Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/wwi-Uk-Alp16yP7bEhELbpod5ZA.roa
File: wwi-Uk-Alp16yP7bEhELbpod5ZA.roa (raw, json)
Hash identifier: q4msCp97gCDF7ec+DfkbA/zmZCTebXuDT2TsUDAELQI=
Subject key identifier: C3:08:BE:52:4F:80:96:9D:7A:C8:FE:DB:12:11:0B:6E:9A:1D:E5:90
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0188A0BD79EF529710D77163676C9AF05211
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/wwi-Uk-Alp16yP7bEhELbpod5ZA.roa
Signing time: Fri 09 Jun 2023 15:19:12 +0000
ROA not before: Fri 09 Jun 2023 15:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 91.245.91.0/24 maxlen: 24
176.103.121.0/24 maxlen: 24
64.43.72.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:bd:79:ef:52:97:10:d7:71:63:67:6c:9a:f0:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 9 15:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c308be524f80969d7ac8fedb12110b6e9a1de590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:48:78:07:b5:a5:42:a9:d2:a4:2e:9a:21:
7f:3f:fd:9c:c4:ff:48:7a:59:cb:4a:40:26:e2:9e:
65:95:fc:3a:4c:18:9e:02:8e:be:4a:56:fa:e7:b7:
ee:dd:92:6f:05:84:96:0e:8e:4b:23:76:2f:ff:2c:
05:b0:35:1f:a1:01:0d:4d:68:41:2b:03:bb:a8:6f:
77:44:7c:d4:25:02:f9:ad:20:2d:8b:61:10:00:a2:
a3:f0:49:29:a7:e9:db:9b:c9:07:07:73:fa:b0:63:
a5:61:8a:46:7a:b3:c3:ad:e1:ea:3b:11:55:d5:85:
15:bb:34:29:35:24:51:b9:60:26:e1:7a:c2:6b:da:
fd:f2:bc:ce:c2:91:5c:d8:4c:4d:9c:01:b4:46:ef:
97:0a:39:e7:e8:e5:aa:e2:60:08:ea:08:50:3a:80:
1d:42:01:67:fe:d8:b3:09:7c:02:22:d1:5f:c2:d7:
dd:f1:43:8e:79:67:f2:0b:aa:aa:ce:b2:99:48:ff:
04:08:af:b2:fb:3b:75:a2:62:ab:28:56:09:a5:b3:
fb:20:0c:80:d3:c6:69:79:95:67:c4:49:df:e6:f9:
13:57:36:36:2f:9a:7a:73:71:a6:b9:d0:ca:b7:0a:
2e:69:53:19:0b:16:94:e9:86:fe:35:85:be:f3:1d:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:BE:52:4F:80:96:9D:7A:C8:FE:DB:12:11:0B:6E:9A:1D:E5:90
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/wwi-Uk-Alp16yP7bEhELbpod5ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.72.0/24
91.234.120.0/23
91.245.91.0/24
176.103.121.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8e:f2:10:62:c2:94:18:fd:85:51:01:6f:15:67:af:79:20:
02:6a:42:28:10:95:5d:d0:a9:75:4a:39:8f:cf:d1:14:02:d0:
c9:31:fd:2e:1f:d7:2f:b1:a7:89:18:ab:c6:bc:63:b8:b3:92:
c8:07:7a:4d:d5:33:8e:eb:7f:8b:ea:c6:41:52:3d:da:08:b3:
66:f8:cb:7e:bb:c9:eb:fc:3b:ea:ae:af:79:47:1b:7d:5b:ea:
b9:d6:27:93:ce:49:9c:d6:81:a3:fe:f2:9b:b2:c2:db:6c:df:
8e:e0:22:20:9b:9a:d4:1c:06:90:d3:82:b3:52:05:20:82:6b:
27:91:6d:58:e8:4d:16:be:c3:cc:ec:d6:19:f9:c8:27:76:b2:
56:75:c9:b5:fe:62:fb:f6:0f:29:94:4f:1a:4a:ab:96:ad:8f:
c4:46:16:72:32:0e:d8:7a:e1:06:3e:8c:05:90:bf:d2:4d:e3:
0a:70:46:18:a9:cd:97:4d:49:bb:4c:78:67:71:48:37:4f:ab:
98:99:84:78:9d:b6:f6:36:7b:13:f9:a5:8f:d2:20:f8:d9:21:
b1:be:6b:8e:2b:61:d9:9a:e0:4a:8e:a4:ae:fd:11:e0:b7:79:
f3:c9:ea:fa:16:60:6b:7c:25:c8:30:81:e0:62:34:3c:61:6c:
f7:9d:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:19:37 2025 by rpki-client