Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/AljtWduPtPQOryWH20Fwzn8P7ME.roa
File: AljtWduPtPQOryWH20Fwzn8P7ME.roa (raw, json)
Hash identifier: 0qqKKacDV3k3lQt2PjKLorOeQSGeh+sxLndE9ozr+dM=
Subject key identifier: 02:58:ED:59:DB:8F:B4:F4:0E:AF:25:87:DB:41:70:CE:7F:0F:EC:C1
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 01034D
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/AljtWduPtPQOryWH20Fwzn8P7ME.roa
Signing time: Mon 13 Jun 2022 11:54:14 +0000
ROA not before: Mon 13 Jun 2022 11:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204726
IP address blocks: 91.219.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66381 (0x1034d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Jun 13 11:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0258ed59db8fb4f40eaf2587db4170ce7f0fecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:4f:9b:4a:b4:2f:ed:1e:27:a8:7a:d7:15:
63:b5:9c:e0:f7:e7:d7:e5:fd:71:2c:e4:58:8d:14:
4d:63:7c:47:2a:b1:11:b4:36:52:cd:f2:c5:66:f3:
16:02:38:af:47:ac:bd:cf:b9:4c:36:e2:fa:0a:91:
30:d8:bc:a3:ca:84:06:a3:2f:60:9f:52:e4:33:c0:
9a:13:95:5e:08:42:fa:7e:9c:60:c8:10:7d:b1:80:
f5:5f:46:bf:db:ae:f0:0b:5b:4d:2f:89:b3:10:1c:
a3:10:db:e4:dc:cf:3c:cf:0d:0e:14:14:31:b0:4d:
43:90:e9:1c:e3:c1:3b:40:39:be:f5:d9:65:52:d8:
2e:ad:01:5b:16:ae:70:14:97:ef:a6:e5:5b:d8:90:
ce:30:97:63:25:2b:25:d2:17:31:45:88:52:34:1d:
6f:81:c8:e4:23:13:ce:27:19:79:05:45:0c:e9:57:
97:53:6d:b5:dd:70:80:21:54:6b:80:53:7f:14:9c:
13:2f:22:0b:d3:93:f6:f8:46:15:91:7c:fc:ab:52:
64:d2:94:4e:9b:e3:f1:d5:64:cf:9d:74:c7:d4:0f:
58:a8:f0:d2:70:97:91:a4:66:02:2e:46:b1:29:9f:
aa:fe:be:b8:75:1b:12:c6:bc:3f:00:ec:5d:4f:75:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:58:ED:59:DB:8F:B4:F4:0E:AF:25:87:DB:41:70:CE:7F:0F:EC:C1
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/AljtWduPtPQOryWH20Fwzn8P7ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7e:53:8f:18:ba:b1:ee:65:e7:63:2a:bb:4d:0e:70:9c:78:
47:90:ea:32:3a:61:30:0a:e2:72:05:b7:c8:4d:aa:70:f0:cc:
9d:6d:22:79:1f:8f:0d:36:79:e9:dc:c2:bd:15:ec:bf:a2:97:
65:8f:ac:ba:9b:22:43:08:8c:22:c3:f4:31:e8:a7:9e:95:77:
43:34:06:9b:a5:38:25:f4:cc:62:d0:8c:e9:dc:38:36:76:32:
29:ba:d3:47:d6:3a:02:de:27:50:61:7f:ea:fe:e0:ff:cc:dd:
0c:7a:f4:0e:ea:83:7e:1f:93:cd:66:19:5e:f0:d9:4b:ad:f2:
f4:9a:7a:72:34:8f:ed:c9:1c:e6:ef:11:1e:1a:27:b1:a2:a8:
46:00:40:97:c0:2e:b9:06:84:40:da:cb:21:4d:e3:f3:c9:c1:
3b:96:7e:13:82:b8:b9:0b:3f:f6:ab:8f:42:48:ab:f9:95:d5:
92:16:37:d9:71:66:53:7e:55:ed:bd:af:83:60:d9:86:5d:ff:
4d:ef:b8:b4:40:8a:f0:a1:c4:b9:4b:3d:41:67:fd:9b:52:c8:
fc:72:d8:0b:ee:4c:cc:4f:e8:f7:52:a7:29:49:b5:3f:93:99:
a8:80:46:4b:ba:03:0f:69:ce:6e:a9:de:a6:7d:2b:d6:d8:37:
b5:26:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:08:50 2025 by rpki-client