Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/4oz7I_C-5P_wKq59MU3G4RB5JjY.roa
File: 4oz7I_C-5P_wKq59MU3G4RB5JjY.roa (raw, json)
Hash identifier: 5bNDV5gY7tGxJwWB2u/YyEo0AKqK6fmA/06MEO+3XRc=
Subject key identifier: E2:8C:FB:23:F0:BE:E4:FF:F0:2A:AE:7D:31:4D:C6:E1:10:79:26:36
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 02C89E
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/4oz7I_C-5P_wKq59MU3G4RB5JjY.roa
Signing time: Tue 08 Mar 2022 16:13:00 +0000
ROA not before: Tue 08 Mar 2022 16:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41694
IP address blocks: 91.220.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182430 (0x2c89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Mar 8 16:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e28cfb23f0bee4fff02aae7d314dc6e110792636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:bb:da:5d:29:80:a7:3d:b4:5d:3a:19:ef:
39:0e:1c:c2:4a:b0:5d:65:c9:8a:2a:85:09:cb:44:
9d:a2:74:21:ad:07:e6:68:a0:6c:35:39:47:ff:eb:
2f:27:e5:1d:59:f4:3a:0f:21:1f:b6:ee:95:d7:77:
36:e9:bf:17:3f:3f:fc:24:d6:0c:99:e2:81:40:c9:
73:bf:7e:3a:97:e3:79:b3:14:39:57:5a:c3:fb:a5:
4b:6f:47:0d:39:01:59:b1:63:44:cc:35:03:08:b4:
42:3c:a7:2a:e0:12:d6:c5:8c:94:9f:80:a9:28:9a:
71:2a:2e:5e:d3:8c:8d:20:49:3d:ba:f4:77:ef:5f:
c8:65:ef:57:27:4d:a7:af:82:6c:a8:fc:88:de:bc:
14:3c:fc:41:20:ea:b1:05:cc:c0:3e:f5:56:f9:30:
87:5b:1f:2d:bc:d8:7a:5f:a6:9b:25:93:c7:81:fe:
5b:3d:fd:74:13:21:df:be:88:8e:71:f8:0a:32:19:
5d:b4:05:04:5e:5f:0d:7d:00:1b:94:c2:f8:a1:00:
47:76:01:c1:5c:9f:af:72:60:a2:f1:bf:7f:a6:02:
80:27:f1:9b:bf:44:d2:5c:59:61:22:05:5e:28:09:
c5:ce:a5:46:f8:41:5c:5e:23:07:b3:7d:68:b6:ac:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:FB:23:F0:BE:E4:FF:F0:2A:AE:7D:31:4D:C6:E1:10:79:26:36
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/4oz7I_C-5P_wKq59MU3G4RB5JjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.172.0/24
Signature Algorithm: sha256WithRSAEncryption
24:48:40:87:3b:7f:eb:c2:ed:7d:99:54:34:51:df:b0:d4:d6:
59:80:de:40:c3:2e:77:fe:4b:fb:8d:9a:ef:7c:31:56:21:b5:
a8:e7:d0:58:35:98:4d:e0:13:13:da:92:50:16:6f:ba:fe:02:
4b:a2:c7:ba:ab:5d:7b:84:d9:84:c2:f2:5b:ab:03:9e:1c:cb:
fa:43:b7:2e:27:b8:28:66:2c:68:c2:30:65:19:c0:3f:ef:ae:
5d:27:ce:e6:70:68:2b:6f:d2:bc:c8:47:87:f2:27:52:34:3a:
66:53:37:90:eb:40:e8:ca:f2:26:c7:5e:31:93:8b:e3:d5:7c:
8e:63:d5:34:a5:f9:da:7b:b2:85:dc:d9:8d:f8:42:13:2a:a9:
0c:ee:02:9d:64:93:08:da:4d:28:79:cf:c7:17:11:76:64:9d:
dc:2a:ad:a9:e6:8f:d4:f5:a9:1a:f1:95:42:cf:26:11:95:2d:
a1:c6:d2:e3:f5:fd:35:1a:34:5f:90:7b:01:3b:93:c0:52:14:
f7:18:6d:5f:2c:b5:e5:63:91:ff:c4:b2:9f:38:00:43:19:59:
f0:d5:8c:e7:09:d9:58:e7:5a:87:f0:ca:2b:38:f0:30:c6:90:
2c:bf:29:f0:ed:d2:32:61:74:bd:2a:a9:70:4f:28:30:af:e0:
db:b6:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:09:14 2025 by rpki-client