Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/SNiRH5HLMTW3nHe_EJAwUkZzp_4.roa
File: SNiRH5HLMTW3nHe_EJAwUkZzp_4.roa (raw, json)
Hash identifier: zqBetlkx1F2uXgzbFWSlLHO/Xl7ELAC1i5RRdGyNbAg=
Subject key identifier: 48:D8:91:1F:91:CB:31:35:B7:9C:77:BF:10:90:30:52:46:73:A7:FE
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 0520B8EF
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/SNiRH5HLMTW3nHe_EJAwUkZzp_4.roa
Signing time: Sat 01 Jan 2022 09:53:27 +0000
ROA not before: Sat 01 Jan 2022 09:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197615
IP address blocks: 91.224.180.0/23 maxlen: 23
91.223.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86030575 (0x520b8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Jan 1 09:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48d8911f91cb3135b79c77bf109030524673a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:63:81:05:33:bf:dc:da:cc:79:ae:58:85:
97:26:46:e5:e4:1f:11:84:6d:ba:b5:f6:99:17:eb:
7b:7d:3d:f4:d6:eb:59:03:cd:3d:95:83:5a:7f:b2:
c8:d6:8d:03:01:2b:98:5c:15:68:34:2c:ae:34:a5:
cf:38:85:5e:76:5b:94:f4:59:af:22:53:d2:7a:af:
0c:81:4c:9e:93:1f:22:09:aa:cd:3b:66:b8:a1:7a:
0e:0e:01:13:92:55:1e:bc:f5:c9:f6:b7:4a:9d:2e:
93:aa:17:04:c1:af:dc:69:13:7b:8d:8b:b2:0a:f8:
0f:c8:50:5c:ef:62:63:8c:3a:4c:14:ba:8b:7d:d1:
18:52:96:a4:b5:94:f4:94:65:3d:ec:f5:d7:d8:23:
bd:48:13:3a:a1:9a:fa:db:b5:4d:78:37:8c:41:53:
c3:ec:a3:63:c1:f4:cd:e0:04:78:ab:13:dc:d0:22:
88:81:ce:8d:f2:37:b4:4d:7d:7e:b8:c9:bf:40:25:
23:c0:ea:5e:ad:43:47:65:39:17:b4:db:71:9b:9d:
ba:c9:b9:92:63:26:ae:b5:4c:45:b2:0a:26:8b:b2:
3a:5b:21:81:e4:71:f1:e9:a5:4a:36:51:59:0c:da:
da:09:36:3b:05:26:2a:31:36:5b:a1:c0:a8:fb:c9:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:91:1F:91:CB:31:35:B7:9C:77:BF:10:90:30:52:46:73:A7:FE
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/SNiRH5HLMTW3nHe_EJAwUkZzp_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.167.0/24
91.224.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:86:20:5a:f7:63:c0:c5:fe:6a:db:67:d0:b9:ab:b8:4c:d5:
9d:6b:c7:a6:9f:c1:5e:c7:c1:ba:41:1d:50:0a:b5:b2:a8:2b:
9e:3b:78:3f:81:59:7c:5f:e2:0e:03:4f:52:a9:60:f2:ac:44:
1d:96:1d:ce:09:4a:3f:02:6d:47:55:89:8a:85:12:f0:88:7e:
b8:dc:42:ba:d9:8d:f2:14:37:31:d0:37:bc:42:ce:a3:20:61:
3d:e4:b0:08:9e:94:07:ea:26:7a:40:29:85:2b:b9:c1:4b:ba:
88:a2:f1:48:37:3c:e8:72:c7:54:ee:26:67:ec:3b:c3:67:76:
3d:38:86:df:29:05:ae:51:cc:fc:16:a0:00:76:22:c9:1d:e5:
94:3b:49:49:00:b8:26:98:40:5c:8d:f6:53:5c:fc:6a:78:6b:
25:8f:ab:1d:47:b3:8c:fe:fd:db:13:ca:ea:7e:c3:42:ed:7d:
45:4b:06:86:91:a3:a8:0d:90:e0:3c:a7:2e:14:63:e1:aa:4f:
6c:d6:c6:0e:f7:33:64:80:01:0b:62:4d:d2:f1:df:b0:59:b6:
20:f0:10:a6:b5:db:f3:3a:fd:ae:f7:79:64:ec:46:fd:ce:21:
7c:d5:f2:f2:3b:25:56:7f:7a:2c:5e:05:92:33:30:53:b9:d7:
42:e8:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:48 2025 by rpki-client