Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/Ki2TDC0WRIdu_B5cwSZQMM8YVTk.roa
File: Ki2TDC0WRIdu_B5cwSZQMM8YVTk.roa (raw, json)
Hash identifier: YcXiIT7I+WASx1RaSqOWJToUvJWXwnpwz9YDyhsXEDE=
Subject key identifier: 2A:2D:93:0C:2D:16:44:87:6E:FC:1E:5C:C1:26:50:30:CF:18:55:39
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: F6E096
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/Ki2TDC0WRIdu_B5cwSZQMM8YVTk.roa
Signing time: Sat 01 Jan 2022 12:05:15 +0000
ROA not before: Sat 01 Jan 2022 12:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56454
IP address blocks: 91.223.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16179350 (0xf6e096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Jan 1 12:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a2d930c2d1644876efc1e5cc1265030cf185539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:ab:cd:82:9d:72:6b:29:5a:5c:a2:00:d1:
1c:71:b2:24:c4:68:ae:8e:29:68:e2:aa:7c:1e:22:
5a:60:4b:bd:80:a6:57:5a:b1:da:a4:28:6d:0b:c2:
df:78:76:fc:cd:2d:a9:ee:d4:54:ef:9c:da:8d:f5:
e5:b9:56:6d:ee:c8:c0:a5:48:9e:c2:aa:66:25:1c:
86:a8:09:8e:d0:57:b2:b5:bc:33:3e:21:40:2e:cd:
f2:1e:aa:75:6a:96:c1:d1:f4:2d:0d:0b:83:12:cd:
14:c9:af:13:cc:c7:73:fc:b6:8e:70:23:c7:69:06:
ba:d0:4d:87:1c:b3:2d:f5:ef:14:a7:3e:48:07:f3:
f0:34:a6:aa:10:1d:f0:61:56:02:b0:a3:cc:35:1b:
e3:db:3d:0d:5b:c2:2b:c7:83:bd:76:ec:eb:3c:85:
52:58:36:3f:61:cd:77:d9:61:dc:42:e2:78:15:3d:
71:49:5d:cb:2c:f4:e3:50:35:42:d1:02:92:87:4e:
58:f8:7e:52:90:66:af:1e:d1:b7:68:34:31:3a:ae:
97:e6:c1:e5:ff:36:d5:2d:81:ab:e9:69:44:99:87:
44:78:bc:c4:f5:f1:a8:58:34:f2:a6:d0:8d:f4:30:
30:f7:97:fa:62:03:6f:ea:95:7c:57:d7:ea:12:4a:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:93:0C:2D:16:44:87:6E:FC:1E:5C:C1:26:50:30:CF:18:55:39
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/Ki2TDC0WRIdu_B5cwSZQMM8YVTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.165.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9b:28:e6:3e:74:f6:05:61:0f:11:f0:f3:9a:13:b4:33:69:
f2:7c:6a:01:f8:a9:30:8e:86:cc:ee:31:82:cf:ee:eb:2f:c4:
60:8d:b1:7d:49:da:4c:0e:ef:7b:26:00:33:1c:d8:89:38:ea:
b1:96:05:38:b9:37:10:7d:ce:b4:42:b4:d2:20:18:4c:50:a5:
d8:5a:2d:9e:4c:41:d8:50:14:e9:d6:5f:96:81:82:a3:2b:ee:
13:35:78:e5:41:7f:ef:54:df:fa:54:3f:fe:a9:89:a5:c0:63:
cd:fd:d9:d0:31:ad:3e:23:42:1c:4f:ec:d6:9d:b8:4b:5d:2b:
f0:c9:9d:70:44:80:41:36:9a:31:54:e9:34:10:8a:06:74:c4:
ad:29:21:e9:88:78:a2:9d:ea:29:ab:db:60:15:9f:0e:09:07:
8b:60:35:9d:f8:f0:0a:f3:61:92:10:5b:72:4c:ce:c6:e9:4b:
8e:1b:3e:12:59:b8:93:57:6a:d3:cb:94:8b:8d:0d:fa:c0:ff:
27:c6:6f:d6:62:96:c0:f8:98:12:9e:82:29:95:38:73:2f:0c:
7a:27:74:77:7d:37:85:5b:2d:69:dd:eb:04:2d:86:7e:bd:67:
7a:8f:cf:4d:2f:56:74:cd:91:74:f5:65:3a:a5:de:e0:7c:b4:
f9:17:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:04 2025 by rpki-client