Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/UuZ9CpVMC1X5wxXMJOwf7xJi2Ss.roa
File: UuZ9CpVMC1X5wxXMJOwf7xJi2Ss.roa (raw, json)
Hash identifier: 1irdTU3S860Cg+Z5SxlCGRt27VyVzHnneZlIDZDarvc=
Subject key identifier: 52:E6:7D:0A:95:4C:0B:55:F9:C3:15:CC:24:EC:1F:EF:12:62:D9:2B
Certificate issuer: /CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Certificate serial: 0186E438856F8219905DE967CCBB7490B8A1
Authority key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/UuZ9CpVMC1X5wxXMJOwf7xJi2Ss.roa
Signing time: Wed 15 Mar 2023 07:42:34 +0000
ROA not before: Wed 15 Mar 2023 07:42:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:38:85:6f:82:19:90:5d:e9:67:cc:bb:74:90:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Validity
Not Before: Mar 15 07:42:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e67d0a954c0b55f9c315cc24ec1fef1262d92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:78:d5:c2:a9:82:b8:00:92:31:da:21:ab:
66:ee:4d:d1:09:25:fb:c9:c9:24:5b:d1:fc:ad:e9:
42:0f:d1:c3:36:73:a7:44:dd:c4:b4:df:41:fe:90:
4d:18:5b:93:67:72:9b:eb:ed:19:ec:83:77:5e:16:
58:bf:d1:1e:d2:7d:6a:76:bd:43:dc:37:75:9d:e3:
7a:58:8e:a1:dd:c6:57:88:bd:13:16:8a:59:65:85:
5e:08:56:0f:b9:ae:bd:25:e0:38:fa:c7:b5:f9:23:
b9:91:2c:b2:6e:ce:7b:4e:32:81:ee:cc:44:e0:58:
a4:36:02:3c:d9:36:e7:a0:76:ae:be:1f:c9:88:19:
9a:8f:fd:cd:ec:fc:bf:e5:4f:11:3d:ac:64:36:6e:
4e:bf:80:5d:b9:de:0c:83:6e:21:f6:b8:4f:8a:e3:
52:ff:62:6b:5f:f4:d7:92:7a:84:76:5f:fd:fb:d2:
f4:98:7c:c8:87:67:77:63:a7:d4:fc:59:bc:24:9a:
8b:98:55:d4:b6:04:83:9b:4a:cd:7c:0e:52:ad:0a:
eb:c9:e9:13:74:b1:56:24:64:0e:8d:bf:8e:43:e5:
ba:d5:70:15:d1:6d:4c:04:0e:40:5b:1b:25:eb:38:
b9:fc:fd:40:88:a7:b3:19:45:8b:04:ac:77:ac:74:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:7D:0A:95:4C:0B:55:F9:C3:15:CC:24:EC:1F:EF:12:62:D9:2B
X509v3 Authority Key Identifier:
keyid:83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/UuZ9CpVMC1X5wxXMJOwf7xJi2Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e9:d3:40:b0:cc:6f:12:52:3f:98:96:d2:12:9b:59:e5:5a:
f6:ab:ee:e6:9e:69:89:a7:6f:f1:a6:09:fe:eb:24:2e:a2:ff:
03:4f:36:d8:af:fd:db:46:df:85:59:cd:61:c6:09:88:9a:fd:
0e:ca:96:fe:bf:9e:c4:8c:f4:e1:22:4b:7f:0f:36:bc:38:b0:
c6:3b:b8:a2:17:fa:06:5f:2d:33:66:d9:25:0f:80:75:bc:9c:
13:07:06:a4:c4:11:1e:6d:2b:32:66:35:70:01:cc:c7:bf:29:
8f:8c:39:cb:c1:19:20:ce:73:59:43:35:d7:7b:23:39:d1:5f:
d9:23:f7:95:c2:16:0b:b2:27:7b:3c:f6:ff:1c:d4:cb:c4:99:
36:fa:e6:b3:f4:4d:2f:ed:dd:05:5b:57:d1:35:e0:45:e3:d9:
c4:b2:0a:80:ee:dd:e8:d5:f5:ff:05:53:52:e1:33:af:03:2e:
db:4f:27:f3:68:96:8a:15:4c:71:52:8a:c0:5e:3f:5b:fb:dc:
ce:96:a0:8b:9e:51:4e:77:62:26:8c:e6:a4:a5:3d:8d:fe:3b:
90:80:ed:3a:bf:f4:d8:af:ce:66:cc:c8:49:44:03:29:67:5a:
ff:6a:97:95:bc:61:e5:82:51:9f:df:7b:a6:cc:24:08:21:04:
66:b3:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:14 2025 by rpki-client