Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5Y_ta54QyZt4dgODusyPpz7ltW0.roa
File: 5Y_ta54QyZt4dgODusyPpz7ltW0.roa (raw, json)
Hash identifier: xvkrcqjKajpET2QKpGMtIbSdCyeJwaa41Gjbkui9aDg=
Subject key identifier: E5:8F:ED:6B:9E:10:C9:9B:78:76:03:83:BA:CC:8F:A7:3E:E5:B5:6D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0183B3CE40569414F819C60C139A16C7F105
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5Y_ta54QyZt4dgODusyPpz7ltW0.roa
Signing time: Fri 07 Oct 2022 18:56:22 +0000
ROA not before: Fri 07 Oct 2022 18:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.246.0/24 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:ce:40:56:94:14:f8:19:c6:0c:13:9a:16:c7:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 7 18:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e58fed6b9e10c99b78760383bacc8fa73ee5b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:7b:55:03:1c:75:d3:0f:15:99:83:a7:36:
3a:ad:2a:b5:35:d4:8d:6e:3a:34:d9:85:0a:18:9f:
1c:79:30:6a:12:5f:60:ce:1f:1e:e0:42:3a:40:5a:
7b:d7:ab:5e:e7:b2:8d:20:fd:0e:7f:d5:bf:d8:7f:
c9:57:5b:f9:77:04:56:78:f8:2d:cd:75:01:e8:02:
9c:5a:3a:55:65:bc:6c:e0:01:1c:d7:54:95:f8:ab:
02:f6:7c:b9:fa:30:bc:8f:c9:80:9d:7b:47:c3:03:
3c:1e:7a:e2:41:50:78:00:9f:80:59:c4:a4:e5:a4:
bf:b1:67:ee:a5:96:9c:a4:5c:83:8b:8c:e1:8f:ef:
f9:7f:4b:ff:2b:1e:70:d0:bb:14:82:88:89:13:6e:
22:9a:72:88:bb:c4:92:37:f7:70:11:0b:88:5a:b4:
f8:d7:44:db:21:2a:59:fd:a8:ec:95:a5:3a:bb:ab:
69:4e:a1:8e:21:0b:f9:40:6b:68:c7:f6:c2:83:50:
1a:60:b0:5f:c3:94:f7:6e:a2:60:36:56:3a:68:ec:
ab:6e:90:65:be:61:a1:cb:d3:7a:31:b6:33:2d:e9:
3b:d8:ae:71:2a:64:a1:71:7a:6e:e3:4b:da:8e:d1:
cd:f4:bc:5a:8f:c8:35:d4:0c:41:78:85:55:e8:12:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:ED:6B:9E:10:C9:9B:78:76:03:83:BA:CC:8F:A7:3E:E5:B5:6D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5Y_ta54QyZt4dgODusyPpz7ltW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8d:0d:fe:7a:c5:d2:22:30:29:e4:0d:0b:a4:af:c7:6b:d9:
67:5c:80:fa:65:6e:35:d1:e9:18:e7:df:10:b7:ae:8b:49:b0:
8b:4a:1e:17:da:3f:0f:3e:6f:78:58:9b:87:a1:95:7a:30:c1:
f5:34:7c:5f:71:4e:0c:21:5f:86:60:ab:d0:42:e5:f0:42:87:
0a:9f:0f:b4:b9:ce:ad:ca:5d:eb:6c:6e:9e:90:ac:ae:0b:2d:
93:46:f2:ee:48:c0:47:1c:2c:ad:1b:ff:e9:6e:76:ae:f4:d3:
cc:8e:a2:e8:0b:4c:f6:13:d6:a7:0b:03:df:b4:d0:03:c6:69:
8f:01:af:6a:fd:e7:e9:ba:a8:91:3e:e3:4c:36:ec:e8:b2:0e:
53:4d:a9:20:a0:8e:03:b2:bf:94:50:a8:99:77:6e:f8:f2:fe:
fe:07:3e:8c:7b:cf:4b:5e:ee:df:84:0d:59:5c:4a:2a:55:5e:
46:1f:bd:bb:4d:82:0a:da:42:a6:e3:25:09:a8:a9:bf:6c:da:
8a:51:92:97:fe:7f:13:12:54:35:be:47:38:67:4e:db:68:84:
8c:46:07:eb:7a:57:06:a0:90:94:79:63:b2:0f:b9:f6:5c:4f:
78:b7:60:16:ff:45:47:de:b3:d7:0a:1c:f4:1e:5c:6e:f4:e9:
6d:ad:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:42 2025 by rpki-client