Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/jPE8IRezkduC8bHm9zWUBtN_kDc.roa
File: jPE8IRezkduC8bHm9zWUBtN_kDc.roa (raw, json)
Hash identifier: ZJ5oaBWeZvoUHHYSHj9I+9mPgD731m9QRD2o9ApudeI=
Subject key identifier: 8C:F1:3C:21:17:B3:91:DB:82:F1:B1:E6:F7:35:94:06:D3:7F:90:37
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 13B42485
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/jPE8IRezkduC8bHm9zWUBtN_kDc.roa
Signing time: Fri 10 Jun 2022 06:02:13 +0000
ROA not before: Fri 10 Jun 2022 06:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204984
IP address blocks: 91.132.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330572933 (0x13b42485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jun 10 06:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf13c2117b391db82f1b1e6f7359406d37f9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:82:cb:e5:2f:ea:b4:46:e1:57:27:3a:31:
81:c7:43:d0:b0:4b:1a:7b:3b:99:b0:2f:12:cd:15:
26:b5:7f:45:24:34:b4:89:7c:91:06:6e:3f:50:61:
a8:b5:0b:9c:9b:b3:2a:38:b0:84:49:33:dd:97:d8:
d8:fa:6f:c9:e5:a1:ac:5e:5e:c9:90:e6:03:52:46:
02:6c:5e:0b:8c:47:f1:a5:4a:36:35:a2:92:01:bb:
9a:36:6e:9b:6d:8e:69:bc:04:f8:9d:d9:e8:ed:0b:
23:b4:85:21:fb:2b:cf:d3:85:11:47:f4:c2:49:7f:
cd:5e:0c:ac:16:41:00:90:af:78:86:af:97:de:07:
2a:13:79:09:64:1f:87:0b:26:d5:40:dd:12:54:90:
ae:bd:6c:42:e0:da:a3:6b:aa:e7:0e:02:90:1d:ea:
8a:ed:75:33:d8:3c:c5:6e:9a:41:26:77:e8:a6:5e:
85:28:38:36:52:e9:ad:8e:a0:ef:c3:c2:17:90:22:
5f:f0:e1:92:c7:78:33:df:07:d2:cb:80:48:56:ce:
21:4a:21:e1:28:4e:1f:52:71:0d:5b:91:b1:81:2f:
59:ce:c2:69:21:7b:4e:a1:b6:5d:2c:d0:0c:7c:50:
6f:af:9d:17:1a:83:e5:dc:bc:af:0e:f0:21:fb:a5:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:3C:21:17:B3:91:DB:82:F1:B1:E6:F7:35:94:06:D3:7F:90:37
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/jPE8IRezkduC8bHm9zWUBtN_kDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.72.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7e:38:83:32:17:40:a2:66:fd:6a:bd:5c:2c:77:83:87:4f:
90:32:a8:07:23:49:c1:54:4c:3b:cf:2f:37:6a:9f:50:22:11:
cf:a8:9c:e4:19:99:ba:6b:7b:23:d1:c8:9c:e9:35:b7:46:0e:
0b:0c:57:40:d0:1f:17:9b:a6:17:f9:8b:1b:d7:b8:04:86:8a:
8c:b7:12:67:dc:83:55:05:35:e0:72:f3:26:58:76:f8:6b:7c:
fb:09:96:13:58:88:1e:4a:cc:21:cd:7f:b5:c4:f3:7e:16:ef:
90:9b:d1:b2:4f:e7:1b:1d:55:e7:ff:51:45:23:c9:5f:7f:dd:
44:05:6c:fa:47:3d:bc:80:3f:74:06:a7:23:c6:ab:bb:6e:be:
9b:f0:e1:7b:30:ea:d0:c6:8a:49:fc:d1:d4:4e:6f:75:b7:26:
6a:e9:dd:3a:8d:69:0c:d3:02:f0:9d:9f:1a:40:68:96:12:71:
96:71:6e:93:ce:9c:4b:00:11:72:52:1f:af:22:7e:af:46:cd:
0b:59:b5:17:ad:92:b7:c6:7f:b1:35:b1:3d:b8:31:9e:65:f9:
53:e0:4b:7d:52:71:44:b5:b7:88:9d:e8:11:e8:cf:27:3b:8f:
92:0c:23:02:6b:7b:99:c1:62:35:bf:3a:80:14:ca:5d:31:2a:
44:96:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:24 2025 by rpki-client