Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/xn84L2WppSIauOIyzgpdmnZYfi0.roa
File: xn84L2WppSIauOIyzgpdmnZYfi0.roa (raw, json)
Hash identifier: vWc+4AFP8qWk4qD5EglqtIaIGFVGUVRx0pAZahlU9NA=
Subject key identifier: C6:7F:38:2F:65:A9:A5:22:1A:B8:E2:32:CE:0A:5D:9A:76:58:7E:2D
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 0141383D
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/xn84L2WppSIauOIyzgpdmnZYfi0.roa
Signing time: Sat 01 Jan 2022 07:57:01 +0000
ROA not before: Sat 01 Jan 2022 07:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48388
IP address blocks: 91.209.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21051453 (0x141383d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Jan 1 07:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c67f382f65a9a5221ab8e232ce0a5d9a76587e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:46:96:09:13:f6:f9:f3:56:b0:d4:82:a1:
b2:72:4b:13:7f:62:2c:3f:39:04:58:f1:6e:ef:9a:
ca:5b:48:ad:20:d7:2d:6f:e5:75:9b:53:4f:cc:45:
54:12:f7:02:ec:8e:7d:f2:67:6c:3f:33:72:20:25:
92:a9:2b:de:7a:4d:a9:8c:ef:e0:3d:cb:0c:f9:b6:
fb:eb:d4:d9:09:19:ed:a3:32:1d:a4:52:b7:8a:d0:
a8:e0:71:58:6a:69:d3:93:e3:1b:c1:e9:9a:be:47:
7b:15:1f:92:1f:e4:11:39:9c:13:bc:80:e6:cf:2f:
60:9e:43:b8:e1:d9:a7:1a:c0:85:81:01:f6:37:61:
d7:b3:5a:f6:88:3d:ef:a1:69:c5:38:15:bd:72:ba:
5b:c7:d0:b8:67:48:35:d4:be:79:12:1a:c0:b3:f6:
91:b6:e0:3f:a6:e8:2a:ef:d7:bb:ce:3e:a8:4b:8c:
60:02:c3:34:b6:de:7f:b2:9e:86:a9:08:f2:5b:b7:
15:00:54:79:dc:20:6b:e9:93:4d:b6:11:2e:56:e1:
c4:ff:9d:d7:7c:1d:90:dc:f7:1d:d9:47:73:a3:6f:
b1:20:f6:3d:46:33:7d:fe:74:73:17:19:92:ed:ca:
0f:2b:c5:87:bf:e5:c0:6d:f6:75:2d:87:d2:9e:4c:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:38:2F:65:A9:A5:22:1A:B8:E2:32:CE:0A:5D:9A:76:58:7E:2D
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/xn84L2WppSIauOIyzgpdmnZYfi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:90:c3:2d:27:b4:c4:61:19:0b:89:ef:93:70:bb:62:a9:b7:
58:25:11:e3:b1:89:fe:23:9f:c1:52:75:29:d1:f7:2b:d7:c0:
3a:c3:bb:4a:fd:64:fd:16:97:6b:fb:cc:97:52:df:65:02:74:
6c:49:54:8d:74:35:7d:90:1b:ee:8b:fd:5d:0f:21:5e:ba:5a:
bd:cd:eb:c6:2e:96:50:0a:c4:86:ab:3c:3f:46:93:5a:26:6f:
37:df:c5:5a:26:2f:ce:da:c4:0c:95:b0:af:af:83:48:c5:3a:
15:8a:ec:60:6e:6e:76:03:05:9b:fe:f6:c4:78:54:ca:23:95:
ec:95:64:46:15:25:43:49:d6:10:2c:2e:86:59:62:c5:1c:00:
aa:5a:fe:cb:97:b3:eb:b5:65:00:b2:b0:63:8e:51:d2:a0:bb:
fa:2d:45:b6:77:e1:24:6a:bc:c6:7d:f5:9e:98:cf:7d:ac:3d:
a2:3f:7f:5e:f6:7e:22:fb:58:9f:d7:41:d2:9f:9e:43:24:ac:
f5:d3:99:fe:63:8a:7b:d9:33:34:2b:42:55:a4:3b:45:e8:73:
52:c7:c9:68:45:be:81:79:5c:5c:4a:d9:6f:44:57:c3:fc:4a:
38:8c:47:54:20:e2:16:a0:3e:31:fa:59:87:f0:56:1d:9b:3d:
66:54:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:56 2025 by rpki-client