Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/R83fdVQUShwLDgVhPV3DaFi-hb8.roa
File: R83fdVQUShwLDgVhPV3DaFi-hb8.roa (raw, json)
Hash identifier: C8fKSHjKVKo2GLSj4GOnXxqjKb1Ns7yT0zl/FC+rnoY=
Subject key identifier: 47:CD:DF:75:54:14:4A:1C:0B:0E:05:61:3D:5D:C3:68:58:BE:85:BF
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AEF67A1341F09FA677CFD735C3CC1D163
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/R83fdVQUShwLDgVhPV3DaFi-hb8.roa
Signing time: Mon 02 Oct 2023 08:01:00 +0000
ROA not before: Mon 02 Oct 2023 08:01:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139853
IP address blocks: 91.222.134.0/24 maxlen: 24
91.222.133.0/24 maxlen: 24
149.20.127.0/24 maxlen: 24
149.20.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:67:a1:34:1f:09:fa:67:7c:fd:73:5c:3c:c1:d1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Oct 2 08:01:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47cddf7554144a1c0b0e05613d5dc36858be85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:a6:19:40:f3:27:cc:fe:4d:a4:69:a6:a9:
17:ec:3d:2f:d6:51:84:84:55:15:76:4b:a4:3c:72:
3a:03:c4:aa:43:d8:f7:7d:fa:40:f2:4c:a4:e8:6d:
f8:f9:e3:49:c7:b8:1f:b2:2a:1c:15:2f:66:35:bb:
57:c0:2f:c4:08:d9:45:94:9e:48:52:ac:73:04:d4:
59:3d:46:11:31:1f:53:33:e5:1f:b3:73:f2:ac:32:
cf:a6:f0:9f:94:f7:5b:3d:a0:fe:be:ef:ae:56:4c:
49:23:2a:7c:9c:3e:1f:d4:d1:cb:44:26:b6:90:0d:
09:75:06:e0:3d:fb:2c:24:50:a7:3f:80:dd:35:7f:
dd:d8:19:36:7c:c4:47:bd:be:4f:d4:19:14:19:fa:
30:3f:f3:f8:59:0c:94:ab:17:a4:ee:23:fa:3c:24:
20:fa:80:ee:86:16:78:c9:97:9e:b4:a1:1c:4e:22:
85:b8:7d:2e:23:62:9c:76:34:90:13:c0:90:50:68:
b0:b9:97:16:1e:41:6f:9b:c7:3e:6f:aa:d4:1d:e1:
16:af:31:29:05:f5:22:49:d6:d2:27:cf:05:86:72:
77:09:f0:45:93:d6:e0:8d:de:4d:23:43:68:ab:06:
4c:75:47:2e:6a:64:3f:b9:3b:2d:1e:09:d6:21:75:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:DF:75:54:14:4A:1C:0B:0E:05:61:3D:5D:C3:68:58:BE:85:BF
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/R83fdVQUShwLDgVhPV3DaFi-hb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.133.0-91.222.134.255
149.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
07:10:e7:e6:01:01:54:41:28:3e:ba:1d:e7:88:f7:62:18:ec:
94:62:d7:6a:f6:95:8e:a3:f8:f3:e5:97:35:a8:17:f5:83:a7:
9a:3c:a0:bc:dd:45:db:68:60:03:17:66:a0:f4:55:e3:48:33:
d6:82:35:64:43:89:83:75:20:ae:53:f9:96:b7:18:4a:ea:1d:
43:68:3c:2b:8d:fa:61:82:87:a7:9e:13:2a:46:84:4e:09:8c:
ce:1a:06:3a:f1:c1:eb:21:bf:35:b6:a4:13:4b:1d:da:ac:ee:
d8:8a:d6:db:5b:52:7f:39:47:27:b8:b0:d3:7c:c6:94:0e:af:
cf:66:18:60:28:2f:27:f8:e6:00:4c:55:a8:d2:af:81:c6:94:
d9:0b:05:72:9f:4f:4c:be:ba:5b:da:f7:15:a5:cd:ec:2c:e5:
15:58:2e:b4:0a:55:85:46:8b:63:6a:a4:cb:55:04:0d:a0:b5:
f6:88:01:da:90:8d:fa:1f:4d:11:20:ab:06:f4:d4:84:c1:72:
22:d4:b5:fb:f1:09:2b:a6:b3:f8:eb:96:79:48:c2:9e:98:4d:
55:1a:82:4c:8b:58:9a:f6:65:19:d4:c6:c5:ac:8d:8a:9c:b5:
a7:7c:8d:2d:a7:30:ba:2f:5c:09:dd:c7:dd:c3:fc:52:b3:56:
de:6c:12:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:54 2025 by rpki-client