Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/C_NCEL3FdUU6zjNDcS9LKFCQ3H8.roa
File: C_NCEL3FdUU6zjNDcS9LKFCQ3H8.roa (raw, json)
Hash identifier: MAU/18SB29KjrjKTBDNQoRWdnDGMChsShVaYfgxjR6E=
Subject key identifier: 0B:F3:42:10:BD:C5:75:45:3A:CE:33:43:71:2F:4B:28:50:90:DC:7F
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0510136C
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/C_NCEL3FdUU6zjNDcS9LKFCQ3H8.roa
Signing time: Sat 01 Jan 2022 12:56:36 +0000
ROA not before: Sat 01 Jan 2022 12:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46844
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84939628 (0x510136c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 1 12:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf34210bdc575453ace3343712f4b285090dc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:f9:1a:7e:b3:68:4f:be:4d:4c:c2:68:b8:
fa:b6:82:d0:74:0d:47:f3:d8:a6:23:4e:c7:84:69:
33:cd:9d:a7:1d:61:e7:c6:fd:2e:f3:2e:5b:af:d2:
84:b6:7b:6e:41:0b:82:3b:4f:c6:4b:47:c8:f4:dc:
af:6f:30:7a:2d:bc:48:5f:01:87:6e:1e:2d:41:4a:
f1:ea:25:96:53:df:df:44:a7:87:a6:5e:35:1f:d2:
20:ab:c4:ce:58:14:87:54:67:b0:77:54:22:3b:40:
62:39:a6:af:f0:48:72:8b:92:05:61:1d:04:ad:ab:
df:ea:ba:88:3d:98:85:93:b9:0e:7f:e7:2c:ed:a5:
c2:f8:c5:4b:17:be:c0:7c:50:94:41:41:00:42:17:
90:2b:7d:fa:ba:25:3b:4c:94:0d:ab:88:6c:8d:8f:
45:ba:93:c4:c4:18:27:a0:bf:c1:ea:32:43:1f:cb:
94:17:ae:11:60:a8:06:4f:6d:2e:3a:e7:9d:99:ae:
8d:9f:25:13:63:96:f4:97:cb:01:7b:04:60:bb:10:
20:33:0e:ea:2d:08:df:4e:40:29:cc:78:45:fd:b6:
46:40:1e:02:2f:80:48:73:4a:55:a7:4d:23:a5:be:
c7:09:22:e4:56:c9:17:78:49:29:28:89:c3:e7:e7:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:42:10:BD:C5:75:45:3A:CE:33:43:71:2F:4B:28:50:90:DC:7F
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/C_NCEL3FdUU6zjNDcS9LKFCQ3H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:71:ce:c4:af:a7:48:4e:07:df:97:14:a1:f3:7b:ce:9d:48:
d2:f7:87:78:16:ed:1f:6d:63:47:80:bc:6d:73:05:13:30:89:
0e:b1:22:c7:42:76:50:e1:d8:b0:7d:a3:4e:4c:ba:02:36:6b:
88:9f:4f:4c:69:eb:e7:7e:9a:44:44:21:b6:bc:21:61:8a:fc:
0f:e0:52:7b:d0:8d:7c:58:8b:92:d9:ad:70:47:c5:7c:3e:a2:
4e:55:c7:1a:10:2e:0b:0f:c9:cc:da:9d:72:f1:ef:36:da:4d:
5a:3f:d6:88:97:93:8b:c8:a4:37:63:ac:fd:d6:9a:9a:50:01:
ec:96:b2:db:8f:d0:87:b7:40:f8:a2:ad:f9:27:fe:8c:c9:de:
1e:35:b9:32:f6:21:6e:85:f9:1a:b7:2a:21:27:fd:f6:ce:1a:
65:59:cf:a9:7a:f9:0e:e8:cb:ab:f0:92:d4:27:e6:f9:a3:49:
b4:d2:4f:8d:aa:38:f2:07:06:59:f3:64:69:e1:f6:44:f5:eb:
dc:6a:58:36:e1:64:8f:1e:c0:a8:66:43:a3:98:2f:8f:98:3b:
01:fa:6f:74:57:f3:a3:a9:f8:43:e5:62:2b:9d:6c:c8:a6:22:
45:20:2a:67:fd:26:5f:65:dd:c6:0d:53:c7:7a:39:46:e5:67:
94:eb:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:45 2025 by rpki-client