Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/3-IPzhHGTUgNkX26eAp3Aq3ILVY.roa
File: 3-IPzhHGTUgNkX26eAp3Aq3ILVY.roa (raw, json)
Hash identifier: 6riQFvwVoUZS+DRxCtpiWFXNHdhkT+KO6b/5KEgaqNY=
Subject key identifier: DF:E2:0F:CE:11:C6:4D:48:0D:91:7D:BA:78:0A:77:02:AD:C8:2D:56
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 01856D2F25A9EC7A8B23EB512375B1195C4E
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/3-IPzhHGTUgNkX26eAp3Aq3ILVY.roa
Signing time: Sun 01 Jan 2023 11:54:44 +0000
ROA not before: Sun 01 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47700
IP address blocks: 91.208.107.0/24 maxlen: 24
2001:678:478::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:25:a9:ec:7a:8b:23:eb:51:23:75:b1:19:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Jan 1 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe20fce11c64d480d917dba780a7702adc82d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:86:86:65:79:02:6b:e5:5a:32:e0:fb:1d:
ae:08:34:33:ab:3f:9e:c6:ba:0d:7d:0f:a2:04:d1:
13:91:57:6b:90:d4:26:04:f7:d6:24:57:c3:31:5f:
eb:8e:e1:4c:4a:9c:a4:c3:51:72:ef:35:a6:11:d1:
98:1b:90:01:fb:a9:8c:48:21:c0:95:46:8c:37:0f:
c6:83:ee:ea:73:fc:81:f5:91:dd:dd:0d:c6:9f:88:
5d:d8:2a:30:f2:40:77:d9:03:b4:69:a7:c4:ef:f8:
cd:17:14:6d:2f:50:dd:47:c6:78:a3:46:d6:53:10:
e6:3a:10:33:f8:48:7e:08:7a:22:5d:b9:a7:f8:e7:
62:09:c1:a5:be:b8:e0:86:ec:9b:97:6f:5c:29:31:
34:76:60:7d:7b:b4:a3:1f:7e:f9:ac:17:27:89:4a:
75:e2:f6:0c:d5:e6:86:90:d8:ab:4b:3e:29:27:d0:
f1:d6:9c:01:2b:3a:14:31:cd:84:6a:75:25:97:99:
10:e8:53:df:56:5f:07:88:19:c3:cc:be:e5:0e:09:
e0:13:37:14:a9:8e:1f:a0:51:70:21:a9:f2:c5:f1:
e2:04:38:72:f8:f5:66:eb:af:e7:d1:44:7f:85:aa:
fc:3c:82:4a:28:cd:02:b5:3a:1d:5b:63:ec:aa:85:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:0F:CE:11:C6:4D:48:0D:91:7D:BA:78:0A:77:02:AD:C8:2D:56
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/3-IPzhHGTUgNkX26eAp3Aq3ILVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.107.0/24
IPv6:
2001:678:478::/48
Signature Algorithm: sha256WithRSAEncryption
6b:63:a1:87:62:86:48:d6:8f:2e:d5:50:3e:80:26:1c:a8:e3:
76:65:46:2c:67:63:90:27:83:ce:bd:8e:c6:43:58:4a:42:09:
29:5c:b5:2a:3a:90:aa:11:bc:c3:59:65:1a:2f:7e:2d:26:5e:
9c:e8:32:65:6c:63:f0:cc:cd:76:73:cb:af:2e:9b:de:76:d8:
63:29:0a:ed:7a:9d:4c:6c:81:24:49:0a:74:0f:d7:56:fa:6e:
a6:a0:c5:4f:7d:c2:4c:ae:4e:b2:39:ae:69:b6:1b:79:fd:14:
c6:68:ac:b7:79:2e:0c:db:23:60:ed:49:ba:25:de:49:23:ba:
34:42:f9:94:af:16:30:9d:b8:50:ed:e5:ba:0b:c3:92:76:bf:
fa:ec:fa:29:cb:e9:ff:e7:06:95:1e:ba:71:e6:c3:36:2d:69:
f1:7a:82:61:1a:ad:7e:c3:6a:00:09:45:45:12:80:50:01:c6:
0e:68:2c:6b:14:66:cb:0a:12:51:da:fe:09:44:db:4c:3c:0f:
0f:ff:cd:d5:70:62:cb:a5:24:6a:e0:84:01:3e:a3:62:c8:bd:
eb:e1:03:78:e0:fe:2b:8b:c3:bc:1e:0e:69:3e:f4:3d:16:ba:
fb:e6:40:c5:8d:05:9b:7a:11:14:9e:4a:dd:20:c1:cb:f7:a9:
da:a8:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:30 2025 by rpki-client