Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NFpKgq_dMuluag_B4btDuDlzUHk.roa
File: NFpKgq_dMuluag_B4btDuDlzUHk.roa (raw, json)
Hash identifier: fTfgPLWDv9pMfWT7BfLbjFNY6QG920chMeeeEOTdcdQ=
Subject key identifier: 34:5A:4A:82:AF:DD:32:E9:6E:6A:0F:C1:E1:BB:43:B8:39:73:50:79
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 05856F4E
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NFpKgq_dMuluag_B4btDuDlzUHk.roa
Signing time: Sat 01 Jan 2022 06:05:43 +0000
ROA not before: Sat 01 Jan 2022 06:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199520
IP address blocks: 91.226.40.0/23 maxlen: 24
91.224.246.0/23 maxlen: 24
2a0c:9e80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92630862 (0x5856f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jan 1 06:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=345a4a82afdd32e96e6a0fc1e1bb43b839735079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:45:99:79:c2:a4:0f:e4:81:ea:fd:aa:42:
eb:a5:d5:27:55:2f:16:a4:61:27:ed:f4:28:93:2a:
ef:c1:d3:97:40:b6:48:e2:71:4b:fc:67:b6:de:50:
cf:84:0b:b7:fc:ac:84:9d:18:51:88:29:b6:b9:35:
52:ab:43:85:78:4a:f4:3e:0e:c1:ed:47:42:16:91:
e1:1b:4f:c7:bf:ab:2b:e7:33:2e:21:db:27:3b:8f:
e7:70:40:3a:19:d5:a4:22:ff:b1:0d:cf:45:e1:2a:
82:4b:0c:ef:03:31:cb:7f:8d:bd:9d:90:22:19:b3:
0b:4c:d3:16:95:95:c3:07:6f:99:9f:ae:b2:4c:8b:
7d:ef:b4:84:22:8e:62:5f:06:fc:e8:5e:39:f5:56:
cc:b4:1c:b3:28:2c:e2:eb:95:06:b7:de:1a:e6:fa:
a3:9f:54:1e:98:58:e9:71:0f:2f:c7:d2:9d:95:d6:
0e:ad:ef:40:33:90:90:0b:40:80:43:0e:23:03:c3:
75:4e:97:a2:30:47:8a:12:91:47:07:06:9e:36:0c:
ae:1b:e2:6a:37:54:4b:f0:28:31:fd:ce:00:fe:49:
58:14:5f:99:4f:7e:34:c4:0c:6a:16:68:6a:ac:ef:
96:6c:b5:0f:17:61:52:00:87:20:93:82:80:7c:f8:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:4A:82:AF:DD:32:E9:6E:6A:0F:C1:E1:BB:43:B8:39:73:50:79
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/NFpKgq_dMuluag_B4btDuDlzUHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.246.0/23
91.226.40.0/23
IPv6:
2a0c:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
7f:51:5b:3f:3c:cb:5d:b6:f6:da:cb:97:db:dc:a7:48:a2:3c:
c1:0a:86:0e:6a:cc:7d:00:40:b7:16:c9:61:eb:c6:ee:22:98:
0d:51:9f:88:6e:aa:d2:77:73:09:98:88:20:61:49:4b:65:d5:
20:f6:e6:1a:3d:3e:fb:bb:7e:b3:a6:49:42:68:0f:04:17:51:
62:aa:09:68:6b:0f:03:4e:69:d9:b9:08:e1:c8:16:c3:ca:89:
c7:53:02:87:ba:f6:28:90:22:c2:31:ea:da:4a:14:51:f6:2e:
ea:09:62:64:4b:09:89:d0:8d:81:be:ba:2a:50:4e:c6:37:3d:
ef:6b:27:f9:ec:a0:7c:5b:6d:0a:e2:61:fe:3c:20:6d:47:02:
ea:7e:2e:63:79:2f:b4:c3:e7:15:43:ed:a2:ca:9a:b5:64:99:
2b:0e:df:0d:92:7d:66:d0:4b:99:ad:c7:9b:a2:30:bf:73:a6:
3a:31:00:0b:e3:dc:89:62:f1:33:2b:8a:7d:92:ff:49:c6:66:
40:6f:0f:ea:c1:fd:ab:55:fc:a2:db:57:7c:4d:4f:cb:b9:00:
2e:0a:d0:96:ff:91:e9:2a:33:ad:1a:43:87:d8:4d:ae:0e:b6:
97:9e:03:6d:ea:a7:59:21:07:61:70:16:37:5d:c0:be:de:25:
7d:27:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:48:36 2025 by rpki-client