Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/krc5Ctt0qg_nVq1TGahtezbSeyU.roa
File: krc5Ctt0qg_nVq1TGahtezbSeyU.roa (raw, json)
Hash identifier: iEVh9+SMWDofobKH5KRX1jsWvzsu5JP+8aztZqxw4Xg=
Subject key identifier: 92:B7:39:0A:DB:74:AA:0F:E7:56:AD:53:19:A8:6D:7B:36:D2:7B:25
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018908FA7071B8ECADAAA0BFCC35669F8463
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/krc5Ctt0qg_nVq1TGahtezbSeyU.roa
Signing time: Thu 29 Jun 2023 21:06:17 +0000
ROA not before: Thu 29 Jun 2023 21:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:fa:70:71:b8:ec:ad:aa:a0:bf:cc:35:66:9f:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 29 21:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b7390adb74aa0fe756ad5319a86d7b36d27b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:83:57:4d:3d:0e:ef:5d:66:22:c5:f2:22:
49:7b:9f:88:14:34:de:9f:70:ae:b2:0e:b1:7f:52:
9e:af:78:7c:4e:a8:ce:9c:db:91:87:a9:f4:6b:39:
af:e3:1b:59:a0:a2:a3:7d:5e:8c:21:5b:21:fc:de:
33:6a:8c:07:f5:af:09:ae:d6:9b:64:88:9e:ab:de:
91:28:5c:c7:3d:14:19:d4:4c:14:59:6a:dd:f4:b2:
3e:a2:a6:48:98:af:71:f6:96:3b:b3:f9:2b:86:cf:
16:13:3e:cc:28:0d:84:51:40:bc:ce:3d:14:26:1c:
c6:15:79:44:68:9b:2e:78:43:4d:d2:15:00:f5:41:
26:af:37:d2:31:b7:52:90:7f:12:a4:f0:64:f5:b4:
65:03:d1:c7:87:e2:16:c6:eb:6d:3c:59:22:c8:97:
ac:33:04:86:19:7f:0f:02:51:82:bc:43:5a:6a:83:
f7:2b:5e:7b:a2:ba:fb:d6:99:ab:34:cc:f1:d3:57:
ec:51:5b:f4:a6:31:3e:1d:74:3c:bc:68:43:29:18:
b1:74:92:45:c4:25:64:97:08:3a:24:dd:20:de:4d:
68:9c:4c:8a:c3:4e:61:15:57:93:d9:ee:a1:f0:d0:
0d:51:fe:34:99:9c:29:d0:c8:3f:12:c4:54:c0:ef:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:39:0A:DB:74:AA:0F:E7:56:AD:53:19:A8:6D:7B:36:D2:7B:25
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/krc5Ctt0qg_nVq1TGahtezbSeyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
91.200.222.0/24
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e5:a6:52:c9:dd:15:c7:66:db:52:0a:67:57:08:fc:c4:35:
c9:4c:7d:f0:44:9e:17:a3:32:a5:a5:98:56:6a:b8:87:17:52:
98:30:f6:34:b4:3a:74:fb:fc:07:06:87:d5:a2:7c:77:58:b8:
2f:b7:83:61:89:9c:6a:12:36:fc:92:f5:cb:5e:fc:1f:29:9c:
8e:02:8c:ac:1a:51:d3:94:bf:2b:ec:87:2c:c5:07:4c:e2:0f:
c1:05:be:a1:a6:85:b7:b5:3a:28:a4:d2:24:30:a2:e2:cd:a8:
1d:8c:33:57:55:97:24:af:00:0b:8d:d2:40:12:87:57:02:0d:
50:47:d0:30:8b:b1:f2:8d:6a:4c:eb:30:59:d8:04:7d:00:50:
3a:d6:13:5e:27:4d:ed:2d:73:49:5e:11:27:6d:3d:f6:e7:37:
d0:c3:1b:c6:be:27:29:2a:20:00:cf:1f:71:b2:0e:f6:a2:70:
1a:c6:be:cd:ec:b3:89:be:50:8b:87:3d:60:06:a9:38:0b:d0:
02:85:f4:74:b3:2a:57:13:76:c6:0f:fe:fd:8f:07:04:bb:aa:
46:56:5d:de:31:49:29:01:30:70:75:50:ab:11:e9:98:24:67:
1d:5d:c9:07:0c:b8:ce:97:11:c8:d9:b3:4d:ed:ae:e8:73:9d:
b7:ad:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:29 2025 by rpki-client