Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/_J_PWbwN6Fdy6GqTr3ebwtcAYqg.roa
File: _J_PWbwN6Fdy6GqTr3ebwtcAYqg.roa (raw, json)
Hash identifier: 3wHkoQeGLiQnRzlHUZZPqNPi2xjHuL2KbrwYIkYl/fI=
Subject key identifier: FC:9F:CF:59:BC:0D:E8:57:72:E8:6A:93:AF:77:9B:C2:D7:00:62:A8
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 018570F0B078EDECC0D676A18EFBFDA7F1B2
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/_J_PWbwN6Fdy6GqTr3ebwtcAYqg.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20910
IP address blocks: 91.228.4.0/22 maxlen: 22
195.28.26.0/23 maxlen: 23
91.194.76.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b0:78:ed:ec:c0:d6:76:a1:8e:fb:fd:a7:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9fcf59bc0de85772e86a93af779bc2d70062a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:1d:2a:ab:78:aa:cb:1c:de:c4:96:e4:51:
56:bd:63:05:76:66:ba:4a:ed:2c:29:2f:3c:e6:5b:
6a:49:68:01:6b:ce:78:a6:5b:b4:dc:13:b2:08:87:
03:73:ee:72:2d:de:bc:7e:d2:73:10:8e:09:3d:d0:
3d:58:99:26:ff:9e:99:f6:f2:51:ae:cc:91:7c:97:
7d:58:fb:8a:20:fc:28:b7:25:32:39:b6:fa:a4:f1:
54:6b:71:3a:f7:26:65:6c:ff:d9:2b:79:e4:b4:d2:
78:33:ca:3e:8f:1f:44:b1:57:72:1e:fa:54:d6:cb:
da:a4:82:fb:8c:11:5f:26:95:23:72:43:ec:88:2e:
31:66:f7:c6:c0:88:8a:a0:21:5e:86:8a:20:6e:24:
f2:3e:e8:9d:45:4e:46:fd:5a:61:20:82:d6:6d:97:
e4:7f:ae:9b:b6:d2:c1:cb:f3:52:d0:09:bd:e0:1e:
f5:20:35:b9:03:7b:81:c8:aa:70:f6:fe:c1:9d:36:
e3:bc:19:4e:eb:94:00:45:f8:30:f5:a3:3a:06:67:
86:c6:5e:97:b0:be:a4:b8:26:d6:93:f5:28:af:69:
29:a6:07:e2:a2:98:bc:05:6a:0f:3c:0c:a0:3f:6a:
05:15:e6:a4:18:d9:2a:a1:9f:59:85:6c:6a:41:b5:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:CF:59:BC:0D:E8:57:72:E8:6A:93:AF:77:9B:C2:D7:00:62:A8
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/_J_PWbwN6Fdy6GqTr3ebwtcAYqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.76.0/23
91.228.4.0/22
195.28.26.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:f3:00:9f:95:7c:19:8b:66:aa:66:b9:21:bf:9b:e0:ae:e1:
72:57:8d:8b:12:5d:57:44:38:8e:10:bb:80:a7:c9:99:e8:c5:
c1:24:b1:25:32:9f:12:6c:d9:95:32:79:8c:83:35:15:11:1d:
98:c4:ef:63:a7:0c:3d:0e:b2:74:b3:33:9f:bb:05:37:1b:62:
78:aa:18:00:0c:99:13:f2:bd:76:d4:99:c6:8a:fb:d6:ca:fb:
ab:ff:41:90:11:ec:e5:70:8b:63:9d:42:18:59:a0:a2:aa:c5:
62:92:9c:43:26:29:be:0f:1b:83:f7:a4:b0:a1:3f:94:63:4e:
30:c6:99:05:b4:5a:1a:f4:2a:67:db:6c:7b:88:4f:10:32:45:
f7:98:29:27:e8:72:f5:f4:1a:36:12:82:c9:56:ce:d2:d1:0b:
be:5e:0b:5f:e4:8f:4e:6f:3a:a2:52:df:e6:1c:a1:20:a6:81:
cd:23:c4:16:1f:cc:65:28:dd:3a:cb:27:b5:c0:62:3c:59:22:
7d:e7:3a:0b:dc:64:b6:bf:1f:a3:68:06:73:b3:9d:e8:17:55:
22:1e:9c:da:bf:a4:32:08:56:8f:32:09:e5:7b:c9:c6:be:64:
11:a0:47:6c:82:17:24:ae:97:c9:cd:b0:3e:22:2f:4a:1f:42:
02:e8:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:06 2025 by rpki-client