Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/Ss2QuY6i75SynGI_Ka5AZBiWgs0.roa
File: Ss2QuY6i75SynGI_Ka5AZBiWgs0.roa (raw, json)
Hash identifier: cCn9BGWmYAXPDXf91kuqW51tDmj0JAp6WohVbAvjm4M=
Subject key identifier: 4A:CD:90:B9:8E:A2:EF:94:B2:9C:62:3F:29:AE:40:64:18:96:82:CD
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 01856BC0EF1F79C10640653188C9F775F222
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/Ss2QuY6i75SynGI_Ka5AZBiWgs0.roa
Signing time: Sun 01 Jan 2023 05:14:44 +0000
ROA not before: Sun 01 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198049
IP address blocks: 91.230.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:ef:1f:79:c1:06:40:65:31:88:c9:f7:75:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Jan 1 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4acd90b98ea2ef94b29c623f29ae4064189682cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:91:ad:f1:6b:25:03:5d:27:ab:58:96:ba:
57:d3:5b:66:80:59:50:e2:c6:7b:27:e6:0f:a1:b7:
78:e0:76:7e:5d:e5:42:92:f0:63:ba:1e:78:72:08:
e1:e1:d1:89:f1:75:f7:38:4c:ce:cc:9e:2e:1e:bf:
0a:81:bf:7d:d2:f3:d1:20:37:c3:14:fd:1b:af:d4:
e8:04:d7:9b:dd:cf:10:5c:fd:85:8c:ab:22:9b:a4:
74:70:4c:72:63:94:9c:af:df:74:02:54:ac:23:6e:
02:20:21:da:8a:55:2b:16:d0:46:fe:86:86:f8:9c:
0d:78:5e:95:c2:43:66:5a:73:e5:d0:7a:36:2a:88:
48:96:ed:4d:08:a8:33:23:4d:cc:0f:dc:36:27:82:
de:3c:90:da:f3:fe:af:be:c9:e8:25:77:98:a4:6b:
57:de:e5:cd:f2:78:6e:eb:c9:f1:80:2b:25:80:ee:
6b:6c:4a:a0:a6:1d:4a:3f:aa:b2:42:dd:2b:5d:d7:
34:a3:70:a9:3f:3a:e2:33:a8:95:fa:15:07:67:48:
43:d8:32:16:4b:53:58:7b:0d:94:8d:c1:c4:06:61:
7e:a3:7f:76:00:47:4a:c0:e9:d3:03:a5:1d:ca:dc:
23:2a:69:55:25:91:f0:42:70:1c:c4:71:43:34:ba:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:90:B9:8E:A2:EF:94:B2:9C:62:3F:29:AE:40:64:18:96:82:CD
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/Ss2QuY6i75SynGI_Ka5AZBiWgs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:91:6d:78:07:69:6d:53:b7:5e:30:9c:4a:25:4e:70:e1:53:
36:16:df:0a:0c:1c:b9:1c:c0:85:fc:31:d9:ff:44:4f:30:92:
01:e7:0b:e2:21:c9:d6:bf:77:c0:44:0b:6a:51:a6:0d:40:65:
0a:df:26:5a:63:9d:f2:81:3d:db:4e:2d:28:3d:dc:2c:70:27:
22:08:63:7c:69:e2:74:e8:d8:dc:d5:7e:35:8f:07:20:0b:e9:
10:97:05:1c:24:59:3b:6c:b4:31:be:34:be:e9:78:f3:de:6c:
8a:84:d6:5a:6f:a3:7e:c9:0e:78:a2:31:c6:a4:d0:33:95:8f:
ae:e1:6d:f1:ac:10:27:ab:0b:8a:58:30:3f:bf:dd:3c:70:e5:
61:f9:c1:e9:ef:a1:6c:18:bb:78:cc:74:19:73:c3:00:44:9e:
c4:d1:77:b0:4a:2b:98:18:e0:0e:5b:2c:5f:1c:04:c7:b8:1e:
e8:e2:02:82:06:62:9e:c5:23:ce:a2:2d:36:d2:3a:67:9f:fc:
13:0d:84:8f:00:8c:a2:40:7d:0e:d5:2c:71:b2:a2:71:8d:97:
ca:7c:bd:bc:83:4e:75:bf:0e:35:06:46:0c:b6:83:a7:41:c1:
6e:9a:e4:c0:4f:aa:26:81:b6:f1:80:a4:d3:20:b0:a0:41:ec:
1d:f5:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:33 2025 by rpki-client