Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/d6b_iRoeFvE3cB8ZdD7FXwlawpk.roa
File: d6b_iRoeFvE3cB8ZdD7FXwlawpk.roa (raw, json)
Hash identifier: VBtuLTnna6TmRRkmmZl6fCfY8kitPJuSRVulSvSHxCg=
Subject key identifier: 77:A6:FF:89:1A:1E:16:F1:37:70:1F:19:74:3E:C5:5F:09:5A:C2:99
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 08236932
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/d6b_iRoeFvE3cB8ZdD7FXwlawpk.roa
Signing time: Sat 01 Jan 2022 06:58:33 +0000
ROA not before: Sat 01 Jan 2022 06:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49672
IP address blocks: 91.212.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136538418 (0x8236932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Jan 1 06:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77a6ff891a1e16f137701f19743ec55f095ac299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:e8:ef:0f:c2:d0:58:18:91:f3:ca:07:a2:
bb:1a:9f:2d:a4:bf:ed:01:41:2a:ef:22:e8:5f:ea:
ec:2d:0c:ff:8c:aa:9a:93:87:66:19:15:a4:9e:f5:
86:c2:e6:ca:03:c0:99:df:f5:ac:e5:d3:ca:66:ee:
d3:a1:a5:21:b3:0c:7b:2b:0a:06:5e:91:5b:26:fc:
80:f5:48:1a:70:9f:29:17:f1:f3:d9:75:fd:a2:96:
ed:4a:31:ec:0f:5d:d4:fa:c2:00:8c:8c:d1:29:4a:
95:2d:8d:31:e6:37:b3:43:64:14:ab:5e:96:eb:63:
19:59:91:36:8b:65:0f:08:49:49:94:43:ee:76:65:
65:2e:00:ca:18:59:b8:0f:c9:a8:5f:dc:03:03:c5:
d0:d3:e9:b6:f2:c5:f8:5e:e0:da:cd:6c:a1:3a:5c:
1d:5f:ce:bd:2f:56:48:69:0f:98:f4:cf:7d:6f:7d:
c7:60:c1:04:d5:45:72:da:5a:6f:8f:ee:07:41:a5:
66:78:cb:e7:7f:16:50:fd:0b:ff:b8:02:ab:82:85:
e5:73:67:46:a3:9c:c3:c9:fb:6b:b3:35:66:1b:15:
c7:02:b2:df:52:44:69:e8:2f:e6:76:6a:25:48:92:
a4:04:5c:cd:82:40:30:cf:88:4e:47:18:ab:d9:4e:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:FF:89:1A:1E:16:F1:37:70:1F:19:74:3E:C5:5F:09:5A:C2:99
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/d6b_iRoeFvE3cB8ZdD7FXwlawpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.178.0/24
Signature Algorithm: sha256WithRSAEncryption
33:05:3d:a3:0e:f4:42:c7:34:f5:de:9a:ce:03:0e:f6:bd:65:
95:84:3c:09:9c:99:59:fe:ac:0c:82:83:5d:e4:a2:09:06:9a:
87:6e:ea:93:2d:e7:9e:76:e2:48:6a:c1:22:5a:7e:32:78:a5:
ee:b9:f9:52:79:1e:96:d6:90:cc:60:79:51:dd:8f:3b:d8:24:
b9:0b:23:98:83:01:cc:44:80:ef:4a:80:90:f4:e4:f1:df:fb:
7d:ad:d0:49:98:ec:90:1e:71:be:72:f7:cf:40:c5:c6:64:51:
c2:26:a6:14:c4:c6:86:33:c7:8c:53:26:09:7e:e0:98:5f:f7:
4f:f8:ca:08:44:58:31:aa:88:a6:c6:20:08:63:81:c0:28:f5:
9f:0a:a7:bd:da:1f:f9:c5:d9:7f:e5:61:fc:45:0b:fc:7d:f4:
33:7e:57:7e:1f:31:d9:f1:38:66:68:71:ee:ad:fc:ac:5f:94:
97:5f:17:a3:c0:56:ce:1f:c8:ee:c2:88:a0:95:57:47:bf:96:
f7:9f:db:ca:1e:10:53:2e:04:c2:a9:8f:d4:ad:2d:89:ef:79:
5b:8a:1d:d6:3b:8e:e0:4f:ea:83:31:0e:8b:4e:07:d2:56:7d:
ad:b4:b8:3b:1e:61:df:c7:09:bf:63:a3:8c:79:27:c3:0e:10:
46:5e:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:26 2025 by rpki-client