Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/L01TR9NAA-aQZjAWApGFwhueZZM.roa
File: L01TR9NAA-aQZjAWApGFwhueZZM.roa (raw, json)
Hash identifier: YZQ8B84cxB56AZWznCZg5W9p4HS/ZsB2cZ5m3RtzWjg=
Subject key identifier: 2F:4D:53:47:D3:40:03:E6:90:66:30:16:02:91:85:C2:1B:9E:65:93
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01856F94BDD3BBC831DB2ECF134EE8ED4549
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/L01TR9NAA-aQZjAWApGFwhueZZM.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198771
IP address blocks: 91.239.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bd:d3:bb:c8:31:db:2e:cf:13:4e:e8:ed:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f4d5347d34003e690663016029185c21b9e6593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:71:bc:fe:2e:d9:b0:73:23:46:81:55:23:
2e:8e:40:01:de:b8:0b:4a:13:62:08:98:97:7a:4c:
93:eb:ad:17:aa:7d:1d:fd:1a:59:f8:a8:33:45:c0:
cf:77:82:97:ff:fe:df:1b:c4:35:22:ec:76:ee:9a:
af:99:3e:85:d0:79:6d:aa:ca:d2:57:8a:05:b9:dd:
22:18:b7:66:04:c8:cd:72:a0:ed:44:c5:d1:89:5c:
94:6e:40:e1:11:44:b8:de:9b:2f:ee:f8:4c:0a:c6:
5a:d3:3c:2b:40:c0:15:4a:09:d4:e2:bb:bb:a6:3c:
72:e9:cd:7a:87:cb:bb:39:f0:df:92:27:dc:62:20:
5a:c1:76:fb:18:40:aa:11:ee:c6:93:33:ac:0c:cb:
af:c9:d8:c4:0a:4f:ea:2e:55:bc:6d:32:6d:7e:d8:
44:36:c7:59:02:8b:ba:d2:67:e7:b4:ac:d0:1b:be:
17:03:f3:43:0f:5d:a1:57:dc:f0:46:06:0c:bc:a6:
44:13:b2:84:2a:6d:96:22:29:e5:62:99:39:7b:56:
13:bc:f2:27:44:b0:c9:c5:4f:7f:07:ff:65:d2:b4:
44:db:46:fe:5f:ed:9d:5a:e1:2b:00:8f:c5:29:4c:
fe:f6:32:bc:9e:9a:60:96:20:3c:43:49:a9:ba:10:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:53:47:D3:40:03:E6:90:66:30:16:02:91:85:C2:1B:9E:65:93
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/L01TR9NAA-aQZjAWApGFwhueZZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7c:a9:6a:c8:2f:6a:52:dc:95:72:77:ca:b4:9e:fe:68:d7:
83:73:c5:0e:fb:88:e1:d0:30:5f:12:04:e6:f5:00:60:9e:e4:
1f:73:99:c5:a9:5f:9a:76:72:eb:e4:42:09:eb:e5:4b:98:e4:
09:ca:0a:43:c9:4a:52:dd:90:00:7f:69:ab:8d:dd:2d:1e:9f:
78:cf:c2:fe:ec:5a:51:ae:f3:49:ae:f0:01:3f:38:71:90:44:
89:ae:c7:31:3b:f0:04:ae:20:10:c1:75:ac:01:83:71:bb:ec:
75:48:ce:ba:8d:72:3e:d3:26:9e:6e:cc:78:7e:38:11:f4:99:
29:08:4e:89:a4:d9:a1:20:7e:28:72:8c:7f:ea:40:e8:02:d8:
1d:4a:fd:32:e1:60:65:f1:0c:7a:77:47:d6:3b:6d:8d:fb:d2:
de:67:05:af:5a:11:92:26:8e:a4:a4:e9:d9:3b:0b:ba:84:46:
f1:5f:78:c7:9d:da:06:4d:bc:48:df:61:e8:42:e3:e6:bc:3c:
be:c7:59:ad:31:81:9e:8f:bd:84:4d:a0:5d:4a:ed:99:da:43:
48:f4:e1:d7:c7:85:27:19:5a:b9:e0:1a:3c:7b:43:d2:a0:2f:
d1:5f:37:cc:b5:e3:bd:00:8f:22:91:94:31:da:cb:c1:fc:97:
9f:fa:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:39 2025 by rpki-client