:e7:cf:
b5:35:86:cd:ad:c7:c8:53:cb:9e:c8:22:ee:1a:b3:
4f:99:c7:af:e4:24:de:ba:7e:a8:18:4d:17:45:5f:
d5:64:09:76:c8:de:eb:bf:37:10:f9:e9:90:b7:11:
aa:60:96:a6:ae:a9:91:71:01:53:92:97:d1:2b:b4:
91:52:4e:89:59:c5:71:f2:da:fc:14:c9:37:b7:ce:
be:b1:e1:44:d0:c4:eb:6e:a1:07:3f:a1:38:8e:72:
4f:ab:f8:73:34:99:dd:c7:ae:28:d2:fa:6d:be:c8:
ee:4e:a2:40:47:01:2b:ea:2d:aa:61:a7:21:57:67:
61:04:a0:19:05:a9:d1:b2:ed:01:cc:8b:22:1f:e3:
ae:c0:b4:8b:90:d3:ad:66:87:46:f4:c8:a5:45:d5:
04:00:b4:63:95:a7:65:3c:47:08:f3:e0:63:92:9c:
1f:c6:8b:35:39:bd:81:07:bf:87:df:48:3a:f3:5f:
10:b4:0a:76:dc:37:e6:cb:95:5f:cc:17:59:20:76:
5f:7b:d8:0b:d4:df:2f:69:e1:13:70:04:48:83:2b:
df:9e:93:33:e7:0c:54:0d:08:1e:6a:a3:81:73:48:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:BE:E8:A4:4D:5B:4B:10:82:05:B5:C4:82:E8:A8:26:96:26:8F
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/0WC-6KRNW0sQggW1xILoqCaWJo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.226.0/23
91.218.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:0d:b6:07:6c:8b:87:d0:b8:cf:63:67:aa:7d:73:8e:4b:34:
3d:f0:25:c9:65:64:e8:b4:36:cb:d8:30:3f:0d:93:36:5f:89:
e6:16:6b:f2:5f:e6:88:03:1e:d3:a4:a2:69:fa:6c:90:48:78:
bc:1f:d8:9b:d5:b1:54:cf:9b:59:1e:a8:8c:9d:4c:29:fa:9b:
9a:17:f7:a6:d9:fe:56:e5:9f:4c:6d:5b:7d:92:41:0c:69:ab:
3e:74:9f:2e:95:34:ae:f9:b7:c6:08:c4:21:77:94:76:4e:31:
19:08:c3:50:c2:3a:0f:81:bd:85:54:94:c4:2d:7a:f0:78:5b:
79:47:5b:43:e7:a4:8f:0b:bc:b4:b8:1d:4e:19:55:33:e0:10:
4a:1a:25:95:c8:d8:a2:f9:b7:7b:39:2e:5a:a3:a8:7e:38:6d:
6d:4e:fc:74:5a:89:10:30:e2:af:56:83:07:2b:a9:f2:02:81:
2a:99:2b:55:d6:a8:d5:06:e8:ec:80:e4:59:ee:09:a3:ca:c1:
35:bd:db:4a:51:4e:4f:c3:7c:2a:a0:4f:79:db:b2:f6:51:d2:
ab:ea:1c:50:c0:0b:99:b8:47:ad:26:d5:52:ad:bd:fc:51:47:
a8:95:d0:d2:c1:27:54:20:0d:81:95:82:04:0a:19:66:86:26:
44:8c:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:39 2025 by rpki-client