Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/a1Iw3YEev-xrSezOFFvefwN9hF0.roa
File: a1Iw3YEev-xrSezOFFvefwN9hF0.roa (raw, json)
Hash identifier: vQ7RUkfshsrEdOcHH4xcLlSEtfxKZHYv6ioYunEhCXU=
Subject key identifier: 6B:52:30:DD:81:1E:BF:EC:6B:49:EC:CE:14:5B:DE:7F:03:7D:84:5D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01857230DC4490E857DBA8D612D5B788D2E8
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/a1Iw3YEev-xrSezOFFvefwN9hF0.roa
Signing time: Mon 02 Jan 2023 11:14:42 +0000
ROA not before: Mon 02 Jan 2023 11:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149440
IP address blocks: 193.247.144.0/24 maxlen: 24
91.218.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:dc:44:90:e8:57:db:a8:d6:12:d5:b7:88:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jan 2 11:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5230dd811ebfec6b49ecce145bde7f037d845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:b2:c2:46:0a:22:af:7c:ad:4f:ec:49:91:
41:25:77:24:f5:b8:60:af:de:40:47:31:55:f3:27:
1a:20:2b:c4:41:73:74:ce:5f:26:28:41:f8:9e:1b:
0d:fd:9e:59:35:43:b1:8d:8b:53:0b:dd:da:10:ae:
5f:ba:ff:18:ed:ab:f6:ed:61:52:91:95:14:77:8f:
8f:21:bf:da:76:f2:93:59:d1:91:e4:ac:7f:fd:c9:
e6:bb:9a:4a:f4:17:68:8f:97:e3:f3:a7:64:11:74:
33:60:16:b6:1e:9c:9c:f3:72:04:74:47:54:66:f4:
8b:8c:d2:bc:ce:79:6d:b0:cf:77:95:b5:72:85:89:
38:07:9c:28:b2:8f:63:9c:cb:26:73:84:38:74:8f:
e6:aa:58:67:68:9b:cb:ee:c9:f5:3b:85:48:fd:33:
38:9d:97:9c:0e:84:0c:e1:ec:67:6c:1e:63:e3:c8:
84:da:da:7c:41:ab:49:89:8d:9f:36:58:a2:08:ca:
e1:40:ee:d8:e8:94:b4:ef:61:74:f1:6c:3b:81:ab:
a7:1b:6a:a5:1e:c4:6e:c8:73:91:a2:f5:24:a8:44:
ad:75:71:c6:99:a3:97:b7:ba:03:b9:ff:fe:97:bd:
17:23:06:37:58:be:29:47:1a:dd:f5:74:f7:b6:38:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:30:DD:81:1E:BF:EC:6B:49:EC:CE:14:5B:DE:7F:03:7D:84:5D
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/a1Iw3YEev-xrSezOFFvefwN9hF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.183.0/24
193.247.144.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cc:5e:d4:9d:cb:e4:28:8e:6f:74:4a:c4:f1:67:99:d7:8c:
f2:56:83:72:a9:84:e0:1f:f8:02:5f:f4:a3:48:01:24:82:53:
a0:29:8e:b4:f3:50:41:1f:60:09:cc:f5:38:24:f1:c3:62:54:
8c:3c:2c:91:85:58:d0:9c:32:1a:72:36:70:37:b6:8d:7e:89:
53:ac:7c:48:30:96:76:ac:50:53:7f:73:6f:bd:75:2d:e4:93:
50:32:c9:15:1f:6c:f1:d5:18:81:c0:12:96:c4:e1:a6:42:a9:
14:04:de:64:eb:41:64:6e:7c:ca:f8:d8:16:9d:1c:be:a8:39:
68:29:23:31:c0:9b:d3:17:d7:84:19:97:ca:0e:69:42:21:55:
a3:4b:59:c3:26:cf:d9:b2:74:b3:2e:19:f1:f1:54:d6:ca:d3:
0e:de:c2:67:dd:c7:16:7d:4e:3c:c7:81:bf:7b:73:4e:33:c4:
da:72:87:32:68:35:d5:5b:62:b0:d5:0d:c6:c0:6f:55:1a:65:
a6:20:1c:cc:55:a3:93:32:72:43:91:b9:b1:e4:9b:8e:66:75:
09:65:f7:41:75:50:47:bf:2b:47:9b:68:4d:07:2c:69:28:4c:
f0:d7:15:82:32:cc:92:ba:5e:11:07:41:4f:fd:80:01:34:54:
60:82:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:02 2025 by rpki-client