Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/cbS57UNYw1boIeDJuzFnwfjT0T4.roa
File: cbS57UNYw1boIeDJuzFnwfjT0T4.roa (raw, json)
Hash identifier: JexSdWQViU4IL/JE3pRspbU66xYjaJZuBBB9FPUpCBY=
Subject key identifier: 71:B4:B9:ED:43:58:C3:56:E8:21:E0:C9:BB:31:67:C1:F8:D3:D1:3E
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 018571B9E71DCFC11A6DC8846DA1F380009E
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/cbS57UNYw1boIeDJuzFnwfjT0T4.roa
Signing time: Mon 02 Jan 2023 09:04:46 +0000
ROA not before: Mon 02 Jan 2023 09:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199520
IP address blocks: 91.226.40.0/23 maxlen: 24
91.224.246.0/23 maxlen: 24
2a0c:9e80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:e7:1d:cf:c1:1a:6d:c8:84:6d:a1:f3:80:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jan 2 09:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71b4b9ed4358c356e821e0c9bb3167c1f8d3d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:09:65:8f:5d:86:36:5e:76:8b:2e:3d:ab:
cc:24:71:11:63:3b:a9:f7:f4:c7:cd:48:74:6a:08:
f2:ce:0c:8e:b4:b5:5e:3c:fa:f4:49:50:ab:23:ca:
0c:3d:bc:79:ce:2f:11:19:5f:20:18:30:4f:0c:c6:
cf:55:71:61:ef:a0:bb:9a:85:e8:66:41:c7:7d:72:
ab:07:cf:b3:2a:61:22:3c:eb:5d:fe:83:39:26:10:
e5:3d:84:c3:85:a1:8f:6e:32:10:94:c4:7b:bd:93:
4d:06:14:5e:cc:b1:33:cc:1e:aa:b3:35:c3:5b:de:
67:5f:8d:65:2d:65:84:d6:a5:a4:4f:fc:0d:50:b8:
24:86:73:82:0f:6b:2d:4e:b7:bd:cf:61:73:71:fe:
b1:3e:81:8b:7b:de:2e:7b:fa:d8:36:4f:f9:13:43:
78:c1:29:47:34:48:9e:c6:32:24:a7:22:97:b2:74:
af:51:64:d7:61:98:a8:96:5a:ac:db:60:c1:65:d4:
5d:08:54:17:ad:9c:2c:4a:48:19:b6:c9:8e:ad:fb:
a8:fd:b9:26:ad:fc:b4:d6:a7:11:8a:a8:2b:b9:0e:
03:8c:ef:24:f3:aa:65:9e:e5:ed:e4:c2:45:6d:4f:
0b:0c:17:e7:0d:f2:05:db:31:b9:cb:ef:ad:f7:77:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:B9:ED:43:58:C3:56:E8:21:E0:C9:BB:31:67:C1:F8:D3:D1:3E
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/cbS57UNYw1boIeDJuzFnwfjT0T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.246.0/23
91.226.40.0/23
IPv6:
2a0c:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
3b:43:8b:ea:cf:74:e7:45:7b:df:37:72:69:c8:ae:1c:c3:55:
81:10:ca:95:0b:44:fc:6b:32:2e:ad:20:12:ec:45:d8:5d:15:
ba:f0:85:06:70:86:3d:f1:9a:d6:23:65:34:09:b0:df:f1:5e:
70:92:29:7c:d1:1d:9b:ec:36:93:00:5f:3e:42:b6:68:d5:5c:
6c:3c:06:a1:b1:24:01:f7:f9:c3:8a:f7:c3:3a:90:78:09:38:
b8:3a:77:75:4f:67:ab:0e:db:91:1e:a3:55:59:76:18:ad:31:
e8:e0:27:73:2a:dc:08:08:89:c8:75:10:13:72:3d:f1:0a:57:
c1:25:25:93:37:55:c8:a8:9f:f3:14:12:1a:ee:c9:6a:f6:49:
2e:9b:de:b3:8d:a2:16:5c:48:3d:72:40:03:77:ec:91:10:c3:
b9:96:58:17:86:ff:97:93:92:b5:c4:f9:2a:36:8f:7f:99:1e:
16:21:de:1a:d1:dc:13:ca:fe:b3:de:3e:c5:5b:79:9c:57:1a:
69:22:8d:21:fc:4b:9e:4c:a1:ec:b1:37:90:61:38:ad:1c:22:
0e:16:ef:55:02:2e:2a:7a:98:56:98:87:f1:f1:e3:f2:2c:8a:
d5:78:33:fd:8d:f0:03:15:ab:73:ed:a1:99:5a:4d:d1:f0:e1:
72:fb:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:39:12 2025 by rpki-client