Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/HVgMZ3Dw7ZHo1KWm3Z4rzEDvozE.roa
File: HVgMZ3Dw7ZHo1KWm3Z4rzEDvozE.roa (raw, json)
Hash identifier: wpV984H0jRYzv1hNXqd3M4J2R25ybgXdxuSIIJ1J8Ck=
Subject key identifier: 1D:58:0C:67:70:F0:ED:91:E8:D4:A5:A6:DD:9E:2B:CC:40:EF:A3:31
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 042B40EB
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/HVgMZ3Dw7ZHo1KWm3Z4rzEDvozE.roa
Signing time: Sat 01 Jan 2022 05:02:54 +0000
ROA not before: Sat 01 Jan 2022 05:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208072
IP address blocks: 91.221.240.0/24 maxlen: 24
91.221.240.0/23 maxlen: 23
91.221.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69943531 (0x42b40eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Jan 1 05:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d580c6770f0ed91e8d4a5a6dd9e2bcc40efa331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:1e:18:f7:46:66:61:98:e7:53:23:12:e0:
32:70:04:a9:de:fd:ec:0a:2c:0d:9e:40:2c:16:82:
ff:9e:7b:36:7b:57:fd:9a:94:42:69:c2:b4:aa:86:
8f:d0:04:10:b8:59:6e:2c:1d:d3:3b:1d:64:9a:8f:
f0:69:bc:b4:50:cb:2c:15:dc:26:3c:ab:6a:81:02:
a7:96:a0:c2:5a:9b:53:8e:7d:22:b7:09:24:6f:0d:
a9:77:2f:dc:f4:f3:5c:0b:e4:16:ef:87:9b:c4:42:
d8:a8:e3:91:86:b9:45:45:e6:c2:d5:7f:ce:54:7a:
5d:a1:e3:69:e3:69:26:85:ec:91:eb:38:37:26:67:
98:f6:cc:e4:42:4d:46:2c:76:dd:67:34:b4:82:c1:
2b:f4:b7:6f:76:71:ef:19:d0:43:a3:cf:18:86:6f:
99:19:c7:d9:b3:79:f3:25:c4:47:96:e3:27:cd:a1:
13:d6:18:c1:7d:05:ec:06:9d:91:9e:6c:30:d3:86:
e9:43:42:23:e7:0c:21:21:68:46:33:54:7e:4a:4c:
24:87:03:fc:ba:89:68:cc:8d:7f:17:a8:b4:42:04:
6b:3e:de:a5:07:6b:ec:d3:35:e6:25:a5:21:eb:ad:
f7:9f:fa:69:1e:28:a1:37:1c:93:17:43:45:24:31:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:0C:67:70:F0:ED:91:E8:D4:A5:A6:DD:9E:2B:CC:40:EF:A3:31
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/HVgMZ3Dw7ZHo1KWm3Z4rzEDvozE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.240.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:cb:c7:cd:5d:8e:65:60:92:24:e4:72:e3:fb:56:04:14:c3:
a0:1e:6b:5c:73:9b:16:50:50:a4:4c:45:77:3e:e6:72:79:a7:
a4:c8:2a:4b:c1:28:7b:31:68:cd:36:58:d9:c7:a3:3b:cf:e5:
2a:8d:81:29:95:0f:08:a1:4d:61:f6:97:d9:46:18:cd:70:8a:
8a:4f:4c:d2:12:fb:29:e3:a8:5b:18:96:f0:50:b7:df:42:c5:
40:9f:e8:82:29:70:5f:42:c3:21:c2:9a:51:f2:f0:d5:a5:7b:
8a:6f:70:3d:20:7d:2e:27:8f:1c:f0:0f:ba:27:bd:19:9b:c5:
c6:8f:c5:02:7a:1d:a6:e9:cd:11:51:17:98:b5:ac:9f:6f:23:
9c:5b:ae:7d:0c:92:d3:0b:aa:99:3a:07:86:81:bb:77:84:cf:
2f:1a:ca:a5:29:8e:b6:77:08:e3:b5:66:dd:43:c1:c4:6c:48:
79:ed:ff:2a:ca:23:3d:e2:c4:9a:46:89:bd:98:e1:12:18:c5:
01:a7:ed:bf:8b:3a:82:4e:0e:e1:44:86:86:11:75:69:bd:03:
58:b1:f6:45:2b:9a:f5:1e:95:2c:7b:17:d2:d1:aa:8e:58:ba:
48:d8:f6:21:40:9a:70:93:d8:34:85:90:70:95:b2:27:71:0f:
cc:8a:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:12 2025 by rpki-client