Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/v6aIkrPWrKtv7rS9974Gilsds2g.roa
File: v6aIkrPWrKtv7rS9974Gilsds2g.roa (raw, json)
Hash identifier: 7IpzEc+VwRyF0sZl+Yyz+ELKlZ0V52vdJDFwrcDV8Os=
Subject key identifier: BF:A6:88:92:B3:D6:AC:AB:6F:EE:B4:BD:F7:BE:06:8A:5B:1D:B3:68
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 0537EFD2
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/v6aIkrPWrKtv7rS9974Gilsds2g.roa
Signing time: Sat 01 Jan 2022 13:57:41 +0000
ROA not before: Sat 01 Jan 2022 13:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49964
IP address blocks: 91.220.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87551954 (0x537efd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jan 1 13:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa68892b3d6acab6feeb4bdf7be068a5b1db368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:ac:d0:7d:fb:52:4d:0c:4d:90:ac:2d:07:
67:1a:e1:10:da:f8:0c:67:96:66:e2:32:f3:90:cc:
6c:eb:45:0c:21:f1:61:42:a5:e4:27:e4:1b:04:6a:
cc:f3:4b:3c:05:b0:79:48:b4:c6:f7:de:3f:f6:71:
69:62:c9:f2:a0:cf:53:29:78:88:9d:a6:2c:f7:86:
52:07:4d:77:33:2b:6d:e2:21:14:8d:75:f6:70:2f:
6f:03:1a:b8:06:ac:08:ec:30:48:a0:f7:4c:e3:5d:
21:89:15:ba:0e:61:9e:de:de:37:2e:55:b5:4d:a2:
fc:fa:2f:3f:eb:7d:ba:2f:c4:31:aa:52:48:80:32:
e5:96:73:f4:f9:ba:1a:f6:ec:61:59:2e:10:3f:13:
3c:0f:2f:84:98:2a:b6:ae:e1:9d:e5:eb:74:36:92:
35:69:27:fa:5f:63:7c:07:af:41:3e:22:4d:06:7c:
29:f9:c7:07:08:fa:ba:d8:07:12:d8:de:26:c5:2c:
8c:7b:a8:9a:88:fd:4b:12:24:5b:99:46:46:5a:09:
ae:dd:be:c5:e7:52:90:38:35:2d:ef:77:a3:11:f7:
64:7c:1c:32:2f:ae:d7:57:55:2f:2b:d4:bd:64:0a:
62:88:51:df:6b:4c:46:a0:6b:85:95:07:57:03:b5:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:88:92:B3:D6:AC:AB:6F:EE:B4:BD:F7:BE:06:8A:5B:1D:B3:68
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/v6aIkrPWrKtv7rS9974Gilsds2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:84:f7:09:a5:ed:af:a5:44:03:24:a1:29:4b:bd:8c:65:1d:
18:13:f6:ac:51:de:84:9a:21:55:d8:25:48:23:ac:8c:c2:d1:
fc:d5:ec:b0:2e:64:dc:5b:0d:a7:a9:65:90:eb:2d:3e:1d:5f:
94:93:28:5e:63:c1:97:b1:54:4d:97:98:e5:fc:62:1e:4a:c0:
56:cd:c1:12:4d:7a:12:54:ef:c7:14:31:e1:4a:4d:54:0d:0b:
d8:32:a3:61:1a:be:d1:eb:6a:8e:ec:de:86:2c:96:27:5c:14:
b7:ea:0e:c3:a3:a5:48:3b:fa:b1:0c:f9:0d:ad:f6:9f:0c:d5:
dd:28:ae:4c:17:0c:90:0a:dd:00:7a:79:aa:2e:4e:61:5f:6f:
fe:f9:ba:5f:d0:ac:09:c1:37:5b:16:99:d3:68:46:84:b2:ca:
42:16:6b:1f:c8:1a:eb:55:cb:93:2a:3e:a8:ac:e4:98:90:de:
e6:ec:9c:8e:6c:ed:c8:8c:e2:29:1c:10:57:57:02:f8:cf:56:
27:de:65:52:00:f7:87:1d:04:a1:97:bd:15:7e:67:1f:2e:80:
46:d3:90:e8:f8:3c:e5:61:5e:76:f4:f7:74:08:48:ce:30:36:
75:a2:ff:eb:c4:5d:a7:82:58:f9:bd:dd:85:90:fb:d9:34:59:
f5:8d:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:38:10 2025 by rpki-client