Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/jQPawscsA6YuP8For8lHfXFJ8Bk.roa
File: jQPawscsA6YuP8For8lHfXFJ8Bk.roa (raw, json)
Hash identifier: LXdcqyBpeXTwlYM1Ch4qnOMcugXBOjFcXTMeE4BZy9U=
Subject key identifier: 8D:03:DA:C2:C7:2C:03:A6:2E:3F:C1:68:AF:C9:47:7D:71:49:F0:19
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 06C7C6A6
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/jQPawscsA6YuP8For8lHfXFJ8Bk.roa
Signing time: Sat 01 Jan 2022 11:56:33 +0000
ROA not before: Sat 01 Jan 2022 11:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 91.105.216.0/24 maxlen: 24
91.105.217.0/24 maxlen: 24
91.105.218.0/23 maxlen: 23
91.105.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113755814 (0x6c7c6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Jan 1 11:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d03dac2c72c03a62e3fc168afc9477d7149f019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:16:eb:f0:3e:67:eb:df:10:e6:f9:8e:11:
75:1e:21:08:b9:43:e6:b1:88:b6:5d:c0:35:f1:17:
6b:43:8d:77:71:5c:29:80:57:87:2f:04:90:02:f1:
61:ed:5a:25:36:0b:ba:d1:42:8f:2f:2c:06:5c:a3:
0a:b8:cf:1d:dd:9d:f5:8e:8c:56:08:31:46:45:a0:
55:34:f7:bb:13:bf:7f:0e:98:93:42:c7:45:91:0d:
7b:c7:a6:78:3d:b0:bf:b2:7d:92:4d:53:85:a5:24:
ba:83:72:d2:eb:2f:10:1b:0d:f8:93:bf:f0:ce:c5:
5d:5a:d0:48:d5:89:b3:20:00:22:30:2b:d3:96:d8:
20:c0:aa:c2:dc:84:d5:c1:52:99:30:0b:88:f6:62:
43:4e:6b:ee:2e:eb:a5:fc:4b:90:70:3d:a1:88:55:
29:3b:d1:1b:0b:38:81:51:3a:4e:b1:6b:f4:4d:97:
82:c5:a4:c1:ec:87:5c:82:e7:dd:15:0c:2e:e9:3c:
2a:df:2a:c2:39:58:ff:eb:85:c1:76:ef:39:44:ec:
eb:ad:8f:dd:e6:80:ff:d7:18:ea:ca:77:a8:fe:87:
fc:c8:ef:0f:64:d1:21:9b:a5:d2:ce:79:b7:60:87:
0a:c9:3c:bd:72:1f:c9:d2:c8:9c:64:5c:66:4d:5a:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:DA:C2:C7:2C:03:A6:2E:3F:C1:68:AF:C9:47:7D:71:49:F0:19
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/jQPawscsA6YuP8For8lHfXFJ8Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:c6:2b:f3:77:19:06:52:99:43:94:c0:93:7d:2a:6f:ce:eb:
a8:63:93:29:e4:4e:30:a6:7b:f0:2c:9e:d3:eb:88:74:d1:6a:
7d:7a:84:f7:44:8f:9c:b8:ce:68:8d:4f:82:a4:84:d9:bd:7e:
14:b1:c9:95:6a:05:df:ce:26:c8:10:0a:2d:47:63:82:a8:2c:
27:ca:aa:47:34:84:5f:05:04:3e:a5:f0:42:0f:57:d4:22:44:
0f:e2:d1:6b:cf:5a:68:4d:73:0d:44:e6:55:8c:66:fc:04:81:
fa:0c:aa:0c:af:38:45:eb:e3:85:9d:78:2c:41:1b:64:8c:87:
93:1a:f0:81:be:c3:0f:fc:aa:28:20:34:29:1b:fb:4d:50:70:
76:43:fa:3f:18:12:30:64:69:96:1c:48:70:80:2c:4e:53:1b:
be:c2:3a:f4:16:dd:69:6a:c1:d8:eb:d6:a2:11:89:6e:3d:d6:
8e:e1:2e:11:1e:d3:a6:c2:7f:ec:6a:62:1f:6b:ba:ab:e6:bb:
2e:8d:82:7d:2c:5e:a7:af:40:2d:49:7e:d9:f4:b1:e0:c3:a7:
aa:37:e3:b4:86:74:9c:0b:49:f8:67:36:da:26:be:77:3c:8a:
2e:d2:25:7a:20:88:6a:9e:14:98:3e:52:14:99:7e:fe:e5:cf:
88:bf:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:38 2025 by rpki-client