Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Czo4Jih24BuXxiD3hbphjVOH5l4.roa
File: Czo4Jih24BuXxiD3hbphjVOH5l4.roa (raw, json)
Hash identifier: 8jGsI2sYap2GI1A5vyJXlNq4vtiJ+JEVQbfP9UPXos0=
Subject key identifier: 0B:3A:38:26:28:76:E0:1B:97:C6:20:F7:85:BA:61:8D:53:87:E6:5E
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5C27B9FC0FDEEE42CE32D9D68E27C9
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Czo4Jih24BuXxiD3hbphjVOH5l4.roa
Signing time: Sun 06 Aug 2023 19:38:58 +0000
ROA not before: Sun 06 Aug 2023 19:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47133
IP address blocks: 91.108.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5c:27:b9:fc:0f:de:ee:42:ce:32:d9:d6:8e:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3a38262876e01b97c620f785ba618d5387e65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:67:ad:01:23:2c:ca:f5:79:d9:ad:f6:36:
60:65:c3:eb:00:ed:cf:70:61:1b:10:0f:b1:02:0b:
ff:d4:7a:85:81:99:2a:dc:0a:1c:25:bb:ca:16:03:
97:c4:f6:71:1c:de:67:2b:ad:e3:d4:16:bd:e5:c2:
3e:a1:9b:60:35:ff:a4:6c:0d:9f:47:a7:82:eb:c0:
1e:f5:85:a5:35:80:16:e5:76:2a:0a:1f:d4:eb:90:
6b:38:f5:59:c7:db:43:2c:84:33:8b:b5:eb:28:c9:
81:86:f7:7f:d2:9a:e6:28:99:b6:16:c4:c3:a8:31:
5a:42:18:7f:ea:7e:c2:c6:68:85:ef:c6:46:21:d5:
f3:ac:02:0e:57:a8:bf:f0:bf:4a:a2:d1:9f:2b:06:
46:4b:3e:32:df:42:3c:95:6b:0a:36:fb:70:4c:88:
b1:14:e0:7e:95:f2:18:7e:e4:f4:f4:93:a5:ff:e7:
dd:ce:5f:4e:80:5a:05:db:55:c2:7a:12:a5:f8:b8:
e6:a0:b2:5c:d1:89:01:d4:c2:2f:fa:54:10:28:fc:
dc:e2:3e:4f:62:00:c8:2c:55:12:74:41:9b:75:a7:
cc:1d:0c:fd:66:97:06:25:9a:24:6d:87:9f:a5:67:
b4:45:f1:38:b2:9e:40:e2:b9:ab:37:fd:4c:bb:82:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:38:26:28:76:E0:1B:97:C6:20:F7:85:BA:61:8D:53:87:E6:5E
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Czo4Jih24BuXxiD3hbphjVOH5l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:90:81:d9:eb:34:0f:ba:70:57:ee:20:e9:d4:bc:14:d4:1a:
ca:9e:a0:a4:ed:42:86:c5:0f:a2:a1:19:7a:94:0b:89:d6:30:
12:59:ad:8e:0e:58:3b:48:43:69:e4:58:12:09:d2:22:a0:89:
36:11:38:6a:f4:12:38:61:c8:3a:6b:1e:76:1d:15:70:40:72:
65:0e:f6:cf:d4:8f:6b:c0:7d:a2:27:53:bc:a5:f2:81:c1:d9:
6d:42:b9:4e:ff:d5:52:2d:68:bc:ca:4a:89:e0:02:1d:0e:91:
2d:8e:01:ff:fe:07:30:14:d7:0f:e0:60:ed:1d:17:60:22:5e:
b4:4c:d1:f1:3a:3e:36:d0:62:5e:14:83:cd:ae:66:ef:88:0e:
23:0a:1c:dc:68:d1:7a:ca:32:02:bf:1a:b2:81:0c:79:ee:16:
4f:e1:13:79:44:97:14:8e:d8:5e:fa:2b:05:04:d9:c1:64:00:
8e:97:8f:64:09:4c:14:f2:cc:8f:54:39:67:03:4d:19:6e:c1:
fe:3a:48:3d:5a:85:06:c3:51:cf:22:db:70:d0:5e:fd:ca:f2:
b2:76:81:87:4d:d4:79:fc:04:17:29:20:46:dc:ed:07:dc:19:
6b:86:83:c9:ff:cc:ee:50:30:04:dc:c3:cb:00:8b:88:8c:e9:
3e:4f:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:38 2025 by rpki-client