Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9YsUN5setPtwyhusU-5lNFgZKBc.roa
File: 9YsUN5setPtwyhusU-5lNFgZKBc.roa (raw, json)
Hash identifier: OuWYNvv6JRqsDnusvP2v/Igw+xvnZAkcqrLg5O6H1XA=
Subject key identifier: F5:8B:14:37:9B:1E:B4:FB:70:CA:1B:AC:53:EE:65:34:58:19:28:17
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0186156E83493B31D2712EC168C110FE5100
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9YsUN5setPtwyhusU-5lNFgZKBc.roa
Signing time: Fri 03 Feb 2023 04:00:09 +0000
ROA not before: Fri 03 Feb 2023 04:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 91.147.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:6e:83:49:3b:31:d2:71:2e:c1:68:c1:10:fe:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 3 04:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58b14379b1eb4fb70ca1bac53ee653458192817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:87:79:53:33:ff:a3:13:7a:94:5c:8e:e7:
2f:82:68:bb:85:5b:eb:25:45:0b:2d:e0:73:eb:ac:
50:06:39:17:c2:f9:46:52:5d:c2:bf:a1:65:0c:5c:
31:7e:a7:7c:44:22:a7:ff:44:59:e6:cb:b4:e9:b7:
d6:05:0f:1c:85:db:18:66:93:35:2d:ec:ee:07:82:
ef:cb:82:ad:0a:e6:be:d9:eb:43:7d:bf:90:bd:cc:
22:7f:bc:76:52:15:34:49:9c:11:29:dd:90:ba:41:
35:b2:a5:68:94:1e:6d:0d:c5:32:46:8e:ac:b5:77:
82:1e:e2:54:91:60:68:e9:57:b6:74:3f:09:9d:14:
75:62:2f:0b:d1:36:fe:82:cf:f9:96:66:8f:c7:c9:
59:22:6d:64:12:ff:34:53:99:8c:1c:0f:a0:5b:66:
b8:ec:1c:d9:a1:96:3d:4c:00:49:ce:29:a8:0c:27:
5d:8a:95:25:9d:e5:20:cb:f6:b8:70:4c:d4:d4:08:
3f:e4:f4:d0:10:fe:4c:2b:8c:0f:70:98:9d:90:08:
fc:98:86:4a:c9:1f:51:08:90:21:53:0e:3b:62:42:
c6:11:de:65:ee:c8:2f:88:b4:dd:b4:8b:1c:a1:81:
af:84:48:ca:ba:25:d6:39:d5:56:db:c9:17:47:20:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:14:37:9B:1E:B4:FB:70:CA:1B:AC:53:EE:65:34:58:19:28:17
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9YsUN5setPtwyhusU-5lNFgZKBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:08:f1:01:03:76:75:82:8d:ca:a7:92:a6:16:d2:39:86:7b:
ac:38:7e:54:df:4f:02:86:df:8b:ae:0d:45:cc:d1:91:35:49:
bf:40:e0:92:98:f5:c7:0c:c8:3b:18:73:9f:e2:4d:5e:d5:20:
75:8f:e5:9a:7f:05:5f:aa:05:2a:46:26:12:cd:8c:e9:c4:65:
46:6b:63:9b:91:53:31:15:59:db:aa:fb:d5:66:37:3f:18:c0:
6c:9f:40:8a:bf:07:50:d9:a4:d8:30:35:50:3b:40:ee:77:93:
23:95:2c:cd:ac:3d:d7:43:b8:ff:d3:e2:4d:c5:9a:32:bf:ca:
df:cb:92:89:38:59:2e:09:e5:8c:46:2d:d9:d9:78:87:24:db:
c6:f0:0d:7f:fd:48:d5:0e:4f:b9:c0:3d:5b:2b:43:42:ff:70:
fb:af:84:41:26:86:5b:54:df:ae:d1:7f:83:84:f1:30:1d:b9:
6c:65:29:0b:f9:ff:71:cc:ea:b3:b2:cc:04:50:f7:c4:a0:66:
d6:14:d9:7d:6b:9d:40:9a:05:a8:50:13:82:6e:7d:6e:2f:a8:
1e:49:24:90:61:f7:e2:ed:f6:3e:ac:0b:40:c4:f8:b3:6a:30:
37:10:43:22:33:b9:66:35:bc:04:ea:32:e8:99:c2:74:57:68:
b0:1a:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:48 2025 by rpki-client