Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/S-6ink8g2rkjGpScgygMVCpWp2o.roa
File: S-6ink8g2rkjGpScgygMVCpWp2o.roa (raw, json)
Hash identifier: Iv55VtU5NrJwBo6KRvONrpEwpuymnNeY2QhWsF9nx1M=
Subject key identifier: 4B:EE:A2:9E:4F:20:DA:B9:23:1A:94:9C:83:28:0C:54:2A:56:A7:6A
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 1AB434D9
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/S-6ink8g2rkjGpScgygMVCpWp2o.roa
Signing time: Sat 01 Jan 2022 16:03:40 +0000
ROA not before: Sat 01 Jan 2022 16:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51323
IP address blocks: 91.203.104.0/24 maxlen: 24
185.31.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448017625 (0x1ab434d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jan 1 16:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4beea29e4f20dab9231a949c83280c542a56a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:ea:d8:ef:6b:34:c6:e8:59:29:0b:dd:ed:
bd:05:2b:b5:ac:a8:b8:7b:05:ce:1a:19:9d:10:c2:
87:ef:e0:47:16:92:a7:3f:8e:bd:63:6e:25:9e:cf:
af:db:1f:0f:ef:70:30:b4:b2:44:4a:94:9a:33:9f:
f6:dc:e8:c4:3b:fe:2e:20:65:b3:48:fd:a5:61:5b:
c9:69:33:ba:aa:1f:3b:8f:4f:21:68:9d:f6:8d:3a:
e7:d1:8b:43:b6:a0:90:c1:df:40:f9:e1:d8:d8:50:
75:a2:3e:e1:90:95:8c:08:7f:f4:80:56:b9:81:d1:
85:ea:b4:f9:36:a8:f6:ec:b7:60:3e:e9:d3:9b:ce:
f7:79:8d:74:96:15:02:16:a2:7e:6c:2e:35:44:b0:
6c:d4:28:93:19:0c:53:f8:91:4d:2d:36:f0:20:2d:
da:10:d3:c8:89:d2:07:1a:4d:6a:36:94:ba:bd:79:
e5:e7:f0:46:59:60:c1:f5:b8:6c:5f:da:ed:62:9d:
42:9c:db:2f:d8:1d:96:05:91:99:b4:a0:bf:87:bc:
bd:2d:11:71:90:2c:7a:4f:fe:ec:7a:06:8f:c8:7c:
fc:cb:68:95:be:20:ed:dd:b4:83:c3:1c:ac:48:3b:
ed:a6:b1:de:b3:a6:4c:39:53:04:c9:a4:4b:d1:e0:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EE:A2:9E:4F:20:DA:B9:23:1A:94:9C:83:28:0C:54:2A:56:A7:6A
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/S-6ink8g2rkjGpScgygMVCpWp2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.104.0/24
185.31.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d5:8f:50:e6:a2:b8:eb:bc:f9:60:ad:e0:4e:5a:5f:cb:8f:
30:2b:8c:b8:46:c2:17:dd:fe:cd:79:71:9a:fa:d2:ce:df:0b:
55:e2:23:ee:99:24:44:f1:58:95:b3:6a:49:05:8e:76:bf:d8:
5e:b0:b8:a6:8d:b0:91:c3:e1:47:25:4f:6a:c3:8a:d4:60:e5:
01:06:87:9c:34:c3:a6:8e:a4:f4:e3:53:b0:bc:eb:47:65:97:
d7:3d:5f:2a:71:dc:5e:17:9f:7e:14:e1:5e:1d:32:28:3c:2d:
48:03:8e:27:98:61:3a:9a:51:bb:a6:63:5d:d3:b5:e9:e5:77:
8f:cc:ce:68:0c:87:57:8e:c1:82:92:ac:3d:4d:2e:fc:b1:dc:
4c:fa:b8:44:2b:e7:3f:58:03:a7:f6:12:d9:4f:04:40:85:47:
70:de:eb:9e:aa:54:c9:50:34:ea:9f:ab:03:8b:62:cd:24:50:
41:63:50:c7:25:72:c8:29:78:b4:d9:91:4a:91:8e:11:37:15:
6a:f5:5b:83:d6:57:52:6d:56:d8:58:49:b7:e5:29:03:4a:7b:
f3:c8:18:c9:4b:64:e9:d3:dd:6a:b1:27:3c:a2:e2:20:17:ac:
63:a8:54:2d:4f:e2:67:e9:ae:dd:2d:a7:29:5f:af:3e:8b:5a:
69:fd:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:43 2025 by rpki-client