Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/EVKE4GGb2AngFHLj5zcxM3bv_T8.roa
File: EVKE4GGb2AngFHLj5zcxM3bv_T8.roa (raw, json)
Hash identifier: DI0gVi7YMvT0Zh2cXViaqW9Kq6+z0XnRlHy6+NEIVdQ=
Subject key identifier: 11:52:84:E0:61:9B:D8:09:E0:14:72:E3:E7:37:31:33:76:EF:FD:3F
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 05EBEA9E
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/EVKE4GGb2AngFHLj5zcxM3bv_T8.roa
Signing time: Sat 01 Jan 2022 14:01:41 +0000
ROA not before: Sat 01 Jan 2022 14:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206825
IP address blocks: 91.198.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99347102 (0x5ebea9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jan 1 14:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=115284e0619bd809e01472e3e737313376effd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:2b:55:76:14:bb:3d:63:53:c0:67:bb:19:
02:c7:17:68:c4:59:e2:62:a1:fb:a8:a9:dd:44:e8:
49:3d:3e:7f:f7:cb:fe:07:fb:a0:5b:e3:98:86:ea:
10:0b:99:d0:82:ba:bb:3e:a3:9d:09:a1:41:1a:81:
5a:e9:0e:67:10:91:b8:1a:99:bb:e3:bf:b5:47:5f:
c8:3d:71:ef:51:ab:dc:b0:3d:b8:5b:a3:bc:f6:00:
b0:56:87:33:82:ad:63:af:e6:c1:51:b7:8b:1f:34:
d9:5d:73:3b:41:b0:05:00:e1:dd:e0:31:f8:ec:5c:
8f:d9:85:29:09:df:10:7c:e2:b6:d2:7c:75:4c:8f:
36:5c:ae:f0:2c:99:14:c6:93:ec:a1:4b:c5:98:3d:
ec:c4:7c:51:c2:6b:e5:1e:6e:b2:e4:1d:28:1b:5a:
aa:cc:f3:a0:1c:e0:02:e9:9a:d5:42:2d:29:b4:db:
b7:72:10:a5:74:a7:19:32:b0:ed:a7:49:05:99:d2:
99:5e:d5:24:63:da:56:ef:7f:53:85:62:26:48:27:
d7:6f:33:3a:53:b8:6a:02:a4:21:f9:5a:a2:83:ca:
ff:14:bb:03:5d:a5:29:54:df:83:e9:ba:32:1c:5b:
c8:b1:f0:8b:5b:93:57:0c:9e:83:a6:28:6c:a2:72:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:84:E0:61:9B:D8:09:E0:14:72:E3:E7:37:31:33:76:EF:FD:3F
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/EVKE4GGb2AngFHLj5zcxM3bv_T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.238.0/24
Signature Algorithm: sha256WithRSAEncryption
03:88:86:87:5d:4a:ad:7e:6d:63:f3:b9:ab:95:47:40:1d:01:
d0:dc:f7:5c:04:9f:d0:ed:88:28:5f:61:0f:39:08:46:2b:f2:
26:b3:bc:dc:af:5f:d6:49:4a:ed:27:42:e7:30:6d:98:dd:c9:
16:1c:a5:87:19:d0:a0:fb:56:49:c1:da:36:4d:42:24:ba:63:
e5:4f:1a:f0:a7:16:07:1e:8a:80:ad:42:0c:b6:74:90:26:05:
79:81:ce:36:a2:ed:e1:70:fd:96:88:d8:66:88:d0:36:d1:b8:
d8:4c:1d:08:e6:10:70:3e:1b:75:23:0f:83:53:c6:99:29:20:
d5:29:d8:ec:ee:56:6d:33:e2:39:a4:0f:3f:98:b0:2d:1d:fa:
80:9f:f8:cc:64:4f:39:c0:0d:46:ca:28:69:6f:ea:7e:ca:6e:
79:9b:2a:a6:ae:63:5e:97:36:92:f0:6a:d4:b3:ac:cb:36:3a:
09:87:fe:8f:c3:e6:e7:78:a2:6b:d0:80:4d:27:16:2b:62:4a:
b2:16:e7:da:15:dd:36:9e:df:5a:f7:ca:39:7b:c4:e1:10:38:
e8:b4:09:73:c9:eb:15:99:50:24:c1:64:5a:e2:91:1e:71:00:
a9:91:ad:45:b3:df:1f:7d:e5:06:b8:6b:b8:cd:55:48:c6:36:
0b:1a:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:34:26 2025 by rpki-client