Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/CODIe8hZFmT2DjTgOo47GttWZaY.roa
File: CODIe8hZFmT2DjTgOo47GttWZaY.roa (raw, json)
Hash identifier: A6dozTFfZl/FTxcFDEbI1NeltvZSI0Wb2I6gCCewUFo=
Subject key identifier: 08:E0:C8:7B:C8:59:16:64:F6:0E:34:E0:3A:8E:3B:1A:DB:56:65:A6
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 0135E8C6
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/CODIe8hZFmT2DjTgOo47GttWZaY.roa
Signing time: Sat 01 Jan 2022 11:04:01 +0000
ROA not before: Sat 01 Jan 2022 11:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57361
IP address blocks: 91.231.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20310214 (0x135e8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Jan 1 11:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e0c87bc8591664f60e34e03a8e3b1adb5665a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:da:af:26:5c:9e:b4:d0:f7:81:d4:69:3d:
87:99:3f:30:5c:d8:46:00:cd:81:df:8c:cd:7f:4d:
dc:55:fb:e2:cb:de:a3:d3:9e:d5:34:7a:9b:06:17:
32:08:a1:fa:0d:80:3a:de:ea:e8:85:5b:6c:2b:96:
14:69:0d:f3:ed:19:03:e7:3d:be:09:6c:04:c6:ec:
11:0f:7a:f6:f7:1a:91:7d:c8:11:58:f8:52:93:cf:
97:ea:f9:74:23:b7:5a:d5:d0:a6:28:98:82:6c:0d:
fb:1c:fd:67:1b:7a:f8:89:be:e9:92:40:77:d9:f8:
2e:0b:a2:c2:3b:f4:56:00:7c:1a:60:f3:46:26:e2:
48:b0:06:ce:14:5b:8b:70:cc:99:20:f8:fa:49:a9:
00:13:3f:63:07:a3:47:39:87:ff:c8:77:fc:0d:b8:
07:17:4d:a6:ba:23:1c:5b:d6:54:e4:15:a2:bd:7c:
e4:2d:e7:62:25:87:f9:e6:cd:04:51:3a:bf:29:95:
d2:68:f6:5a:be:84:b8:e9:6a:16:e3:47:95:0f:69:
2b:65:f1:98:b5:40:c0:4f:bb:15:98:a6:8c:55:a5:
a6:de:fe:33:15:1d:00:b6:66:1d:a6:ea:c3:5e:d4:
66:ef:e3:64:df:c9:af:42:b8:8c:57:90:b3:76:bb:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:C8:7B:C8:59:16:64:F6:0E:34:E0:3A:8E:3B:1A:DB:56:65:A6
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/CODIe8hZFmT2DjTgOo47GttWZaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
75:37:1f:97:58:8e:c4:03:b7:a6:39:6d:1d:a6:b6:86:53:65:
a2:55:a0:70:79:2e:b4:48:75:b4:bf:da:d4:4c:8d:23:cf:b6:
4d:73:a2:d1:67:c5:09:69:ea:f4:39:9a:cd:f7:56:d2:68:d7:
a3:d6:07:70:a1:20:77:bc:d2:a9:9f:c1:4c:27:a2:2c:fa:a5:
ad:e3:72:11:f6:03:b9:5b:59:24:5c:ec:73:0d:7d:c0:11:28:
f0:b6:4e:3e:46:a7:73:f3:a2:83:cb:14:2a:e7:b8:3f:f9:7f:
9a:96:1d:0a:ae:dc:75:63:65:31:ee:07:be:7a:95:7c:00:68:
21:a1:a2:4d:85:f2:ab:8a:8d:c3:b7:f1:71:4a:a9:32:a7:57:
56:ce:25:43:06:0f:c8:d9:53:12:57:97:09:7e:39:62:54:aa:
fc:a6:01:c5:6f:af:7b:ed:b4:0f:ac:18:1b:5d:3c:05:9d:9a:
5f:2d:30:f5:15:63:56:89:a4:df:e7:44:3b:f8:0b:f1:41:6e:
ac:57:c5:12:63:4e:e0:ea:e5:d3:f7:10:0f:2d:47:0e:41:63:
f6:e6:fb:df:13:c3:68:4a:13:54:81:eb:bf:58:a5:ff:e7:78:
31:66:24:3f:4f:7d:7c:40:b8:36:c0:58:a3:7b:8c:cc:b7:2c:
12:ed:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:25 2025 by rpki-client