Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/k0WyZrbFd8U2ZtFEHV0dFZqbO64.roa
File: k0WyZrbFd8U2ZtFEHV0dFZqbO64.roa (raw, json)
Hash identifier: KDoyOS1+bFHqJmqvHOBCyXOH4E/RJWVdtzzWBIdLhiA=
Subject key identifier: 93:45:B2:66:B6:C5:77:C5:36:66:D1:44:1D:5D:1D:15:9A:9B:3B:AE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0B73502E
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/k0WyZrbFd8U2ZtFEHV0dFZqbO64.roa
Signing time: Sat 01 Jan 2022 04:03:29 +0000
ROA not before: Sat 01 Jan 2022 04:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207442
IP address blocks: 91.192.4.0/24 maxlen: 24
91.192.5.0/24 maxlen: 24
91.192.6.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192106542 (0xb73502e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 1 04:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9345b266b6c577c53666d1441d5d1d159a9b3bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:f0:13:5f:d4:a5:27:24:14:bb:fb:33:9c:
21:d3:cc:d9:7b:d0:de:51:c2:0b:e2:f2:77:51:ab:
c7:d1:d9:03:32:92:35:47:b6:ef:b4:a9:7f:20:da:
c8:eb:1b:97:55:75:42:f5:ef:d5:d6:f8:ac:53:f4:
04:0f:49:7a:8a:7c:25:0d:f9:cd:c5:91:2f:77:68:
72:38:ed:3e:cc:23:4d:62:30:f0:3a:5e:85:4c:00:
b1:1c:2a:5d:60:a5:fd:e6:09:f6:9e:18:e0:81:93:
1a:94:bf:61:93:89:a5:f9:8d:db:65:57:93:04:d0:
fe:68:a2:61:e6:61:ba:54:8d:2c:36:39:60:17:96:
1c:f9:4e:26:55:a7:a5:91:29:d1:17:21:75:0e:b1:
2f:17:43:48:ab:31:4c:cf:01:c1:f3:91:e1:db:b2:
33:3a:ee:12:6a:d4:24:0c:f5:92:88:8b:4b:c8:cb:
ca:94:5a:3f:6d:c6:29:44:71:7d:2b:52:1b:3b:93:
3f:4a:d0:4b:9b:f9:b6:55:76:f8:21:a3:c0:db:9d:
35:95:28:a7:3d:f3:c6:8b:a1:e2:07:50:f0:b8:16:
39:45:b8:32:08:86:d1:37:c9:30:48:08:8a:e8:37:
f9:67:9b:f3:3f:38:7e:d0:f1:2d:c4:68:af:5d:9f:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:B2:66:B6:C5:77:C5:36:66:D1:44:1D:5D:1D:15:9A:9B:3B:AE
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/k0WyZrbFd8U2ZtFEHV0dFZqbO64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:f3:d5:89:88:36:85:e6:71:9d:a1:a1:07:53:a8:ca:12:7a:
95:93:31:a3:54:78:80:f6:cc:ff:d9:e8:23:73:31:1d:b0:09:
f5:f1:5e:92:8f:5b:90:ac:f9:38:ae:c8:8e:1a:e5:d3:6c:23:
8b:fa:d0:da:5e:b2:78:0f:ce:51:99:3f:d0:8e:0f:22:21:6f:
41:3c:e3:e6:88:06:5a:7e:22:d7:67:58:88:85:f4:85:67:fd:
d0:59:2b:58:af:e6:e4:3d:10:13:6b:2a:52:75:fa:fa:9a:e2:
1c:93:32:34:ff:5e:b1:7d:35:ba:b8:66:ef:98:e2:7d:36:62:
6a:22:f7:c6:5a:63:2b:fc:c8:99:75:22:d0:cd:4f:4f:75:67:
c1:55:09:c7:72:49:3d:04:4a:a0:b9:41:8a:e1:3d:e4:4b:e0:
fd:e5:6d:8f:88:29:ae:b2:d4:eb:63:4b:94:28:80:1f:29:88:
f1:d4:73:bc:27:3a:f5:0a:6a:80:6d:c1:26:b7:54:b7:d6:b2:
0e:26:77:e9:e2:dc:6d:75:33:5c:0a:b8:e4:ea:ac:d3:86:6e:
53:90:9d:fe:20:b9:cc:31:65:5f:fa:cc:b4:e6:40:1a:cb:fe:
a1:71:da:99:a1:88:65:92:64:65:ee:ac:5f:22:1d:4f:d1:22:
67:29:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:00 2025 by rpki-client