Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/93qIpneA8T3bpWdAGrh-dIHYxAA.roa
File: 93qIpneA8T3bpWdAGrh-dIHYxAA.roa (raw, json)
Hash identifier: qaKuZq/377XsTVs/z0kRyGtMJHE61F9OjCmhCLnP9PQ=
Subject key identifier: F7:7A:88:A6:77:80:F1:3D:DB:A5:67:40:1A:B8:7E:74:81:D8:C4:00
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01856E8B4E7295B7BB63F59885DEA004F365
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/93qIpneA8T3bpWdAGrh-dIHYxAA.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206825
IP address blocks: 91.198.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4e:72:95:b7:bb:63:f5:98:85:de:a0:04:f3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77a88a67780f13ddba567401ab87e7481d8c400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:32:9e:c4:c7:77:9e:9a:51:5c:7c:d1:fc:
d6:ea:f9:48:10:ec:0f:3a:14:83:a0:ae:42:dc:bd:
aa:45:ec:81:f3:49:cc:d8:ac:44:02:fc:81:e6:76:
be:ca:67:c2:6b:89:ed:1f:0f:19:99:cf:cd:2b:8f:
ff:f9:52:23:a0:b1:12:da:a8:ce:ef:cf:30:fc:13:
b7:68:71:82:b8:2e:c4:c1:3f:e4:49:c4:a1:83:48:
a2:a2:dd:3e:2e:74:95:1e:b3:59:1d:ea:23:e2:68:
45:fa:6c:0b:19:9d:b2:8d:aa:e7:f9:49:14:97:fe:
b0:75:c2:b4:dd:ec:34:8b:05:3e:d1:14:49:e9:8b:
00:ff:b0:de:15:6d:e7:e8:f7:22:89:07:3b:52:0d:
45:33:79:bd:c3:ce:d1:e6:b5:70:57:73:3c:ff:53:
76:6f:58:9c:c3:ee:4d:50:bb:b2:56:5e:52:57:8d:
fa:c7:41:09:be:12:a6:73:d1:8a:26:2f:7b:9e:fd:
60:1a:e1:75:d4:0f:5c:86:ea:74:0e:80:72:34:71:
d4:e9:57:da:5c:a8:83:b0:40:6f:6f:56:07:0f:ff:
ce:99:3b:3d:05:75:68:b3:e8:59:d3:80:f0:ae:73:
72:5a:a4:e1:6a:e6:67:c7:cf:08:99:45:16:2e:17:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:88:A6:77:80:F1:3D:DB:A5:67:40:1A:B8:7E:74:81:D8:C4:00
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/93qIpneA8T3bpWdAGrh-dIHYxAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c1:13:8a:c3:e3:71:77:4c:d9:f6:51:d8:8d:0a:42:4d:aa:
50:e7:09:6c:3a:94:93:1e:ba:31:93:91:bb:34:3e:6f:ae:f3:
7e:a2:ee:67:be:86:3b:d2:5a:48:9c:13:f9:d6:a2:27:68:81:
6f:8c:35:ba:55:70:be:ab:93:87:dd:68:9d:fb:d9:da:99:4c:
9a:10:39:35:13:73:d9:54:68:1d:1a:9d:b7:7c:84:7f:ec:44:
b3:89:72:30:0a:c3:7c:21:ed:dd:be:9f:ae:f7:68:ce:0f:ea:
0a:52:b5:8d:1e:a9:5d:c3:af:ce:86:99:c5:4a:00:2d:92:8b:
45:37:7f:6e:45:d7:c1:c9:a3:17:dd:64:9c:4d:8d:ff:d4:51:
c3:47:c0:b2:97:0f:61:4d:d9:79:58:53:db:0b:d1:f0:44:f6:
99:a5:60:dd:e1:ea:6b:6c:47:ec:ef:dc:c6:f9:17:b1:f0:b1:
d6:bb:ef:2a:b1:1d:be:14:92:f7:6d:e0:2d:fc:d5:bd:80:28:
25:5e:d2:f7:41:f6:70:0f:d3:48:66:90:b3:47:ad:91:07:8c:
62:0f:af:15:23:dd:a8:e9:9a:8b:71:17:ee:4f:68:46:01:bb:
5f:8c:4c:c5:01:b4:33:ff:71:64:5b:15:3a:a6:2e:20:2d:a4:
39:37:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:16 2025 by rpki-client