Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SwUC4WM7PyvcC-7RZ0XnRBnx7II.roa
File: SwUC4WM7PyvcC-7RZ0XnRBnx7II.roa (raw, json)
Hash identifier: lvBsSapCSyNc/l/1mRkwbknXAr2QPbmRUlwdpSVyIAE=
Subject key identifier: 4B:05:02:E1:63:3B:3F:2B:DC:0B:EE:D1:67:45:E7:44:19:F1:EC:82
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B63F7CE5127370FFBFECC7B5D327F
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SwUC4WM7PyvcC-7RZ0XnRBnx7II.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:63:f7:ce:51:27:37:0f:fb:fe:cc:7b:5d:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b0502e1633b3f2bdc0beed16745e74419f1ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:3e:7e:20:62:51:c4:74:7c:6d:35:7f:05:
15:72:5a:c6:5a:1f:e0:6b:93:bd:8b:30:64:df:90:
3a:48:da:c5:f1:ff:27:0d:40:b7:29:75:75:9c:13:
19:05:95:a6:28:39:4d:f9:b5:20:02:de:f6:e3:94:
a6:71:7a:13:a2:81:6a:a6:6a:11:9d:69:80:02:0d:
14:e6:e1:78:dd:c4:50:43:b4:f0:c8:4c:74:17:3b:
95:c1:ce:ac:36:75:4f:18:3a:8b:1d:92:2e:c6:50:
ea:cb:c0:0f:39:ef:79:ac:84:39:68:5c:bc:2e:e5:
6a:fa:0a:96:8e:69:fe:25:89:7e:59:8c:1f:df:67:
0c:37:36:df:1b:06:d6:2c:44:ef:9d:99:85:da:89:
be:a7:38:e1:5e:cd:fa:7a:e0:9b:08:fc:a4:fe:13:
6b:83:78:53:39:59:a4:3f:66:3c:d8:2d:d7:b7:3c:
84:fc:bd:52:32:12:5e:70:e3:45:08:60:6d:99:58:
db:80:3f:ff:06:e4:29:51:fa:12:4f:f9:8a:aa:b7:
de:00:43:60:6c:af:16:56:08:8e:b4:ba:1f:52:0c:
c3:dc:dc:28:68:dc:c6:d5:53:74:0f:fc:4a:87:ee:
6a:3b:87:e0:73:19:d7:6b:87:e9:ff:27:a0:9c:51:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:02:E1:63:3B:3F:2B:DC:0B:EE:D1:67:45:E7:44:19:F1:EC:82
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SwUC4WM7PyvcC-7RZ0XnRBnx7II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
11:97:5f:a2:83:e8:ce:66:88:ce:8c:bb:f0:16:aa:0b:d2:9d:
1b:50:05:88:67:47:b2:d1:df:52:f1:d1:1a:ed:cc:4e:b4:42:
b3:ed:2f:02:56:08:0f:c1:96:62:6b:a5:a3:b3:83:97:57:11:
5b:ae:e6:03:c1:f8:eb:30:43:ee:65:18:fc:5b:dc:0f:59:2f:
87:b7:c5:b1:31:d3:f8:fe:d4:5a:50:04:17:65:e5:38:67:da:
3b:2f:f3:1e:31:13:72:db:69:2f:9e:db:b3:c2:44:05:5f:62:
39:e9:1f:55:94:26:06:b5:9b:b7:38:ca:80:b9:d9:b2:fc:ca:
22:32:0d:70:81:1f:ec:71:a6:59:42:47:63:1e:19:30:2b:5e:
38:f6:d2:d8:bc:c6:6c:ae:5c:f9:35:45:c6:ba:9c:cb:94:9f:
d2:14:0d:57:45:7f:cc:ed:23:c0:9f:eb:53:ee:83:ee:0b:e8:
2f:de:40:12:4e:9a:15:2a:f6:db:fb:c1:4b:b2:9d:af:6c:4b:
68:47:7d:61:3f:7a:26:eb:7e:26:2d:40:3e:e5:65:86:9b:9f:
33:df:38:3a:7e:6a:02:49:fe:19:cc:30:62:8d:2d:e7:83:87:
95:2c:bb:eb:2f:43:0b:5b:35:4e:37:90:ef:9f:a9:65:5d:27:
78:19:ab:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS2P3zlEnNw/7/sx7XTJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjMwMTAxMjE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjA1MDJlMTYzM2IzZjJiZGMwYmVlZDE2NzQ1ZTc0NDE5ZjFlYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4+fiBiUcR0fG01fwUVclrGWh/g
a5O9izBk35A6SNrF8f8nDUC3KXV1nBMZBZWmKDlN+bUgAt7245SmcXoTooFqpmoR
nWmAAg0U5uF43cRQQ7TwyEx0FzuVwc6sNnVPGDqLHZIuxlDqy8APOe95rIQ5aFy8
LuVq+gqWjmn+JYl+WYwf32cMNzbfGwbWLETvnZmF2om+pzjhXs36euCbCPyk/hNr
g3hTOVmkP2Y82C3XtzyE/L1SMhJecONFCGBtmVjbgD//BuQpUfoST/mKqrfeAENg
bK8WVgiOtLofUgzD3NwoaNzG1VN0D/xKh+5qO4fgcxnXa4fp/yegnFE4zwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEsFAuFjOz8r3Avu0WdF50QZ8eyCMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvU3dVQzRXTTdQeXZjQy03UlowWG5SQm54N0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ/TAwQA
UF5YMA0GCSqGSIb3DQEBCwUAA4IBAQARl1+ig+jOZojOjLvwFqoL0p0bUAWIZ0ey
0d9S8dEa7cxOtEKz7S8CVggPwZZia6Wjs4OXVxFbruYDwfjrMEPuZRj8W9wPWS+H
t8WxMdP4/tRaUAQXZeU4Z9o7L/MeMRNy22kvntuzwkQFX2I56R9VlCYGtZu3OMqA
udmy/MoiMg1wgR/scaZZQkdjHhkwK1449tLYvMZsrlz5NUXGupzLlJ/SFA1XRX/M
7SPAn+tT7oPuC+gv3kASTpoVKvbb+8FLsp2vbEtoR31hP3om634mLUA+5WWGm58z
3zg6fmoCSf4ZzDBijS3ng4eVLLvrL0MLWzVON5Dvn6llXSd4Gasl
-----END CERTIFICATE-----
Generated at Fri May 9 00:44:40 2025 by rpki-client