Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/kMihImHFd_dBvpLLMLvE6BAzbpg.roa
File: kMihImHFd_dBvpLLMLvE6BAzbpg.roa (raw, json)
Hash identifier: J0gGaXs2PW/w3JlXL1vFz4RRhjOr8jp7gRXCjfqhdkM=
Subject key identifier: 90:C8:A1:22:61:C5:77:F7:41:BE:92:CB:30:BB:C4:E8:10:33:6E:98
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 0184F16CA63B699D106BECFC832E1E561D6C
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/kMihImHFd_dBvpLLMLvE6BAzbpg.roa
Signing time: Thu 08 Dec 2022 11:09:00 +0000
ROA not before: Thu 08 Dec 2022 11:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44622
IP address blocks: 91.225.252.0/24 maxlen: 24
91.225.253.0/24 maxlen: 24
91.225.255.0/24 maxlen: 24
91.225.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:6c:a6:3b:69:9d:10:6b:ec:fc:83:2e:1e:56:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Dec 8 11:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90c8a12261c577f741be92cb30bbc4e810336e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:95:05:c1:fc:33:b7:39:6f:7c:c4:52:a5:
16:c7:15:d8:de:75:0c:90:cd:cc:a8:66:58:aa:42:
60:cb:db:ed:67:2d:41:38:65:fb:3e:86:08:d8:60:
a8:e8:0d:98:35:01:a7:d6:fb:b3:91:5b:58:1c:a5:
7d:a6:5a:83:ed:4b:95:8c:3e:37:fa:fa:1a:53:91:
fd:01:eb:0a:d6:4c:46:e4:1d:51:64:42:b3:fa:75:
58:c5:27:9b:9c:22:95:8d:1e:bb:a2:63:16:77:52:
67:22:d0:b9:1a:a6:2b:79:8a:76:0c:74:a6:19:4d:
7a:90:10:cc:37:1b:80:95:c2:18:02:08:7a:1c:a7:
36:43:ae:0f:ad:18:c8:39:e0:72:39:7a:3f:0d:33:
47:ec:39:bb:a6:a4:e8:4c:57:b9:f0:b0:05:a2:11:
ef:1e:3c:aa:8b:fb:a0:ca:34:97:a9:7c:28:18:14:
a8:76:86:bc:90:73:41:a4:72:76:09:fe:3f:29:d2:
3c:45:31:53:aa:5b:e4:0a:06:a1:5f:9d:13:94:ad:
3a:4c:6d:be:39:88:e1:2a:e2:3d:23:e0:89:73:c8:
9a:4a:d5:aa:f7:ad:7d:bf:cc:bd:db:00:da:14:46:
83:61:4a:a9:d5:f0:a8:4d:bd:36:60:b1:bf:1a:7e:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:A1:22:61:C5:77:F7:41:BE:92:CB:30:BB:C4:E8:10:33:6E:98
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/kMihImHFd_dBvpLLMLvE6BAzbpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
92:2d:99:d2:a3:33:f4:40:61:03:35:99:24:a1:80:ab:30:4d:
54:87:19:48:b6:90:14:80:2d:a7:25:a1:e7:e5:82:27:0a:15:
36:5b:7e:8e:fa:3e:7e:5e:61:5d:9b:9a:37:0d:a6:eb:fc:09:
14:96:4b:86:7e:18:89:4c:b2:97:5a:c5:ab:91:58:ee:73:fc:
36:fb:fc:39:38:c5:6b:3a:43:a3:45:da:33:15:02:9a:2a:36:
7b:ee:b9:67:c4:84:a0:a9:5b:f2:ca:ed:dc:85:12:3a:0d:97:
f0:7c:2a:a4:6d:10:42:9a:03:da:38:1a:c8:9f:98:42:4d:a9:
0c:66:6a:c2:68:85:e1:d2:f7:34:88:e7:68:a9:dd:be:1e:11:
7e:69:b4:35:91:bf:8c:85:70:60:1b:29:3d:e1:4c:af:fe:91:
51:52:e5:a1:03:94:15:b2:a6:dc:2c:6f:08:40:87:c0:c1:59:
95:6e:5d:7f:dc:42:a4:09:23:b2:28:9f:d5:71:89:2c:d7:be:
84:0b:40:e1:10:fb:4a:a1:64:66:73:d5:e5:5d:48:f2:ff:ca:
79:f3:86:1a:e5:fc:79:f7:7a:bf:62:b5:e8:57:13:6b:47:87:
dd:ab:da:0c:27:64:3c:aa:2f:5f:82:07:ec:ec:0c:58:dd:80:
05:be:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:30 2025 by rpki-client