Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/jMmrNQkU-Wl8nhqphJ0S2kMMap4.roa
File: jMmrNQkU-Wl8nhqphJ0S2kMMap4.roa (raw, json)
Hash identifier: w1SRpYfIAYGme1dhL10GuQ8DpSA3thFudC8nSwDjKsE=
Subject key identifier: 8C:C9:AB:35:09:14:F9:69:7C:9E:1A:A9:84:9D:12:DA:43:0C:6A:9E
Certificate issuer: /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial: 0187E6B14D88A11C78336104A9F3CD720DB2
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/jMmrNQkU-Wl8nhqphJ0S2kMMap4.roa
Signing time: Thu 04 May 2023 12:16:32 +0000
ROA not before: Thu 04 May 2023 12:16:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60543
IP address blocks: 91.238.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:b1:4d:88:a1:1c:78:33:61:04:a9:f3:cd:72:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Validity
Not Before: May 4 12:16:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cc9ab350914f9697c9e1aa9849d12da430c6a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:37:9d:6e:b9:b2:b8:9d:f4:07:b6:04:16:
cf:6e:d9:6c:d7:77:9c:75:fd:6b:7c:a0:18:ec:d5:
97:88:48:c8:a4:e5:f6:bf:57:a3:bd:a9:69:a8:cc:
eb:e4:4f:b4:ec:50:43:f6:9a:d3:31:fc:8c:ca:02:
b7:26:f7:f7:5b:53:87:a4:40:dc:28:4b:09:10:a9:
79:b8:f0:d1:0a:56:a1:19:26:69:9d:32:0d:64:15:
1e:82:c7:31:f3:01:6b:bc:d8:29:13:f4:86:c6:fb:
05:f7:40:5b:90:2a:8e:60:1c:be:7e:fe:12:60:3e:
4d:8f:71:60:4e:ff:3c:2a:8e:f0:f7:fb:f8:00:16:
fc:6e:a5:23:4d:6c:d0:fc:6e:f8:cf:4b:3b:ba:4c:
10:29:f6:72:45:bf:20:8a:29:e9:81:fd:48:7b:53:
e0:c7:7d:d8:c9:91:23:62:33:42:6d:aa:97:26:cd:
91:e8:70:f7:f2:79:4a:cc:cf:e7:80:5a:8d:c7:58:
8d:72:12:39:01:66:f2:e9:ab:6c:2d:04:75:73:1c:
b2:fd:48:ed:9f:11:d1:da:8a:16:d0:ce:d0:97:43:
48:01:9a:e6:94:d8:3c:4a:ab:f7:ca:24:ec:67:85:
27:aa:db:83:fb:82:be:27:8f:ab:9e:1d:ca:94:58:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:AB:35:09:14:F9:69:7C:9E:1A:A9:84:9D:12:DA:43:0C:6A:9E
X509v3 Authority Key Identifier:
keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/jMmrNQkU-Wl8nhqphJ0S2kMMap4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.150.0/23
Signature Algorithm: sha256WithRSAEncryption
48:63:8e:aa:6a:ec:ae:fa:4b:78:bd:5e:fe:e6:6c:2d:42:13:
cc:b6:1d:c3:07:16:8f:f3:95:4c:65:61:24:89:9e:a1:49:8d:
cd:24:b8:e5:2e:49:9c:14:33:67:e0:e6:27:a4:b7:cb:02:ef:
8d:cd:1a:fd:59:6f:db:43:6a:e1:4b:e1:cf:bc:93:f5:96:64:
c5:d6:1d:22:df:19:4c:24:66:c2:fa:c8:97:ff:a3:aa:2f:d5:
6f:8a:5a:20:9e:10:35:b5:d9:89:3a:d4:70:05:ef:2c:8d:7e:
a3:17:a7:50:a6:eb:1f:8d:7a:95:7e:a9:b3:1e:96:91:e4:3a:
58:24:e9:ca:36:0a:0f:dd:5d:be:08:63:41:95:01:1b:ee:90:
76:69:75:a8:a3:84:ad:6e:eb:87:f2:dc:95:da:92:69:49:39:
0b:d1:08:4a:09:94:17:05:81:12:83:9b:d4:0d:b8:1c:15:33:
e4:4e:c3:bd:66:aa:a0:48:5d:a1:2e:83:18:c2:9a:e2:11:16:
23:5a:8e:c4:f2:1a:af:58:70:81:fb:0a:d1:4e:63:3c:1e:18:
43:22:a7:83:06:b5:56:f0:6b:f8:62:2d:22:60:07:35:4f:59:
00:ff:97:82:c6:93:6c:69:aa:b8:bc:8a:17:62:e3:bb:8d:51:
77:8d:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:33 2025 by rpki-client