Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/t6v-RA9RCKdy0MAcV2AAGf-pk68.roa
File: t6v-RA9RCKdy0MAcV2AAGf-pk68.roa (raw, json)
Hash identifier: L7qOEWFTIDzkWLzSawbXNpXs9ePekPy8RUjIwaxUrxE=
Subject key identifier: B7:AB:FE:44:0F:51:08:A7:72:D0:C0:1C:57:60:00:19:FF:A9:93:AF
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01856D663BB4EA46DEF5B903C5E00EE2736F
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/t6v-RA9RCKdy0MAcV2AAGf-pk68.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205019
IP address blocks: 91.103.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3b:b4:ea:46:de:f5:b9:03:c5:e0:0e:e2:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7abfe440f5108a772d0c01c57600019ffa993af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:0e:20:4d:00:20:9c:82:fc:4a:4c:cc:7b:
85:91:2e:1b:16:15:02:ac:cf:c5:9e:b6:62:58:2b:
97:16:24:f5:56:29:83:4a:76:82:e4:91:3f:26:b3:
2f:47:59:62:fc:fb:ee:59:26:65:76:0d:01:e1:30:
f3:ca:b1:c8:29:13:1c:aa:48:bd:5c:fa:ff:3f:39:
b0:5c:dc:e1:0a:28:f1:28:8a:17:9a:92:d3:55:f7:
7a:00:f5:ae:0e:a1:81:61:78:5d:18:27:d5:05:eb:
2f:07:bb:cd:7b:85:4b:51:7b:8b:f5:42:a6:55:b9:
3c:4e:69:be:96:66:b6:05:a9:01:94:f4:cb:22:d5:
58:97:44:13:61:ea:06:0f:f7:3a:b3:45:12:c3:72:
53:2a:6d:57:cf:29:8e:da:50:a1:4c:b8:5d:fa:a3:
b6:e2:9a:0b:be:44:09:65:03:d0:6c:fc:49:be:c3:
39:cf:3a:d0:fa:f4:fd:2d:c3:e4:a5:ed:21:eb:c5:
86:31:8b:e5:0e:bf:b3:a5:64:c4:c9:a0:42:b9:ae:
72:9b:3c:a6:7c:dc:b3:0c:26:7b:a5:ac:13:97:ae:
2a:72:55:24:b1:2b:6c:01:58:92:e8:55:71:71:59:
38:53:4c:82:47:5b:a1:69:be:d6:fc:27:dd:2c:78:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:FE:44:0F:51:08:A7:72:D0:C0:1C:57:60:00:19:FF:A9:93:AF
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/t6v-RA9RCKdy0MAcV2AAGf-pk68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.82.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e7:70:72:0f:2f:d5:03:ab:4a:e5:28:12:fa:1e:81:dd:b4:
a3:bd:2c:ae:29:b4:55:5a:72:7e:ce:80:ee:d0:d4:39:a4:b1:
0c:73:3e:4b:2b:77:1f:86:68:23:9d:bb:b3:63:ae:97:12:42:
d7:32:5e:c5:5a:a9:2c:89:4b:42:99:73:1d:c1:7d:ee:da:ca:
c2:44:db:ba:83:9e:7c:f6:d8:2d:d5:39:b1:15:01:9a:2f:e3:
d2:c8:48:fc:b0:4d:4f:9f:3f:8b:b2:4a:53:b4:7d:94:8d:45:
77:21:77:ae:f4:e3:76:b7:29:96:72:37:29:1b:2d:89:11:53:
10:c4:cd:54:a1:7d:d1:fe:9d:1c:9b:9c:71:aa:44:d6:56:6a:
40:b5:81:71:5f:c8:7d:05:57:04:b3:8c:17:30:eb:d8:48:8d:
ba:d5:2c:61:e9:86:82:66:71:07:4c:f2:5b:ff:e1:49:29:8e:
ea:a2:09:a6:8b:85:99:10:16:42:35:a3:d7:c6:3a:c3:3d:43:
d8:9d:27:ed:85:f7:41:b2:56:ca:d0:96:c7:f6:a3:52:5c:5f:
ac:f9:f2:14:1a:5a:67:da:6c:74:be:ee:b1:d9:37:f5:00:50:
7f:38:0c:8a:ce:99:e6:44:c2:9b:18:8f:5a:13:6d:11:d4:fe:
a4:d1:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:31 2025 by rpki-client