Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/cHhQNqiVTDqQ3b-f0bNS7rtO79A.roa
File: cHhQNqiVTDqQ3b-f0bNS7rtO79A.roa (raw, json)
Hash identifier: KGXQTidkZVs/1UtEFGNINi/U0UcsgQQUbXK4pdnPf/I=
Subject key identifier: 70:78:50:36:A8:95:4C:3A:90:DD:BF:9F:D1:B3:52:EE:BB:4E:EF:D0
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 014361D0
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/cHhQNqiVTDqQ3b-f0bNS7rtO79A.roa
Signing time: Sat 01 Jan 2022 13:01:47 +0000
ROA not before: Sat 01 Jan 2022 13:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197635
IP address blocks: 91.223.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21193168 (0x14361d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Jan 1 13:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70785036a8954c3a90ddbf9fd1b352eebb4eefd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:c2:d9:55:62:69:cb:02:2c:5d:eb:a4:a9:
d2:bf:3e:c0:2b:a1:db:42:ea:cf:0e:a5:0c:45:46:
ea:40:99:27:70:b5:c1:05:a6:e8:78:77:96:be:9d:
ce:e8:44:2e:f5:2f:75:22:0c:07:f5:1f:17:df:a6:
8a:e3:bb:23:c2:eb:6c:e7:a0:d6:ec:7a:f9:c7:76:
e4:69:49:af:c6:43:da:94:bc:74:26:b8:68:a6:42:
63:d6:6e:d8:0a:c0:fd:1d:51:c9:d6:2e:bd:49:2c:
ad:ee:01:29:1a:2d:49:a1:df:c7:84:dd:fb:0b:ba:
6e:f5:66:11:1f:79:1a:7e:d2:66:d8:14:aa:d1:d7:
bd:2c:5c:eb:27:58:9c:47:82:8d:65:8f:d5:ff:aa:
e5:fa:38:e2:31:7c:3f:04:72:3f:53:da:c0:56:b3:
99:3f:3d:8a:2a:b6:df:48:ae:81:a8:09:9b:fc:0d:
4f:39:36:2e:3a:2a:0f:ff:eb:1e:f3:0c:95:25:c4:
96:46:c1:45:d8:d2:81:20:05:73:37:79:ac:95:8d:
98:55:f0:5d:da:04:e8:0a:11:2a:dc:21:ed:9e:9f:
ac:d5:18:1b:a4:d4:a5:2d:e5:56:45:e0:db:a0:9f:
2b:42:04:dd:73:f8:be:6d:fe:0c:11:ee:58:3a:34:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:50:36:A8:95:4C:3A:90:DD:BF:9F:D1:B3:52:EE:BB:4E:EF:D0
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/cHhQNqiVTDqQ3b-f0bNS7rtO79A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.197.0/24
Signature Algorithm: sha256WithRSAEncryption
77:63:1b:4e:73:81:fd:53:ea:d4:86:9c:5f:a8:a6:5b:88:42:
27:90:2d:ab:2e:3c:0b:33:64:70:91:cb:b9:71:44:c7:b5:5d:
f6:e3:80:86:76:51:74:38:bb:29:81:84:82:02:e7:19:ab:a8:
78:af:73:dd:7f:96:0d:cf:eb:39:9a:01:69:24:ce:d0:94:32:
0f:88:cf:27:09:98:26:c0:a2:a9:9e:c8:ea:c6:ba:d1:96:fb:
33:48:9a:ac:9b:24:15:b3:65:43:20:d5:fd:bb:28:bf:bd:dc:
ef:34:92:b4:51:57:25:ff:db:62:5c:a2:48:76:c9:9d:96:9e:
31:5d:3a:43:38:44:bc:93:bb:08:2b:e5:08:d5:18:c9:5e:68:
91:5c:9a:7e:ee:ce:22:51:0d:a6:18:0c:7c:a7:e5:18:40:77:
95:ad:ab:e6:59:a4:2e:9b:43:27:4c:0c:68:b5:4e:69:7b:ea:
48:bf:b2:90:86:07:7b:d9:63:70:d7:b6:c9:82:25:4d:0a:50:
90:e0:ac:dd:20:d4:18:47:b8:92:4f:99:69:bf:ea:c6:f6:b3:
5f:e4:e9:12:e2:58:4e:b9:7b:b8:5f:61:38:f7:62:a1:47:8b:
af:6e:db:84:28:a6:8e:6a:19:45:f0:aa:f5:de:16:b0:83:62:
13:10:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:42:57 2025 by rpki-client