Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/XFNru9ljdBOMMWVL9eEaeQp5Ijc.roa
File: XFNru9ljdBOMMWVL9eEaeQp5Ijc.roa (raw, json)
Hash identifier: qsgY0/PH4GTaMz1UCbKb/6S0rbQoNeZATchos4AoH34=
Subject key identifier: 5C:53:6B:BB:D9:63:74:13:8C:31:65:4B:F5:E1:1A:79:0A:79:22:37
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 01463B
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/XFNru9ljdBOMMWVL9eEaeQp5Ijc.roa
Signing time: Thu 21 Apr 2022 15:36:08 +0000
ROA not before: Thu 21 Apr 2022 15:36:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57126
IP address blocks: 91.230.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83515 (0x1463b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Apr 21 15:36:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c536bbbd96374138c31654bf5e11a790a792237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:38:50:9e:0a:a2:6e:0f:e7:c3:49:b0:76:
0c:a6:2d:78:81:e3:cb:f6:a6:f6:6b:0f:2d:f8:1c:
da:9e:60:7b:e6:d8:f4:aa:2b:cd:2d:48:b8:b5:6c:
b9:9c:82:e1:2d:6b:63:cc:19:79:e9:52:66:84:f2:
f5:bb:d7:84:35:42:17:b5:bb:41:31:e9:66:77:45:
93:a9:d7:ea:e3:08:84:98:bc:5b:aa:3f:17:d3:24:
47:c1:6e:54:63:e7:91:e2:5d:34:f1:cb:13:f0:42:
8f:f4:ca:80:11:85:31:c1:78:98:42:ea:92:f9:03:
16:74:3e:34:28:5c:89:01:de:9b:1a:68:6a:03:9c:
f8:35:81:39:ef:ce:dc:46:b4:d2:ca:2f:be:ec:f2:
e6:9f:86:60:5d:e8:7d:3b:e1:f5:a6:e6:97:d4:7d:
53:cf:62:fc:cf:19:50:86:d3:52:52:c0:ba:a4:fe:
fb:5a:5a:a0:ea:6f:b8:d6:24:25:6f:03:5f:29:a2:
95:8f:d8:c2:a3:99:c5:cf:93:4a:0e:d7:e2:88:f3:
79:9c:1d:b6:b7:ee:15:01:a7:fb:8c:2f:d4:fc:07:
79:af:46:00:73:4a:6c:bf:61:e3:c2:76:80:89:83:
4c:af:20:68:cd:27:9f:55:c8:cd:d0:fd:75:cf:89:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:6B:BB:D9:63:74:13:8C:31:65:4B:F5:E1:1A:79:0A:79:22:37
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/XFNru9ljdBOMMWVL9eEaeQp5Ijc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.234.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b9:55:ae:6d:b0:0c:4b:3a:af:68:ac:3b:0d:70:9e:19:a0:
b1:8c:c0:fb:b4:37:01:8a:76:cf:c9:e3:a9:ad:a5:1e:ed:0b:
6f:69:d3:09:50:86:d6:32:e4:a6:d8:54:44:82:5c:ae:fd:be:
79:85:1e:ce:09:e8:30:cd:c1:90:b6:a4:6c:68:44:a0:41:99:
51:6a:5f:4c:1d:2a:90:7a:2b:3c:63:94:96:eb:a0:f8:97:f7:
d7:dd:28:88:bd:4d:e6:a2:b4:57:82:44:f5:ca:d8:32:2e:e2:
e3:c6:c5:a7:09:b3:cb:bc:bd:15:15:fa:90:78:b9:63:ec:77:
c3:ad:22:e8:a4:e7:d4:b5:ee:42:71:a1:56:5c:3b:5d:1c:1d:
80:84:a3:5d:7c:05:15:12:36:a8:8d:c1:24:7c:34:5d:8a:d4:
e3:3d:cf:4e:c1:f0:d8:3b:65:97:c4:ad:94:18:66:fd:7d:14:
f9:55:c6:5b:d3:13:7f:1c:18:e1:5b:77:aa:33:62:9c:17:88:
02:43:b1:10:0e:54:52:33:c4:80:f5:76:2b:65:51:f0:9a:49:
b5:3c:24:cc:d8:2d:1c:9f:c1:c6:c8:06:37:a0:99:19:f6:ae:
ff:51:11:55:70:2c:89:47:45:f4:09:ed:1b:9c:be:9c:43:27:
37:c6:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:31 2025 by rpki-client