Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/D1QFX7k7a0Ltcp6F5gr24mKVGaM.roa
File: D1QFX7k7a0Ltcp6F5gr24mKVGaM.roa (raw, json)
Hash identifier: xuI/y6uLoNeDuD+l0wsjeM/1y1BTEpl1RiOxPtaGBUQ=
Subject key identifier: 0F:54:05:5F:B9:3B:6B:42:ED:72:9E:85:E6:0A:F6:E2:62:95:19:A3
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0185711E5EA1A5F9B7E19BBADA98CE15A207
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/D1QFX7k7a0Ltcp6F5gr24mKVGaM.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57780
IP address blocks: 91.210.153.0/24 maxlen: 24
2a06:5f80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5e:a1:a5:f9:b7:e1:9b:ba:da:98:ce:15:a2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f54055fb93b6b42ed729e85e60af6e2629519a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:4e:76:25:66:c1:ef:9f:bb:b8:b2:75:e8:
60:7a:71:a5:97:33:16:bc:23:27:da:a5:cc:51:3a:
fa:3d:71:32:35:aa:96:b2:b9:e6:6c:fd:ed:c1:48:
a2:30:fd:67:33:d0:66:75:cc:67:99:b7:6e:ec:96:
3e:bd:1c:20:75:5e:d1:c8:3e:e6:c4:42:f9:76:23:
ac:8b:81:8b:f0:a5:30:c6:2f:ab:35:02:4d:3a:a9:
18:64:f7:23:fa:d6:e8:34:36:23:e3:a1:b4:15:48:
db:4b:96:6b:92:e2:56:c4:0a:52:50:81:1f:0f:79:
0c:53:a5:19:ba:ba:f2:15:6b:60:f6:9c:3d:dc:8b:
c9:12:a3:39:7c:5a:25:0a:a0:d6:8d:bc:af:26:a3:
c2:37:85:d4:ef:80:29:aa:d7:f2:35:2d:75:df:03:
70:7f:1a:19:74:3c:a7:73:57:07:6d:e5:ce:96:98:
1b:92:26:6f:f3:4c:97:37:d9:84:8f:14:6e:e6:5f:
f5:da:c2:0c:6c:df:54:d7:5a:c8:e7:69:c7:73:a1:
50:06:19:85:f3:aa:81:25:84:84:82:bc:fd:25:63:
ce:c7:d4:b6:93:39:1d:f6:be:31:18:7b:d9:11:49:
41:e3:30:ed:57:9d:21:25:ca:55:6e:b1:f1:92:31:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:05:5F:B9:3B:6B:42:ED:72:9E:85:E6:0A:F6:E2:62:95:19:A3
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/D1QFX7k7a0Ltcp6F5gr24mKVGaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.153.0/24
IPv6:
2a06:5f80::/32
Signature Algorithm: sha256WithRSAEncryption
7c:28:08:f3:1e:de:48:ee:d4:79:32:5c:b1:c2:6c:e7:0a:3e:
15:aa:84:ca:76:91:ec:1c:71:a3:8f:82:08:c2:37:1c:ae:da:
22:38:07:7e:43:44:d7:0c:29:6b:2f:fc:30:29:c6:b2:c6:57:
c6:b4:b5:2f:31:e9:c3:2a:bf:a0:da:f0:29:91:23:1b:2a:b0:
4d:07:44:7b:ca:e2:c2:6a:60:51:d9:23:11:62:8f:a4:8c:7c:
0c:d7:a9:ff:5f:20:be:ba:42:ed:1b:f5:14:52:d2:60:f6:ec:
2a:00:ef:c8:69:ed:2e:36:c0:55:de:2f:25:a0:21:5a:70:85:
51:bc:cf:b0:ce:55:86:4f:32:43:f6:37:07:57:18:ad:12:31:
89:c7:d0:53:a3:e5:78:82:97:e7:bd:2d:59:41:5f:e2:fd:f1:
02:1c:4e:39:a6:a4:aa:02:f5:10:fc:ef:03:f1:09:f4:98:16:
45:77:11:de:4a:ff:1c:b0:bd:4b:2a:50:a8:af:24:a3:c2:a5:
55:0c:af:3d:ef:03:0d:ea:ed:4e:23:b8:a7:bb:ca:41:54:ce:
41:32:eb:31:d1:01:66:90:0e:d9:34:1e:fa:08:31:38:8f:cd:
b7:85:d5:eb:3c:86:7a:d8:dd:6c:1f:49:f2:12:d6:77:6c:6d:
67:46:2d:74
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxHl6hpfm34Zu62pjOFaIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj
MzU0ODYwHhcNMjMwMTAyMDYxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjU0MDU1ZmI5M2I2YjQyZWQ3MjllODVlNjBhZjZlMjYyOTUxOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHZOdiVmwe+fu7iydehgenGllzMW
vCMn2qXMUTr6PXEyNaqWsrnmbP3twUiiMP1nM9Bmdcxnmbdu7JY+vRwgdV7RyD7m
xEL5diOsi4GL8KUwxi+rNQJNOqkYZPcj+tboNDYj46G0FUjbS5ZrkuJWxApSUIEf
D3kMU6UZurryFWtg9pw93IvJEqM5fFolCqDWjbyvJqPCN4XU74ApqtfyNS113wNw
fxoZdDync1cHbeXOlpgbkiZv80yXN9mEjxRu5l/12sIMbN9U11rI52nHc6FQBhmF
86qBJYSEgrz9JWPOx9S2kzkd9r4xGHvZEUlB4zDtV50hJcpVbrHxkjF4DwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA9UBV+5O2tC7XKeheYK9uJilRmjMB8GA1UdIwQY
MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt
YzY1NDM1NmIwN2M0LzEvRDFRRlg3azdhMEx0Y3A2RjVncjI0bUtWR2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0
LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9KZMA0E
AgACMAcDBQAqBl+AMA0GCSqGSIb3DQEBCwUAA4IBAQB8KAjzHt5I7tR5Mlyxwmzn
Cj4VqoTKdpHsHHGjj4IIwjccrtoiOAd+Q0TXDClrL/wwKcayxlfGtLUvMenDKr+g
2vApkSMbKrBNB0R7yuLCamBR2SMRYo+kjHwM16n/XyC+ukLtG/UUUtJg9uwqAO/I
ae0uNsBV3i8loCFacIVRvM+wzlWGTzJD9jcHVxitEjGJx9BTo+V4gpfnvS1ZQV/i
/fECHE45pqSqAvUQ/O8D8Qn0mBZFdxHeSv8csL1LKlCorySjwqVVDK897wMN6u1O
I7inu8pBVM5BMusx0QFmkA7ZNB76CDE4j823hdXrPIZ62N1sH0nyEtZ3bG1nRi10
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:27 2025 by rpki-client