Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atOtQWRVRbBRtH7L0A-bR2_lU-M.roa
File: atOtQWRVRbBRtH7L0A-bR2_lU-M.roa (raw, json)
Hash identifier: py8Ok0XsmdOOQ4jCTHnmyLNGLAfIMmXFrh8LQbi9MMQ=
Subject key identifier: 6A:D3:AD:41:64:55:45:B0:51:B4:7E:CB:D0:0F:9B:47:6F:E5:53:E3
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0186C80283EDC38BEC56E9AD5AF8D6B717C0
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atOtQWRVRbBRtH7L0A-bR2_lU-M.roa
Signing time: Thu 09 Mar 2023 20:14:13 +0000
ROA not before: Thu 09 Mar 2023 20:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:02:83:ed:c3:8b:ec:56:e9:ad:5a:f8:d6:b7:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 9 20:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad3ad41645545b051b47ecbd00f9b476fe553e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:28:36:72:1d:15:15:6c:bb:b5:dc:7e:1f:
63:ac:b7:0f:a6:49:6c:51:65:31:f5:a0:31:5d:79:
dd:1c:73:da:75:e9:16:fa:49:82:8e:9a:df:34:5e:
14:f2:d4:8a:ab:b6:de:72:96:81:9c:b0:4d:cc:1d:
6e:da:85:58:3a:33:b6:41:4f:21:ab:f5:10:f9:5a:
0e:97:9c:20:dc:e5:38:34:17:f2:81:13:c0:09:8c:
8d:64:13:59:35:a4:53:7c:74:c6:6d:a0:f9:36:e4:
9a:c8:c2:e4:ec:75:58:65:bd:ff:7e:d9:4d:e1:2e:
3d:60:4f:e7:c9:3f:4f:ec:d0:8f:fd:f4:9a:a2:3f:
4d:77:41:63:18:66:90:0c:6d:89:e9:d3:37:93:99:
b6:21:11:75:ee:7b:b9:58:7a:e3:ec:4c:fa:49:d8:
44:d5:c8:3e:d0:6e:da:02:91:92:8b:49:26:c3:1f:
4f:bd:bf:1d:3f:c9:30:8c:e2:6f:23:ed:cb:b5:25:
98:de:ae:3f:35:52:47:93:b2:f4:b5:10:24:91:4e:
3e:64:6a:7b:cd:98:b1:ae:4f:e5:86:f5:0b:91:c9:
0a:dd:27:20:af:76:2e:0c:6a:f7:8d:e3:62:14:24:
48:d5:75:2a:d0:1e:a0:0c:6d:73:48:bf:92:0a:2f:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:AD:41:64:55:45:B0:51:B4:7E:CB:D0:0F:9B:47:6F:E5:53:E3
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atOtQWRVRbBRtH7L0A-bR2_lU-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:68:42:1d:88:4a:ea:05:e5:fd:31:2c:cd:ee:7a:48:16:33:
a1:08:fe:ce:e7:a0:7a:b6:17:bb:d5:fb:fc:ba:e2:88:17:33:
08:85:9f:05:b3:2e:5f:58:03:b3:f5:99:f4:87:4c:72:7a:38:
d5:de:a2:b3:66:41:1d:97:11:ef:1d:17:36:05:96:de:dc:7c:
eb:98:2d:f4:de:05:9c:e7:50:5a:ef:8a:4a:6c:c9:06:9b:6d:
b8:87:c3:9d:e4:0b:b7:18:bd:b1:25:a7:cb:02:55:ea:63:a2:
2c:e1:56:12:80:e8:ec:51:d3:72:f4:5c:df:a7:b6:cd:a5:30:
3b:76:a6:08:9b:16:d2:cd:7a:25:e5:f4:b3:c0:cf:b9:03:b3:
d7:f5:f9:ed:df:e1:bf:af:94:7f:83:76:f9:fd:78:3e:6f:99:
a7:c3:88:20:1b:8b:87:cc:e9:e9:5a:96:73:ca:44:1a:c6:ba:
09:1c:a6:48:d0:7e:c3:f2:b8:9a:f8:a9:8a:d6:5d:4e:1e:77:
3b:9d:86:84:c3:57:9a:c9:ca:ac:4d:7d:c3:f3:a1:18:0c:10:
49:e9:41:8f:72:e5:4b:d8:6a:92:75:ec:a3:77:56:3b:ad:54:
b8:0a:cb:02:94:38:61:c8:b6:b3:7d:fd:56:e3:17:1d:e1:80:
27:46:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:00 2025 by rpki-client