Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/9hPBK1TPBPhgqS4VfdgOuBedtAk.roa
File: 9hPBK1TPBPhgqS4VfdgOuBedtAk.roa (raw, json)
Hash identifier: uWpi4OlN06f6ilyeax20iSbheqHBZw5T3dRTVv9wxEQ=
Subject key identifier: F6:13:C1:2B:54:CF:04:F8:60:A9:2E:15:7D:D8:0E:B8:17:9D:B4:09
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 09EE4544
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/9hPBK1TPBPhgqS4VfdgOuBedtAk.roa
Signing time: Sat 01 Jan 2022 08:01:07 +0000
ROA not before: Sat 01 Jan 2022 08:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 91.241.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166610244 (0x9ee4544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 1 08:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f613c12b54cf04f860a92e157dd80eb8179db409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:5e:88:a6:65:7d:16:55:44:39:22:86:ad:
fd:59:93:65:55:c6:bd:03:1e:4c:be:fc:7e:4b:a8:
21:4d:b1:6b:7c:04:9a:88:08:19:b9:33:67:d4:a6:
52:39:7d:8c:77:06:80:88:b9:4a:5b:ef:0c:72:e1:
94:c4:5e:14:3d:5a:81:86:ff:21:4f:84:4c:b1:8d:
e2:53:8d:6f:e2:c4:ce:66:67:ca:ce:ed:ce:8e:c9:
0e:c7:23:0a:ed:4b:51:a8:d3:d1:ad:2f:d7:3d:6d:
56:c7:2a:7e:0f:17:c8:aa:b9:ef:36:bd:ad:39:4f:
e9:48:24:ed:b8:c9:de:ef:7f:ca:b9:db:e0:01:88:
60:35:0a:bd:5c:1b:47:aa:fc:63:57:d1:81:48:7d:
19:2a:06:00:45:37:f0:ba:9c:c4:9b:f7:54:bf:fe:
83:ed:ad:2f:ec:87:46:67:44:eb:c5:fa:c3:53:4c:
4f:23:29:96:9c:b8:82:c3:4e:05:f9:73:ac:f6:8f:
10:70:72:6f:49:91:b1:3a:ff:6b:f4:b7:e4:8a:37:
03:82:24:7c:b1:a0:3a:e6:d5:56:cc:01:e4:53:a6:
f6:20:ee:53:7b:17:7d:e1:86:b1:8a:f5:e6:78:36:
14:07:80:80:fc:c2:b2:fb:ab:a4:86:84:b5:26:90:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:C1:2B:54:CF:04:F8:60:A9:2E:15:7D:D8:0E:B8:17:9D:B4:09
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/9hPBK1TPBPhgqS4VfdgOuBedtAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.50.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a5:79:a7:26:8a:bc:24:7d:ab:8a:f3:b2:d9:85:f7:8a:f7:
9d:71:76:33:e5:74:1b:b3:18:82:92:62:e0:b9:8e:e7:53:4b:
57:5e:49:06:0b:9c:35:1e:50:92:e5:e1:99:cf:bf:24:c8:3b:
53:97:dc:9b:ee:52:1d:08:cb:1a:04:3e:43:00:aa:3f:d3:d7:
9f:a3:cc:8e:10:36:e7:90:38:1a:b8:73:6f:2e:3f:c5:08:82:
59:95:ee:06:f5:af:c8:b7:df:79:56:2c:18:ba:f1:51:74:9f:
6e:0b:47:52:49:6f:b4:ce:3d:c1:04:cb:53:09:b2:41:4f:85:
76:6a:f0:28:da:63:31:24:89:46:b1:1f:1b:57:03:3c:df:97:
79:70:40:6d:63:03:20:2a:44:89:32:b2:a2:41:b0:3b:23:0e:
af:74:8a:2e:25:e5:e7:76:45:16:c2:ca:d2:9b:10:df:fd:c6:
79:03:db:2e:47:7c:c6:26:8d:18:e1:a1:f1:07:54:37:9a:33:
35:04:1d:86:4b:db:a1:c6:6a:4d:10:1e:d5:16:d8:73:6f:95:
2b:e3:07:43:d8:c1:5a:92:b9:26:93:7b:31:38:c1:65:bc:aa:
ef:cf:ce:3d:f9:d2:0d:26:7e:57:c2:25:01:c7:33:1e:5d:5d:
94:ed:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:41 2025 by rpki-client