Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/xrttQwzV1_bHTFyEx5blxlZ-Ujw.roa
File: xrttQwzV1_bHTFyEx5blxlZ-Ujw.roa (raw, json)
Hash identifier: DcwEpr73Vya1JJiS5O/EBROyJwWDu7o2XHduBhSfxIw=
Subject key identifier: C6:BB:6D:43:0C:D5:D7:F6:C7:4C:5C:84:C7:96:E5:C6:56:7E:52:3C
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 018571FA0FDC4FB1E9FB7BBC3E432F5DDA53
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/xrttQwzV1_bHTFyEx5blxlZ-Ujw.roa
Signing time: Mon 02 Jan 2023 10:14:51 +0000
ROA not before: Mon 02 Jan 2023 10:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199015
IP address blocks: 91.217.54.0/23 maxlen: 24
195.20.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:0f:dc:4f:b1:e9:fb:7b:bc:3e:43:2f:5d:da:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Jan 2 10:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6bb6d430cd5d7f6c74c5c84c796e5c6567e523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:69:d3:3b:bc:9e:0f:a2:3e:9b:21:69:a4:
a2:2b:90:06:ad:bd:52:9c:a9:e1:59:95:9f:73:e1:
41:f4:a6:ab:85:d2:17:62:69:94:c1:51:d6:ea:b8:
9e:6a:dc:0c:16:f4:eb:d5:f3:bd:76:4b:6f:1a:55:
b7:f4:22:70:fd:7f:38:77:87:c7:e0:10:7c:51:4e:
99:59:5f:b4:f3:c0:45:ce:e6:8e:5d:2f:e7:67:cc:
10:1d:cd:c1:39:8c:37:eb:d5:77:a2:cb:6c:81:d6:
87:c6:33:6f:da:f7:3a:bd:4e:33:33:7d:4c:3b:13:
b8:73:72:9b:c9:fe:cb:c4:7f:1e:68:ae:d7:a9:e1:
17:7e:6e:42:43:1d:d2:13:dd:f0:b0:cd:66:e1:3b:
e1:72:74:cf:ed:b6:ff:cd:83:bd:55:01:a9:d0:89:
f6:38:6a:5d:70:01:17:71:22:55:c8:e7:23:4e:9d:
24:e8:6b:d7:ba:04:f5:b9:12:30:1b:e2:3f:3a:fd:
7b:c2:78:a6:b9:93:19:be:6d:40:5f:08:61:f5:f6:
e8:0d:9e:4d:ad:4d:99:19:b0:c4:d8:71:d3:30:76:
05:c2:4c:1d:3f:1c:6d:24:bc:3f:cf:6f:d6:65:aa:
71:28:55:ea:4d:b1:1b:1c:a6:e8:0a:dd:b0:1c:ab:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:6D:43:0C:D5:D7:F6:C7:4C:5C:84:C7:96:E5:C6:56:7E:52:3C
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/xrttQwzV1_bHTFyEx5blxlZ-Ujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.54.0/23
195.20.158.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a2:a7:79:aa:41:81:2c:1c:b7:36:59:b0:2e:67:b8:a3:25:
eb:65:31:aa:79:de:db:8b:57:f5:18:36:f5:c1:32:fb:97:d7:
98:f3:4e:4c:3a:60:62:3f:3b:fb:ab:36:1e:68:7b:4f:61:43:
66:d5:f3:a3:81:c2:26:3c:d2:0d:9a:cd:e3:e3:a9:ca:8d:1e:
62:db:cf:b9:bf:e9:59:c2:06:54:a0:de:ca:d5:17:69:39:2e:
1a:eb:96:ca:84:0c:a4:9f:d4:f5:86:35:84:04:26:e0:2d:92:
37:de:c4:06:76:7b:d2:80:ff:c1:90:dd:c8:e4:f3:7d:74:06:
e1:66:ad:f0:db:da:64:ff:ed:1a:71:bd:67:2b:8e:9a:09:5e:
9b:d7:50:a5:3a:68:43:bc:74:98:37:35:df:36:6a:4d:a4:37:
c3:5b:66:5f:69:38:50:64:fb:57:12:95:18:7c:39:8a:49:b7:
a3:8d:9e:dc:2f:60:df:26:f9:fa:05:96:c1:2e:a3:0a:58:10:
ac:ed:4b:d8:5a:9b:10:9b:16:f9:ca:99:7a:99:91:38:c3:a8:
f2:e3:ec:4b:76:f5:1f:1d:59:11:0e:b3:3c:04:e1:73:7a:2e:
31:8c:90:82:b5:66:5f:83:64:61:24:ae:ad:ad:d6:bf:d8:89:
9f:ea:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:57 2025 by rpki-client