Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/doBvCqK7bRgcMO9Kk5KwoGq7N34.roa
File: doBvCqK7bRgcMO9Kk5KwoGq7N34.roa (raw, json)
Hash identifier: lx7aAdtZfTwg0wy1UDzScTUa8OBD0NSSbePZlmzhIMo=
Subject key identifier: 76:80:6F:0A:A2:BB:6D:18:1C:30:EF:4A:93:92:B0:A0:6A:BB:37:7E
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0184F115B05E94506CFCF88FB826B29BEE69
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/doBvCqK7bRgcMO9Kk5KwoGq7N34.roa
Signing time: Thu 08 Dec 2022 09:34:01 +0000
ROA not before: Thu 08 Dec 2022 09:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203877
IP address blocks: 91.148.118.0/24 maxlen: 24
91.148.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:15:b0:5e:94:50:6c:fc:f8:8f:b8:26:b2:9b:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Dec 8 09:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76806f0aa2bb6d181c30ef4a9392b0a06abb377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:9c:70:d4:38:ee:69:5d:ed:19:31:e4:1c:
13:be:37:a8:56:e4:28:e0:71:94:cd:46:f8:6d:17:
33:e5:fc:c6:ff:4e:fa:e8:95:50:6a:98:7a:01:79:
b7:1b:0b:ad:4e:cb:df:15:61:c0:c5:6a:32:ca:24:
f8:95:f7:52:ea:37:1c:80:46:b3:23:5f:13:17:50:
ab:51:e6:1e:7b:df:b2:3e:18:c5:4a:4b:da:ee:e3:
9b:cc:00:2e:d1:cf:e9:e7:5a:fc:b0:75:22:b5:cc:
3d:29:1d:d9:e8:d7:af:f0:59:60:36:ad:59:53:f9:
dd:32:d6:78:3d:92:6d:0f:78:54:55:61:2c:b8:4c:
71:1d:48:ba:ef:99:b2:a8:04:ab:bb:dd:9d:51:28:
cd:6f:01:f0:57:5e:9d:96:00:b5:51:af:6c:28:b0:
fd:b0:c5:3f:82:2a:ef:8f:b6:47:ba:5c:79:14:fa:
ce:70:f8:11:ed:78:dd:cf:b7:ab:fc:9b:87:b7:bb:
80:e1:65:0c:6a:3e:7c:28:92:a1:46:b8:f2:b6:4b:
6b:3d:9e:ce:2d:3d:0e:55:c1:d5:ac:30:a3:1c:69:
d2:17:df:ce:c1:7b:80:b3:be:ce:ad:6f:10:95:f8:
9a:5e:94:70:68:61:99:df:ef:a7:8b:14:ea:03:bc:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:6F:0A:A2:BB:6D:18:1C:30:EF:4A:93:92:B0:A0:6A:BB:37:7E
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/doBvCqK7bRgcMO9Kk5KwoGq7N34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.118.0/24
91.148.125.0/24
Signature Algorithm: sha256WithRSAEncryption
08:51:27:6c:1e:16:30:50:37:de:ff:e7:52:63:10:36:3b:48:
e8:9b:2a:dd:45:e1:48:84:55:fa:0c:66:63:4b:59:02:28:0c:
1b:bb:77:d8:15:4b:54:3a:dc:48:96:f4:36:11:85:7a:c5:9f:
f8:a0:61:d9:72:47:13:1c:b1:f4:9d:6a:8d:73:2c:80:ac:51:
0e:8d:51:f0:2c:28:0b:d8:ee:1f:ee:e4:a4:11:7e:87:83:0e:
04:76:2f:64:a9:bc:65:b9:33:12:35:75:33:3b:ca:de:fc:21:
43:64:15:72:3b:43:ec:40:8f:ce:77:08:e4:8e:ac:ff:b4:f6:
c0:e4:84:d6:f6:71:30:43:53:a4:36:40:4f:0b:8d:7e:2d:30:
ff:5b:0b:14:49:5d:14:91:63:06:7f:39:88:a3:26:ed:f8:f5:
a5:22:1e:72:5c:90:02:7a:f6:de:d0:94:f6:0b:82:94:11:36:
29:ab:3c:d7:db:8b:b3:e7:84:01:df:6e:6f:91:41:5b:f4:7f:
48:3d:41:b9:32:05:1e:05:e0:ce:f4:23:ca:b2:0f:71:a7:5c:
6e:1f:6c:f0:f5:7e:56:f6:82:cd:e1:b2:90:c5:b3:87:93:7b:
f1:8a:8f:57:24:3b:db:1c:b8:e3:4a:ef:e7:68:59:3f:ff:7c:
b7:d1:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:54 2025 by rpki-client