Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/L92Qb-g5ITpfobirLCWELPG5O34.roa
File: L92Qb-g5ITpfobirLCWELPG5O34.roa (raw, json)
Hash identifier: mvMa2Fy5cvj2XG+ShXDZLkxNKzCBDCNVEyoCjbd6dyU=
Subject key identifier: 2F:DD:90:6F:E8:39:21:3A:5F:A1:B8:AB:2C:25:84:2C:F1:B9:3B:7E
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 06B251D8
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/L92Qb-g5ITpfobirLCWELPG5O34.roa
Signing time: Sat 01 Jan 2022 15:00:37 +0000
ROA not before: Sat 01 Jan 2022 15:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.82.0/24 maxlen: 24
91.103.81.0/24 maxlen: 24
91.103.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112349656 (0x6b251d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 15:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fdd906fe839213a5fa1b8ab2c25842cf1b93b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:f4:14:a2:27:33:db:c9:14:f8:17:f0:81:
8f:36:cb:3e:f4:de:f3:bc:b9:ec:f9:78:75:f8:8f:
1b:0f:e8:4b:de:18:a6:62:f2:d7:a5:89:2e:da:6b:
1c:82:62:6d:d2:e5:1e:b3:79:e9:13:3a:13:23:cc:
da:25:61:5b:08:4a:0e:9f:d7:32:f4:ec:44:6e:f9:
f4:d4:3b:50:62:67:26:54:2e:35:3c:1d:4e:8f:a7:
d2:60:dc:5b:bc:13:89:40:c9:4f:b6:b7:94:26:f0:
a8:6c:49:5b:fa:0e:75:52:b3:f1:36:dc:9c:4f:10:
03:28:ec:a7:b6:b2:ee:e0:24:64:7b:86:5f:3d:31:
be:df:0f:b1:e6:aa:17:10:5b:41:fd:1f:9d:7a:dd:
0c:3a:d4:65:f7:8a:77:7d:b9:01:97:a0:3a:b0:38:
a5:be:cf:7d:13:c2:f0:70:70:1e:ea:d3:14:f9:6b:
e7:51:c1:14:70:29:c5:35:98:1c:fe:b4:4f:6a:66:
c5:57:f8:8a:29:37:4a:08:30:11:09:d8:30:a6:28:
cf:71:a8:de:a6:f3:23:bc:9a:87:be:28:5c:9d:dd:
3d:1f:cd:b4:3f:90:fc:12:d7:c3:23:1f:69:e2:26:
18:d1:1b:46:88:bf:e4:c8:c0:de:c9:f4:5b:42:ee:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:90:6F:E8:39:21:3A:5F:A1:B8:AB:2C:25:84:2C:F1:B9:3B:7E
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/L92Qb-g5ITpfobirLCWELPG5O34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0-91.103.82.255
Signature Algorithm: sha256WithRSAEncryption
28:83:67:f5:bb:fb:22:5e:41:95:17:82:de:63:c3:7b:aa:23:
a0:b0:de:c4:0e:ad:58:64:0b:a1:70:78:d8:a3:e3:54:03:ce:
6b:32:9b:cc:c8:03:b0:12:eb:e8:ee:59:0d:cf:1c:7a:3f:24:
e0:be:4d:5a:e7:32:0d:47:6b:e1:bf:91:7f:27:7f:15:3d:16:
8f:7e:9c:02:25:f4:b2:06:a0:82:b3:13:f0:f6:d7:6f:f6:f6:
8b:52:87:6c:8f:3a:3b:13:21:5c:4b:95:5e:01:5f:46:5d:20:
dc:79:37:11:be:09:17:ad:e7:9a:33:7d:c7:89:b5:ba:80:28:
69:a6:78:c8:a1:25:77:c5:e2:9f:6f:cb:03:30:b4:0c:e5:12:
66:b0:d9:fc:d1:ab:19:e6:32:c7:80:e8:78:e3:85:f5:e1:7d:
59:46:e5:47:53:4f:50:37:e6:75:ca:04:1a:d8:fc:b1:03:5f:
51:7d:a9:46:8b:6b:da:1d:04:fc:1c:64:df:5b:c4:e8:cb:3a:
bf:e3:e3:1c:d2:74:2c:08:23:37:62:de:b0:7e:42:23:3b:11:
89:84:ab:c4:39:2b:ad:e9:a0:58:98:34:bf:af:d0:56:c0:01:
f9:ec:61:95:47:37:7f:9c:5d:5b:49:88:21:86:c8:ea:f5:e8:
79:e4:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:31 2025 by rpki-client