Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/C5gmZktAltga3XV4ldcf6ipP6kA.roa
File: C5gmZktAltga3XV4ldcf6ipP6kA.roa (raw, json)
Hash identifier: pxwq+GSZX74cFjPY2DkxH/vNw/krk3rjLv0NWWr7zGI=
Subject key identifier: 0B:98:26:66:4B:40:96:D8:1A:DD:75:78:95:D7:1F:EA:2A:4F:EA:40
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 0323C867
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/C5gmZktAltga3XV4ldcf6ipP6kA.roa
Signing time: Sat 01 Jan 2022 16:06:47 +0000
ROA not before: Sat 01 Jan 2022 16:06:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15461
IP address blocks: 193.93.12.0/22 maxlen: 32
91.219.220.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52676711 (0x323c867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Jan 1 16:06:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b9826664b4096d81add757895d71fea2a4fea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:65:73:fb:14:69:74:00:b9:46:30:c0:09:
70:10:9e:4a:5a:34:ca:40:a9:ff:4c:28:e3:c4:35:
56:b8:e4:59:11:50:4d:4c:f2:f9:1a:67:e2:13:2f:
a7:4e:63:1b:74:cd:58:f9:61:0d:a1:d8:7b:5b:82:
66:d9:dd:42:1b:16:61:23:76:ae:10:c4:f7:a3:0b:
c1:b9:eb:73:aa:48:c0:9c:f5:d3:cf:9a:c4:2d:d4:
94:63:12:38:8a:f0:a4:f2:60:13:9b:88:00:3d:1d:
cf:65:da:ac:18:f3:1e:93:b7:37:bf:d6:74:2e:65:
4b:4f:82:b4:90:09:a7:ae:b3:ab:5f:e3:29:bd:45:
d2:45:7f:93:4f:82:20:13:10:53:68:69:ef:59:44:
de:b9:f0:de:dc:83:b7:0d:79:e0:dd:5d:5b:60:71:
74:52:20:d0:a3:d7:98:57:f3:45:ea:fc:87:cc:87:
95:cf:7f:d5:d7:ad:fb:80:45:61:c5:56:63:3a:e4:
51:0c:d8:7e:9d:b8:82:5d:4f:1b:ac:38:8a:a8:ef:
1b:a5:d0:9c:ec:c8:af:0c:44:c3:e3:71:be:18:b6:
c8:2a:87:8e:84:39:b8:d5:90:56:2c:62:4d:80:56:
1b:0d:50:c3:a8:bf:fb:b1:19:ec:28:9b:ac:8e:55:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:26:66:4B:40:96:D8:1A:DD:75:78:95:D7:1F:EA:2A:4F:EA:40
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/C5gmZktAltga3XV4ldcf6ipP6kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.220.0/22
193.93.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:fe:da:40:b6:aa:05:65:68:f1:61:85:a5:90:07:27:2d:0d:
47:83:a9:7a:1e:44:e1:b3:6a:6f:e5:6d:f9:21:9c:b3:47:cc:
35:0a:0f:d3:7a:b0:fc:90:a1:d6:20:a6:76:db:84:5b:51:57:
fd:fb:6d:c7:12:c8:ff:88:15:a8:a3:2d:e8:e3:45:44:19:6c:
2e:d2:9e:7b:76:ef:08:ab:70:6a:ac:9e:87:e3:e7:fa:65:a6:
83:e3:79:63:1d:8e:dd:94:89:e3:3b:9f:a2:a2:64:0a:8f:12:
24:13:d7:fa:f1:32:71:65:6f:53:2e:ce:83:b8:0d:a8:f8:24:
bd:14:3b:be:a7:c1:c1:77:8f:25:51:70:73:58:ca:06:d2:0c:
2b:57:00:12:62:4d:2d:bc:cb:3c:64:19:cf:ba:d8:5b:43:7e:
80:24:fb:38:41:aa:81:ec:e5:50:2d:04:54:7e:a2:4c:91:cd:
fa:0c:39:46:19:04:9c:7e:bd:44:32:99:c5:f3:75:6f:36:7d:
b2:5c:2a:df:e1:05:62:70:65:f1:9a:2f:ac:23:cd:e6:27:b2:
b2:00:9e:00:1a:a1:91:6f:ed:e2:d3:6c:97:c9:af:16:3f:d4:
41:c6:4a:36:e2:26:f0:1d:ed:79:bf:a9:15:9d:2a:84:7b:90:
49:77:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:32 2025 by rpki-client