Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa
File: 8JunAtGNoluxikoiALKEUZR8rFQ.roa (raw, json)
Hash identifier: g5w1jGUxKpVx+fCdoQWWGpzhXvMrPovNOeK6lL3stXQ=
Subject key identifier: F0:9B:A7:02:D1:8D:A2:5B:B1:8A:4A:22:00:B2:84:51:94:7C:AC:54
Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial: 018572D5BDFB29765419E951853B5049DD0D
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa
Signing time: Mon 02 Jan 2023 14:14:48 +0000
ROA not before: Mon 02 Jan 2023 14:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44352
IP address blocks: 91.241.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bd:fb:29:76:54:19:e9:51:85:3b:50:49:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Validity
Not Before: Jan 2 14:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09ba702d18da25bb18a4a2200b28451947cac54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:0d:97:5e:27:63:49:0e:65:ef:e3:7a:52:
bf:8b:16:43:06:11:90:35:87:2c:9e:07:08:b5:ce:
d2:bf:6e:89:1a:9b:03:30:e7:f0:5f:fb:ed:19:c7:
80:26:36:a3:a3:14:3b:b7:be:09:79:5d:83:8f:5a:
24:ab:3c:12:89:bd:05:bc:6b:17:b0:56:31:60:d3:
cd:d1:b2:e4:ec:44:45:6b:b0:17:06:ea:36:c7:a4:
6a:fb:15:f2:61:f9:ef:b5:f2:41:50:c5:51:cb:65:
0f:63:16:0b:a6:96:3d:6c:82:2d:ae:47:2f:4b:fa:
fc:e0:33:6d:d5:56:47:cd:67:5f:53:19:38:e1:40:
eb:28:34:43:bf:1d:7b:6b:94:29:3a:26:59:c7:22:
0a:b4:ab:2a:d5:b3:75:6d:e2:cb:17:b3:5e:81:aa:
fa:e0:67:1f:bf:ce:35:4d:76:77:4d:69:6d:b6:1b:
d0:a8:8f:d2:09:97:7e:0a:33:94:6f:a1:6f:6e:64:
73:ee:60:0f:83:99:db:b8:23:8d:ed:40:af:eb:cf:
9f:25:d2:75:29:f3:70:51:9f:04:86:92:0a:38:74:
93:07:59:6e:cc:ec:c0:e0:97:56:d7:cb:85:81:b1:
d6:6d:60:50:8f:66:b5:95:d2:6a:6b:ee:0c:13:32:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:A7:02:D1:8D:A2:5B:B1:8A:4A:22:00:B2:84:51:94:7C:AC:54
X509v3 Authority Key Identifier:
keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.176.0/22
Signature Algorithm: sha256WithRSAEncryption
e9:48:e7:70:f4:d4:dd:cd:0a:3d:7a:90:7b:28:15:11:d8:df:
35:df:82:da:ee:01:0e:65:c4:45:00:c8:b6:ba:b3:48:37:32:
8f:45:11:cc:be:42:d1:e8:93:b6:33:25:6d:47:40:12:db:95:
8c:12:0e:cc:4e:68:04:21:59:b6:22:06:fa:7b:c6:e6:6a:b8:
7e:aa:55:b4:3b:ae:60:27:28:80:86:9d:20:0a:a8:0f:44:ea:
0a:d6:30:dd:f9:4a:3a:ba:f7:23:ec:af:20:a9:c3:09:e4:42:
9d:bd:3b:d5:44:4e:2c:bb:bf:56:ec:fe:fb:0f:37:6b:10:84:
87:e1:e5:f5:d8:e6:a5:ee:9f:1c:ff:02:78:2f:db:ef:25:62:
59:97:b7:de:da:1a:52:33:01:d9:f3:25:99:63:d0:70:ba:3e:
59:53:ca:71:23:6c:6e:27:0d:03:91:07:44:67:07:b4:39:4a:
d6:f0:5f:02:d0:ef:e8:4f:66:b3:7a:c6:79:1d:b2:9f:39:51:
e2:1c:80:89:97:11:e4:4e:7a:9e:b1:94:c2:82:f1:24:d2:b1:
c6:47:8b:b8:61:38:d6:ff:3a:91:4c:64:b7:f7:20:85:37:61:
fe:64:c8:ce:7c:50:c2:0c:fa:a1:8a:d6:78:49:05:82:81:b5:
f4:e6:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:21 2025 by rpki-client