Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/etnSHG78tOzoC45aE6Vevopi18Q.roa
File: etnSHG78tOzoC45aE6Vevopi18Q.roa (raw, json)
Hash identifier: KGgd+gnC1wx6EaFlYOhtZr9tzcNpvsru2ZHa/lf1+xM=
Subject key identifier: 7A:D9:D2:1C:6E:FC:B4:EC:E8:0B:8E:5A:13:A5:5E:BE:8A:62:D7:C4
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 0C7F6D71
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/etnSHG78tOzoC45aE6Vevopi18Q.roa
Signing time: Sat 01 Jan 2022 00:51:27 +0000
ROA not before: Sat 01 Jan 2022 00:51:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204626
IP address blocks: 91.218.152.0/24 maxlen: 24
91.218.152.0/23 maxlen: 23
91.218.153.0/24 maxlen: 24
2001:678:5f4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209677681 (0xc7f6d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Jan 1 00:51:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad9d21c6efcb4ece80b8e5a13a55ebe8a62d7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:8b:c1:15:c6:82:50:b8:75:8d:1c:b8:06:
01:a7:44:aa:c5:77:28:22:fd:85:fd:8a:66:95:a4:
72:3f:bc:51:5b:11:35:e7:53:6f:22:d5:ff:49:7a:
3e:40:8b:75:eb:21:4e:71:db:62:92:45:62:54:06:
ae:31:96:c7:e5:e0:2b:6d:6b:3d:4a:a2:ec:49:91:
c4:b3:b7:b6:9e:07:d8:66:2f:bc:a7:6b:d0:7c:3c:
c1:93:a0:a0:83:f0:1c:28:83:14:1f:45:15:24:fa:
03:2d:77:2d:3b:85:57:fe:cd:9d:9f:01:6c:9b:aa:
ff:96:5f:3a:fa:03:ec:3d:d0:c9:13:28:09:a4:70:
a1:2f:93:38:39:79:d8:f5:2c:b5:70:1d:50:31:e4:
d1:6b:12:23:80:21:de:02:3c:15:4e:a4:3d:76:65:
d5:8e:69:7b:48:fd:38:f8:6b:c8:e4:f0:62:b9:1c:
f6:83:a7:9f:b7:be:de:7f:91:cd:53:e6:f4:b3:2f:
a4:d0:4b:d0:49:5b:a6:19:35:e9:7b:ed:5e:91:9d:
53:00:41:88:be:56:40:d4:be:3c:1c:ca:95:be:5d:
21:3c:30:a4:74:c2:fc:a1:13:67:c3:e2:11:ec:8f:
64:40:06:2c:13:18:01:4d:e5:7e:24:63:8f:91:90:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:D2:1C:6E:FC:B4:EC:E8:0B:8E:5A:13:A5:5E:BE:8A:62:D7:C4
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/etnSHG78tOzoC45aE6Vevopi18Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.152.0/23
IPv6:
2001:678:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
21:89:08:d2:ab:ad:4a:fb:0f:53:98:41:46:b7:2b:b3:93:41:
e9:ba:7b:9e:bf:5b:48:45:70:5e:bd:dc:ac:78:6c:fb:6f:7f:
7a:1b:b7:be:9a:b7:5f:7d:cc:e4:89:83:87:62:c4:82:a2:1b:
77:28:33:fd:17:10:f5:aa:ae:5e:33:7c:bb:dc:80:2f:45:04:
26:db:58:ac:8b:be:70:5a:f8:c5:87:62:7b:43:e0:60:4a:37:
28:70:96:df:23:21:0b:b4:4b:98:08:f8:1d:b9:25:37:34:b0:
2d:ed:80:be:cf:f7:95:0e:4e:e5:cb:98:43:d0:39:c5:0d:7f:
6e:33:cd:84:43:45:f7:71:09:81:5f:82:b0:81:50:dd:fd:e7:
ca:6f:85:67:35:5c:f8:e3:f0:99:dc:9c:27:44:6d:81:c8:97:
52:fc:1b:4b:37:8e:ec:c5:34:f8:f5:ad:64:57:6d:7a:b3:1b:
43:82:13:59:d8:49:66:87:6b:e0:65:e2:42:03:97:8a:21:0f:
c2:1b:3f:80:a8:88:12:32:f5:9a:a9:b3:bf:56:a2:6f:72:2a:
ae:90:92:62:8e:5c:7c:4e:36:0f:04:db:80:fb:23:6c:b7:0c:
27:ba:b5:93:ee:5c:f4:ce:b3:5c:2f:aa:33:f6:84:93:d7:9c:
18:bb:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:00 2025 by rpki-client