Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/2aKt_5YoMqLcN7DvRa9qbxNMUMw.roa
File: 2aKt_5YoMqLcN7DvRa9qbxNMUMw.roa (raw, json)
Hash identifier: L/iKVxew13DWNm2dy+6saXrC/3LvH1g2iuq0+o1qTcY=
Subject key identifier: D9:A2:AD:FF:96:28:32:A2:DC:37:B0:EF:45:AF:6A:6F:13:4C:50:CC
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 03B09526
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/2aKt_5YoMqLcN7DvRa9qbxNMUMw.roa
Signing time: Sat 01 Jan 2022 01:51:27 +0000
ROA not before: Sat 01 Jan 2022 01:51:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57530
IP address blocks: 91.232.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61904166 (0x3b09526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Jan 1 01:51:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9a2adff962832a2dc37b0ef45af6a6f134c50cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:f5:ae:17:d6:a4:e5:25:bc:bf:0d:9a:b8:
55:cf:27:3d:ee:a6:0c:54:3d:a8:c3:44:57:21:f8:
bb:a9:2f:61:51:08:17:e9:2c:13:c5:6d:74:63:b7:
c6:65:b4:b5:35:c5:20:88:e1:51:0e:ca:84:63:00:
1e:d9:b6:09:17:6d:7d:cd:f4:51:6d:1a:b9:9e:54:
93:9d:1c:54:72:32:0e:8e:84:3d:4e:b1:f0:9d:5c:
a4:56:c4:7c:5d:21:52:f7:94:39:6b:c3:b1:66:ff:
f6:61:77:ac:e1:e4:10:ed:5e:6d:11:04:42:e5:f2:
8c:5b:e0:26:b4:fb:b2:4a:c2:b7:8b:1d:0d:9b:c8:
fc:f2:c2:7f:80:12:50:4b:f7:33:65:25:a5:18:ab:
1e:56:34:0c:a6:90:47:eb:14:4b:2b:a6:64:18:25:
bc:25:70:e5:fe:63:50:ec:e7:71:d7:71:25:87:82:
dd:ea:f7:88:dd:fe:90:ac:13:51:94:ef:31:7e:2f:
52:c8:18:7e:8d:f6:16:f1:36:29:f0:c0:36:5a:94:
86:46:44:79:2f:9a:06:89:a7:75:60:cb:1a:36:1b:
d3:4f:bc:73:e7:68:8f:39:12:ba:30:5b:b8:45:ed:
91:61:e4:8a:a7:b5:e6:30:84:04:37:c6:f8:a7:24:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:AD:FF:96:28:32:A2:DC:37:B0:EF:45:AF:6A:6F:13:4C:50:CC
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/2aKt_5YoMqLcN7DvRa9qbxNMUMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:93:9e:a6:69:ee:25:fa:c3:e1:f1:86:1c:f2:e7:9e:3f:8b:
ab:61:ae:ac:84:b5:6f:7c:15:15:00:dc:2d:fc:84:9c:5e:25:
51:da:c5:a5:7b:eb:5e:69:f8:ad:3d:43:a8:dc:81:1f:5e:2d:
d3:60:94:b0:6b:27:9c:82:03:b6:c0:0c:aa:1b:60:e3:e2:81:
4c:10:d2:f3:58:25:61:bc:c5:fb:34:b3:15:26:91:ee:8b:cc:
f0:6b:75:ae:5d:aa:bb:f3:1e:76:7e:e1:e1:de:0c:a5:5b:a2:
4b:eb:ee:7f:0f:d3:8a:d3:c3:91:96:d3:df:6b:99:2d:96:21:
56:6c:b3:63:b5:40:88:9f:f4:f6:9f:6a:13:98:25:0d:9d:2c:
8b:82:3f:20:b2:2c:79:a9:f8:8c:af:98:b6:89:3e:e6:00:35:
29:b0:8d:4a:f2:1f:4e:f0:a3:ce:17:7c:b4:d0:80:00:be:fe:
96:d6:9a:a9:94:ff:40:cb:e5:0d:be:f0:e3:f0:12:9e:33:61:
c6:85:2d:8f:b4:98:2e:8b:0a:d8:ab:a9:23:9f:12:5f:30:a9:
91:9d:8a:f8:be:c0:86:04:56:34:aa:7d:d4:4c:e6:f9:a8:5f:
5e:34:0d:a9:ac:93:9d:b5:a0:da:b4:1b:a8:59:38:cc:df:6d:
70:d1:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:04 2025 by rpki-client