Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mw5lwGia8rFt-ROIVTr64qEcpsw.roa
File: Mw5lwGia8rFt-ROIVTr64qEcpsw.roa (raw, json)
Hash identifier: aGsnHbCYuD21i2pHrCRg2an8JTjo6QMzZ5zQDiHg6ko=
Subject key identifier: 33:0E:65:C0:68:9A:F2:B1:6D:F9:13:88:55:3A:FA:E2:A1:1C:A6:CC
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0188CF7EF4C26BDCC3C5F07FE975A195383D
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mw5lwGia8rFt-ROIVTr64qEcpsw.roa
Signing time: Sun 18 Jun 2023 17:13:03 +0000
ROA not before: Sun 18 Jun 2023 17:13:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212341
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.178.0/24 maxlen: 24
2a05:900::/32 maxlen: 32
2a05:900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:7e:f4:c2:6b:dc:c3:c5:f0:7f:e9:75:a1:95:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jun 18 17:13:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=330e65c0689af2b16df91388553afae2a11ca6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:c2:f0:c4:0e:35:86:9b:d2:74:12:8f:c8:
35:45:05:7e:73:6e:b9:7f:96:fe:8f:1f:59:d5:00:
f8:d3:f1:15:69:5f:38:e3:84:54:66:ae:c4:6d:3f:
9f:a8:28:7a:7e:21:21:d8:5d:86:32:9b:02:ec:f2:
53:1f:59:db:2c:b2:bf:ea:8e:18:e4:4f:8e:1b:ca:
c5:5d:d6:e4:e5:e3:c7:1d:be:19:81:a6:53:95:28:
20:a9:6f:b1:1c:af:fc:3c:65:41:b1:48:5e:55:11:
db:a3:f8:ce:05:9a:a0:f8:c4:b7:fd:b5:cd:9a:4f:
a5:0f:39:2f:fb:20:2a:89:16:18:6b:c0:7c:02:55:
ad:de:41:3c:bb:db:18:e3:21:a3:b6:85:56:ce:7a:
1d:d2:66:a5:a8:f6:de:ba:fe:61:51:78:ba:1c:71:
58:a4:4d:1c:46:b0:cd:b9:b4:7b:cf:3e:69:cc:fa:
4d:88:f7:7a:51:be:64:60:1c:53:a3:ce:66:57:52:
b6:1f:be:d2:73:9e:79:bd:63:15:15:1e:17:8d:a4:
90:d2:e1:5f:ce:2f:1c:59:1e:b5:7d:c5:db:3f:c5:
2f:5f:fe:ee:c0:65:58:89:3d:ae:7a:3e:4a:1f:40:
98:23:f9:f3:36:de:2f:1c:1a:5b:5e:8a:fe:78:eb:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:65:C0:68:9A:F2:B1:6D:F9:13:88:55:3A:FA:E2:A1:1C:A6:CC
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/Mw5lwGia8rFt-ROIVTr64qEcpsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::/29
Signature Algorithm: sha256WithRSAEncryption
a9:39:06:6d:db:91:e2:45:59:9a:a1:4c:64:c3:02:6b:40:e6:
04:ed:6f:da:3b:a9:c7:d8:86:54:0d:89:f9:e0:9f:03:63:4c:
7f:20:11:17:ae:c5:7a:b5:c9:8f:5a:56:05:2e:35:c5:3f:8f:
ee:c2:24:08:57:81:20:eb:15:a6:d7:2b:f3:e0:b7:ba:65:fa:
58:82:23:c6:69:cb:8b:64:e9:e3:9f:48:32:51:63:cc:91:56:
af:6d:5a:fa:52:3a:47:57:e7:da:cf:a3:1c:7e:93:98:da:86:
41:dc:cb:29:53:be:0e:58:b6:54:e1:bf:ea:4a:03:a6:0f:3e:
af:9d:dd:34:32:d9:50:c6:8e:59:fc:d6:36:b9:41:55:b5:41:
16:af:bf:16:ac:25:a7:ec:90:d6:ac:69:f6:08:05:1a:88:46:
d4:e3:94:b0:01:8a:ab:f8:53:f2:9d:97:d2:1f:f7:e3:0a:eb:
d8:2c:a0:6e:83:02:bc:1a:8e:05:a4:39:d5:1d:86:08:16:54:
e2:6a:b9:52:a0:48:3d:87:35:ba:98:d8:61:81:8b:a8:49:9f:
bc:cb:d1:64:17:d8:c1:1b:21:e1:06:c7:86:5a:f3:64:98:68:
70:a8:28:18:52:60:cb:33:19:a1:87:44:89:51:50:46:56:69:
08:2d:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:16:49 2025 by rpki-client