Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/4_aEWflwiHtGtyepe8tz_0qe-7Y.roa
File: 4_aEWflwiHtGtyepe8tz_0qe-7Y.roa (raw, json)
Hash identifier: BoTyQ19UcI8hOxkS3OfQiYHsrqFKgMpuaW5OHY51J/A=
Subject key identifier: E3:F6:84:59:F9:70:88:7B:46:B7:27:A9:7B:CB:73:FF:4A:9E:FB:B6
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 01856CEF327A5681A22479D82B56D98CBD69
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/4_aEWflwiHtGtyepe8tz_0qe-7Y.roa
Signing time: Sun 01 Jan 2023 10:44:53 +0000
ROA not before: Sun 01 Jan 2023 10:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203134
IP address blocks: 91.240.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:32:7a:56:81:a2:24:79:d8:2b:56:d9:8c:bd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: Jan 1 10:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f68459f970887b46b727a97bcb73ff4a9efbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:8c:0f:f4:00:da:d1:bb:0d:6e:32:e5:a1:
4b:41:d2:49:01:03:ec:e0:8e:a5:24:f1:e7:74:a6:
4d:df:e1:b3:54:c7:fe:ab:b5:55:9f:b3:60:f9:07:
0e:cc:ff:9b:02:08:1a:04:32:17:35:3b:d1:e1:a6:
9e:ad:bb:d8:c7:9a:0f:61:7d:0a:94:a0:fb:b3:a4:
9a:c4:12:05:ae:c7:c3:7e:0f:6f:49:a2:aa:b9:d9:
4c:a7:e0:49:b6:f9:b6:1c:bc:54:d2:51:23:d7:16:
59:f5:9a:6c:ed:cc:24:54:d2:0f:01:05:74:7b:c3:
39:9f:a2:63:f8:0a:cf:cf:90:9d:73:a6:d1:00:78:
b6:33:fa:75:32:48:fc:2d:1d:21:f0:c6:b1:5d:b8:
24:4c:ec:9c:60:e0:96:27:0e:7c:b2:53:4e:2d:42:
fb:ac:ab:5c:4f:f1:fa:1d:7f:b4:1c:68:1b:79:6c:
b5:8b:5b:90:6e:88:3c:8d:69:17:73:75:11:86:00:
e0:dd:5e:69:9c:ec:25:37:b6:24:2a:5c:b3:e1:a3:
0d:fb:a9:53:b0:54:7c:26:7a:60:28:2b:8a:00:35:
73:31:b7:fc:94:0d:e5:27:41:a4:85:96:f3:06:23:
ae:03:a5:9b:b8:d1:8a:4b:15:1b:66:91:9f:ee:ad:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F6:84:59:F9:70:88:7B:46:B7:27:A9:7B:CB:73:FF:4A:9E:FB:B6
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/4_aEWflwiHtGtyepe8tz_0qe-7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
be:93:07:7d:f8:25:d8:d6:99:c0:8a:67:00:f8:0d:1e:a4:7b:
e6:06:af:b5:32:2c:da:f6:74:53:e4:9a:2d:65:1c:d9:d1:83:
e4:88:63:27:c7:eb:04:76:43:72:4a:c9:48:07:ae:89:f5:14:
5e:88:4b:cf:ef:16:8a:ed:0d:c9:ac:c4:e2:88:e1:27:b9:d3:
5a:17:c1:e8:c3:be:eb:27:74:f9:a1:04:74:37:84:40:c2:b8:
72:2e:c2:3f:86:d7:78:87:5a:13:90:96:f5:9a:a3:ed:58:ee:
bc:84:5f:36:f1:81:e5:65:a8:e4:0f:f9:82:e0:bf:ca:e5:35:
90:fa:ac:ea:f8:97:b0:2d:3e:c3:9f:85:51:96:50:a9:17:41:
16:05:18:60:69:68:00:1a:22:a6:bf:cc:fb:6e:27:ef:d3:8a:
a2:4d:23:e9:85:92:fa:af:37:c5:0d:3f:ef:67:d8:85:35:0b:
66:8c:c4:85:09:1b:c5:29:c9:c6:b1:46:69:0c:bd:ee:cf:ba:
0f:32:ae:06:18:a3:07:41:d2:45:5d:e8:2e:98:f4:b9:a8:5b:
e3:44:77:db:5b:be:ac:4e:9f:b9:17:2e:3c:27:ec:bb:73:eb:
6a:93:08:c5:6e:17:86:cf:2e:30:cc:29:93:cd:39:99:ed:1f:
b7:72:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:25 2025 by rpki-client