Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/6s_Q7LXMMvwDIdjm8RjPZnGtAwU.roa
File: 6s_Q7LXMMvwDIdjm8RjPZnGtAwU.roa (raw, json)
Hash identifier: K3LSxsjl+Z+48i1xkqFUurPZZFE2hWbF/GbH4+XQHCE=
Subject key identifier: EA:CF:D0:EC:B5:CC:32:FC:03:21:D8:E6:F1:18:CF:66:71:AD:03:05
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 48E2
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/6s_Q7LXMMvwDIdjm8RjPZnGtAwU.roa
Signing time: Mon 28 Feb 2022 14:45:39 +0000
ROA not before: Mon 28 Feb 2022 14:45:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198771
IP address blocks: 91.239.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18658 (0x48e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Feb 28 14:45:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eacfd0ecb5cc32fc0321d8e6f118cf6671ad0305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:01:89:fe:2f:2a:d6:8e:c3:8d:65:7b:d0:
89:6c:29:9a:2a:57:32:b8:93:4a:72:4f:66:df:13:
70:c6:b3:ea:ea:4c:96:95:1e:13:79:e8:ef:11:22:
b1:6f:c8:db:ea:52:99:aa:10:fe:7d:c0:65:b0:e2:
d5:b6:f4:53:1c:93:f0:fa:ad:38:ab:6a:1a:18:1b:
26:63:7a:73:d1:95:2a:fc:b3:aa:1b:bd:a5:49:f4:
1d:9d:ac:15:4f:3b:15:28:63:e5:15:43:bc:ca:3a:
6a:31:66:f8:3f:4d:a2:f1:f7:ca:92:71:ba:a3:cc:
f3:b6:8f:c9:7a:f3:00:86:00:d7:96:db:1b:89:c5:
cf:5d:a7:0c:b2:05:d2:23:1d:c4:95:48:41:00:c5:
e8:7e:51:1a:23:23:2a:9f:74:96:78:7b:7c:9f:a3:
1f:8b:d0:5f:31:e5:5f:d2:01:f3:e6:a6:22:e1:aa:
56:e4:b0:13:37:d0:ab:8a:0e:2b:8d:c1:a9:c3:09:
08:ac:4f:81:2f:aa:da:58:4d:ce:80:7f:2c:9d:cd:
1c:f8:69:bc:86:7a:39:56:e4:8c:b0:01:e4:28:23:
04:f2:8f:6a:b6:9a:02:d3:a5:03:89:3a:60:06:4f:
f0:07:7a:f9:11:a4:98:90:81:4f:c2:cb:89:82:ad:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:D0:EC:B5:CC:32:FC:03:21:D8:E6:F1:18:CF:66:71:AD:03:05
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/6s_Q7LXMMvwDIdjm8RjPZnGtAwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.13.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5d:90:ee:27:b8:0f:c2:75:3d:2b:7c:88:48:63:4d:c6:91:
dc:b7:be:52:e5:6e:e8:59:cb:79:8e:c5:69:4c:0f:ea:89:54:
5d:54:3d:04:06:0e:8f:13:7a:c8:cc:ac:a9:14:8a:1d:50:bb:
5b:df:13:d6:80:06:47:ec:1c:ce:80:8b:22:dd:df:25:2d:ae:
c5:f3:d0:dd:30:8d:a8:bf:cb:c4:25:9f:62:fd:e8:3b:c6:11:
1f:d3:34:41:a4:7b:7e:ba:68:dd:6b:c1:1b:17:1b:4a:4d:ad:
23:09:90:46:e2:e5:94:75:1c:59:01:e2:cf:44:7b:c9:25:b9:
f5:d9:fe:5b:8d:fa:fe:bc:83:43:1e:fd:6b:5a:6a:d4:88:d9:
44:1e:e9:7b:1e:1c:e0:a8:bb:42:3b:af:af:5c:9e:eb:fa:7a:
46:b8:51:22:ce:5e:b1:7e:f8:62:5b:43:71:be:b4:c6:be:3c:
88:5a:6c:80:53:aa:0a:f1:ba:23:ef:56:51:40:86:c4:55:de:
81:f8:11:83:22:23:dd:6e:f1:55:65:b7:4a:11:7d:33:30:02:
d6:15:23:45:29:b2:d1:90:f2:16:21:73:bb:04:ac:e1:fc:ac:
ff:71:da:f7:5a:ad:a3:f7:70:bc:e3:27:8c:ac:3c:8e:1f:1c:
bd:8a:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:29 2025 by rpki-client