Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/G4cGTYOQOwb4iPcONS4_zBiBSxM.roa
File: G4cGTYOQOwb4iPcONS4_zBiBSxM.roa (raw, json)
Hash identifier: wbzSDoUox0N/y+aGTguP9ESieehXYfeiDJ/5OjuatVE=
Subject key identifier: 1B:87:06:4D:83:90:3B:06:F8:88:F7:0E:35:2E:3F:CC:18:81:4B:13
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0AC378
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/G4cGTYOQOwb4iPcONS4_zBiBSxM.roa
Signing time: Tue 28 Jun 2022 14:19:59 +0000
ROA not before: Tue 28 Jun 2022 14:19:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43099
IP address blocks: 91.194.66.0/23 maxlen: 24
2001:67c:a2c::/48 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705400 (0xac378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Jun 28 14:19:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b87064d83903b06f888f70e352e3fcc18814b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:29:68:16:d3:bd:1d:c7:a3:b1:4e:b6:bd:
f4:6a:0d:01:9a:45:e8:74:65:11:27:43:89:0e:29:
a0:75:4c:eb:32:21:12:c6:55:1d:80:da:85:5a:33:
0d:d4:40:4c:90:75:b2:b4:ef:d3:c5:7a:02:b7:3f:
1e:76:b6:e0:d5:6b:45:84:8b:8d:ce:df:cf:64:6c:
10:72:64:2e:b6:8f:5f:35:29:5f:8b:1d:0c:c0:b6:
97:01:86:c2:8d:15:5b:06:5c:67:5d:65:77:21:69:
6b:56:33:a5:7f:8c:19:e4:0d:f6:61:02:9b:26:37:
4a:76:3d:4c:41:4d:a8:9b:e9:c2:41:ce:06:ee:86:
63:96:4e:df:bb:3b:07:d0:1d:01:92:55:4f:58:fc:
61:dd:2f:90:82:fe:c5:7c:26:c6:63:bb:3c:1f:fc:
56:9e:dc:19:80:c7:be:8e:92:9a:32:f5:06:5c:e9:
e4:0b:c4:0b:a8:42:f0:57:78:7c:8c:22:48:50:bc:
56:be:fa:91:6f:a6:1d:02:3b:b9:7f:15:f5:38:28:
c4:bf:b8:a4:63:5b:e2:43:71:8a:37:5a:5d:40:94:
cc:a4:a0:88:52:12:a1:a2:bc:6f:98:40:34:b0:36:
0e:3f:b3:c2:1b:67:06:a7:f4:b5:30:57:fc:cb:e0:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:06:4D:83:90:3B:06:F8:88:F7:0E:35:2E:3F:CC:18:81:4B:13
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/G4cGTYOQOwb4iPcONS4_zBiBSxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.66.0/23
IPv6:
2001:67c:a2c::/48
Signature Algorithm: sha256WithRSAEncryption
27:ba:2f:ec:4c:31:99:78:06:6f:4c:bf:43:6e:43:e2:b3:9e:
64:fb:7a:df:5c:31:02:a8:97:f2:39:be:a1:cc:02:bc:87:f2:
05:79:6c:19:2c:e4:c4:3a:29:9e:66:23:1f:4f:27:65:e1:b0:
8f:89:f1:ca:f0:e1:59:27:bb:c3:cc:ac:60:43:0f:2e:c5:94:
2c:5b:f5:7a:b4:7a:cd:10:c9:bb:53:ba:6e:cb:05:66:00:ac:
85:92:41:fb:d0:ce:fa:6f:76:2a:19:e7:c9:4c:51:b9:5f:b5:
48:12:2e:b9:05:99:b3:ad:bf:f6:35:5a:60:b4:f9:7f:db:09:
df:0c:9e:3a:65:72:10:c1:21:cb:4c:03:91:10:2f:ac:94:ab:
79:09:e8:02:66:1b:9c:ef:01:ed:bc:aa:41:f5:d9:c9:f8:a5:
6e:8e:14:4a:29:b3:c7:34:b6:3e:74:d5:0e:f4:3a:01:a0:cd:
7f:3a:77:0d:92:a5:d9:27:6d:b3:3d:b4:42:de:ab:84:31:15:
0c:fc:0d:5c:24:f2:6f:0a:4f:04:26:4f:e9:1d:b5:9b:55:fb:
f4:92:b6:ae:a8:00:4e:b3:eb:0c:81:6d:e9:ed:8e:47:2a:8b:
80:32:da:a7:38:7b:11:f9:f2:8d:d4:31:41:6c:5b:f8:fe:7b:
fd:a9:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:35 2025 by rpki-client