Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwJeLpnWhecV7mVOZ05N7fFkqGI.roa
File: dwJeLpnWhecV7mVOZ05N7fFkqGI.roa (raw, json)
Hash identifier: 1GheAuoGR4wKkZ/9Djhuu0wTqs+0PQRgo2VoiSTLmXU=
Subject key identifier: 77:02:5E:2E:99:D6:85:E7:15:EE:65:4E:67:4E:4D:ED:F1:64:A8:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188F104FF38B0CEA0476E7A3C10B89F4EB3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwJeLpnWhecV7mVOZ05N7fFkqGI.roa
Signing time: Sun 25 Jun 2023 05:26:56 +0000
ROA not before: Sun 25 Jun 2023 05:26:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
45.14.167.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f1:04:ff:38:b0:ce:a0:47:6e:7a:3c:10:b8:9f:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 25 05:26:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77025e2e99d685e715ee654e674e4dedf164a862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:22:48:2a:60:26:e1:f6:56:c8:14:db:f6:
e5:fb:6c:b0:2d:00:3a:44:f4:59:6c:4a:34:7e:8a:
3d:b7:ea:b1:7f:cf:97:6e:9e:c7:93:8f:48:97:bc:
d1:23:37:47:30:35:69:98:d5:4e:bc:94:35:5f:f2:
db:e7:3e:5c:76:e4:55:82:ce:13:f0:87:dc:12:95:
e5:80:84:f0:4c:95:8e:b7:38:3f:59:82:4d:a0:c8:
40:55:25:69:59:4e:60:ea:c5:a1:66:05:bd:a2:16:
0b:ad:ad:25:ab:0d:8e:aa:36:2a:1e:f3:26:8e:8a:
48:7d:cd:e6:ba:c3:ed:8e:da:5a:8d:9a:b7:40:80:
e5:d9:e4:96:80:3b:ff:66:bb:ee:1b:d9:ed:f1:22:
6b:ed:c8:1c:7b:50:ff:1c:bf:10:9e:66:8b:3d:66:
11:3e:84:e9:b0:a6:80:56:62:dc:7b:fd:63:80:d2:
12:af:e9:e8:d8:e2:d5:af:6b:9d:2a:de:ef:82:a5:
8d:c7:e7:42:96:f6:5f:7c:59:4a:a0:46:af:85:c6:
95:f9:c9:f8:5a:31:e9:c1:f6:3d:70:aa:5a:ed:09:
21:23:fd:b3:8b:37:c2:49:54:6d:95:3a:c5:fc:67:
7e:b5:15:e8:cb:80:c7:e7:c9:8d:30:38:f9:29:03:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:5E:2E:99:D6:85:E7:15:EE:65:4E:67:4E:4D:ED:F1:64:A8:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dwJeLpnWhecV7mVOZ05N7fFkqGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
83.219.98.0/24
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
42:01:4f:a8:7a:db:9e:4c:5a:fd:aa:eb:0d:e8:18:6b:46:1b:
98:d4:c8:c5:9c:f3:4c:b5:23:4f:64:8e:9c:05:60:00:2e:d8:
c7:45:31:2a:4c:70:e3:db:48:c1:64:9f:e9:a6:a2:5b:af:8e:
02:5b:f2:83:39:6a:a4:9f:43:40:69:c1:da:95:08:d2:71:f2:
c1:7f:3c:85:0e:b5:35:5a:fb:34:48:29:65:ba:e1:c4:67:24:
78:76:93:d3:de:82:aa:53:aa:42:7b:b6:33:ca:67:0d:5b:a9:
22:7b:73:2d:81:6c:c0:b0:e1:bc:46:34:f5:22:95:e1:af:c3:
b1:3b:5a:90:f6:29:e4:f8:76:d8:d7:51:67:75:66:65:44:1d:
24:8a:ca:27:0b:6a:cb:c9:d4:5d:e3:fa:f4:f0:66:b9:a2:79:
a3:1e:87:ef:7e:70:97:5c:0f:8d:e5:12:33:27:c5:75:a8:1f:
04:14:43:77:32:9b:1f:75:ed:67:43:96:5c:8e:26:65:9a:24:
84:b4:3c:4b:33:61:f1:7f:fc:dc:f9:06:f1:fe:a3:24:a7:ba:
74:d0:da:e8:d9:fc:c0:74:5e:94:4a:a8:ba:65:a6:c2:b3:d9:
fc:a5:cb:d7:6d:be:8c:c1:cd:1f:d8:32:71:97:32:63:2f:d9:
f9:60:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:33:44 2025 by rpki-client