Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W2MOWE9fFYRIviS8JtrZFMQkST4.roa
File: W2MOWE9fFYRIviS8JtrZFMQkST4.roa (raw, json)
Hash identifier: C2HLl3m3slmj7NM18WK0990XMqD32whMlohLNi1DbkY=
Subject key identifier: 5B:63:0E:58:4F:5F:15:84:48:BE:24:BC:26:DA:D9:14:C4:24:49:3E
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0185711E69E78F268339B3044729AF51C8AF
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W2MOWE9fFYRIviS8JtrZFMQkST4.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204171
IP address blocks: 185.103.120.0/24 maxlen: 24
185.103.123.0/24 maxlen: 24
185.103.121.0/24 maxlen: 24
185.103.122.0/24 maxlen: 24
2a06:2bc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:69:e7:8f:26:83:39:b3:04:47:29:af:51:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b630e584f5f158448be24bc26dad914c424493e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:a4:e1:74:2a:1a:18:d6:44:db:c6:6f:6e:
32:c1:77:72:90:b7:d4:7d:a0:19:30:c6:9e:81:6a:
f6:a3:b4:1c:14:b9:1f:97:7d:ee:10:14:3c:ea:8b:
75:92:34:7f:07:34:15:27:87:5d:2b:a2:fd:f8:88:
ee:da:da:8d:9a:c1:cf:66:96:04:d6:dc:86:64:f9:
64:2f:4d:23:48:c5:24:71:27:0c:a9:c2:23:85:59:
1f:75:8e:31:fb:38:a9:7e:eb:20:3e:e1:06:43:1b:
f2:d1:af:c9:13:f7:dc:fe:78:c8:3b:d9:87:70:a5:
c5:7e:7c:4b:02:15:bd:ff:c2:d7:a1:d6:d4:fc:ed:
c8:45:00:7d:82:b4:73:d4:e3:08:a4:be:74:ab:82:
ac:af:6c:b2:b1:d8:9c:fa:12:06:52:87:98:99:03:
0b:30:26:00:13:40:db:fe:c8:88:08:93:16:f2:21:
61:03:6f:e8:10:47:49:56:1f:ea:f1:e3:95:33:74:
ad:67:3d:3d:93:90:5e:17:82:ea:65:10:48:ed:f7:
6a:bb:82:e7:45:b9:ca:7c:72:85:30:da:00:df:69:
25:38:d0:37:24:b6:17:fb:86:14:e1:0e:6b:2b:69:
00:7f:c5:2a:4d:be:8c:cd:a1:51:2f:aa:b8:fd:af:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:0E:58:4F:5F:15:84:48:BE:24:BC:26:DA:D9:14:C4:24:49:3E
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W2MOWE9fFYRIviS8JtrZFMQkST4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.120.0/22
IPv6:
2a06:2bc0::/29
Signature Algorithm: sha256WithRSAEncryption
17:36:90:10:2c:f4:2e:d3:de:e1:f1:5a:95:38:8d:d1:76:3e:
f9:fc:f5:2a:97:42:ad:ff:c9:73:6a:83:3a:ce:2d:a1:74:ed:
f4:e2:59:7e:35:d7:20:8a:2c:15:25:d6:cb:6f:20:a5:94:e1:
0e:84:70:b7:b4:a9:6e:68:75:b0:f6:46:93:57:34:c9:11:92:
a4:db:f5:6c:d6:0b:7a:52:13:8d:b7:55:c2:5e:30:94:a4:1f:
aa:ca:f2:ef:bf:d5:60:70:86:45:67:34:66:c9:c4:94:a4:04:
36:b3:9b:f1:a6:05:d5:50:9f:d7:6f:ea:80:26:1e:da:ad:79:
7d:dd:1f:15:6b:08:b1:b0:f7:89:96:18:bf:a0:dd:6f:06:ec:
f3:3b:46:dc:b4:c8:bb:b4:1d:d4:8c:13:6b:d8:65:77:d8:03:
85:26:39:be:30:9b:7c:cc:c2:c8:a7:11:03:65:2b:72:6a:66:
31:74:11:95:10:51:bb:ff:db:62:ff:fe:c0:b5:3f:a0:43:b3:
cf:0c:df:27:57:de:77:43:b5:6a:f0:1b:24:74:91:6a:38:ed:
d6:39:a2:76:88:71:e0:22:ae:27:b0:8b:69:7e:66:01:fc:12:
0f:e2:65:fd:db:fd:4d:e1:a5:76:ce:50:13:ac:e3:1a:5a:db:
70:c6:e6:f7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxHmnnjyaDObMERymvUcivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjMwMTAyMDYxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjYzMGU1ODRmNWYxNTg0NDhiZTI0YmMyNmRhZDkxNGM0MjQ0OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3yk4XQqGhjWRNvGb24ywXdykLfU
faAZMMaegWr2o7QcFLkfl33uEBQ86ot1kjR/BzQVJ4ddK6L9+Iju2tqNmsHPZpYE
1tyGZPlkL00jSMUkcScMqcIjhVkfdY4x+zipfusgPuEGQxvy0a/JE/fc/njIO9mH
cKXFfnxLAhW9/8LXodbU/O3IRQB9grRz1OMIpL50q4Ksr2yysdic+hIGUoeYmQML
MCYAE0Db/siICJMW8iFhA2/oEEdJVh/q8eOVM3StZz09k5BeF4LqZRBI7fdqu4Ln
RbnKfHKFMNoA32klONA3JLYX+4YU4Q5rK2kAf8UqTb6MzaFRL6q4/a+lXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFtjDlhPXxWESL4kvCba2RTEJEk+MB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvVzJNT1dFOWZGWVJJdmlTOEp0clpGTVFrU1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWd4MA0E
AgACMAcDBQMqBivAMA0GCSqGSIb3DQEBCwUAA4IBAQAXNpAQLPQu097h8VqVOI3R
dj75/PUql0Kt/8lzaoM6zi2hdO304ll+NdcgiiwVJdbLbyCllOEOhHC3tKluaHWw
9kaTVzTJEZKk2/Vs1gt6UhONt1XCXjCUpB+qyvLvv9VgcIZFZzRmycSUpAQ2s5vx
pgXVUJ/Xb+qAJh7arXl93R8VawixsPeJlhi/oN1vBuzzO0bctMi7tB3UjBNr2GV3
2AOFJjm+MJt8zMLIpxEDZStyamYxdBGVEFG7/9ti//7AtT+gQ7PPDN8nV953Q7Vq
8BskdJFqOO3WOaJ2iHHgIq4nsItpfmYB/BIP4mX92/1N4aV2zlATrOMaWttwxub3
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:52 2025 by rpki-client