Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/uSajfbI8bXL8Efmx49tvo_3i-6g.roa
File: uSajfbI8bXL8Efmx49tvo_3i-6g.roa (raw, json)
Hash identifier: k72mYZGjqIoUHy5lwDr3OxVfR7vp2P8RGqTrn2LhfwY=
Subject key identifier: B9:26:A3:7D:B2:3C:6D:72:FC:11:F9:B1:E3:DB:6F:A3:FD:E2:FB:A8
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 01857082DAC18066607DD208D781DF690F85
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/uSajfbI8bXL8Efmx49tvo_3i-6g.roa
Signing time: Mon 02 Jan 2023 03:25:01 +0000
ROA not before: Mon 02 Jan 2023 03:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206123
IP address blocks: 91.213.19.0/24 maxlen: 24
91.235.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:da:c1:80:66:60:7d:d2:08:d7:81:df:69:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Jan 2 03:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b926a37db23c6d72fc11f9b1e3db6fa3fde2fba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:7c:ef:fa:26:9d:ab:89:35:3e:0c:d3:67:
14:21:7b:be:03:73:90:c7:c6:3e:f4:3a:13:59:1c:
36:eb:05:13:a0:ef:07:34:98:9e:d4:63:52:e0:ca:
2c:3b:5a:12:13:5b:95:c5:76:ff:bc:00:29:d3:ac:
bd:c9:79:d4:53:a5:97:37:4d:ee:4f:4d:12:55:be:
0e:f1:54:ff:2f:49:f7:76:4b:16:64:ed:ba:96:d1:
ff:68:2c:c3:36:f0:29:ff:8b:2d:3c:5f:61:13:d0:
83:80:41:d8:1c:17:a3:44:b8:4a:e8:e0:e8:59:97:
09:7b:2b:7e:bb:4c:94:26:70:eb:b4:67:dd:f9:50:
7e:fd:89:8d:23:f8:7e:7b:cd:2f:6c:7f:40:09:ab:
f3:f0:6d:21:32:72:33:ff:ed:93:c7:52:60:9e:ec:
ac:30:d8:9d:0c:fe:90:17:1e:17:bc:9f:81:0c:44:
bc:04:11:7c:1e:7f:25:2f:5c:de:84:56:4f:ab:58:
e4:1a:7c:ad:5e:05:0c:6b:97:c0:8e:69:bf:5f:a8:
79:b8:f4:2a:c0:5f:21:ff:23:01:b9:b8:86:62:b1:
ea:3f:4e:7a:31:79:4d:ea:45:15:a9:07:c1:5e:bd:
b5:b8:f4:05:fe:7d:c8:ff:8a:1f:78:5d:7e:25:ed:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:A3:7D:B2:3C:6D:72:FC:11:F9:B1:E3:DB:6F:A3:FD:E2:FB:A8
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/uSajfbI8bXL8Efmx49tvo_3i-6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.19.0/24
91.235.212.0/24
Signature Algorithm: sha256WithRSAEncryption
92:47:2c:84:8e:e1:f1:48:b9:7d:4f:77:a2:28:57:61:1c:0d:
89:f4:7e:60:a9:e4:44:03:73:06:fe:52:50:ee:63:6f:6a:34:
c0:41:29:a6:83:56:87:77:61:11:f1:29:4c:c8:d2:49:ee:94:
7e:d3:0b:79:62:57:ba:34:51:96:2e:db:77:7d:df:74:5b:a6:
70:2f:99:38:c6:5d:10:bd:70:95:44:99:05:87:a5:7a:5d:2b:
ea:86:08:73:19:8e:7b:ba:0a:2d:c7:9c:22:f2:10:ed:a1:37:
6d:83:2b:db:f3:6c:e2:32:4e:4a:95:16:d2:69:0c:40:f4:0f:
ff:ad:89:54:f5:57:ba:35:3a:14:06:a6:97:a7:a6:f4:6b:e6:
29:2f:76:3b:4b:23:66:22:0a:f0:de:43:e2:2b:51:ec:e2:0f:
98:80:cc:bd:37:1f:58:0f:ef:e7:4c:26:93:1c:57:89:d7:63:
0d:ea:4f:b1:ee:9b:23:47:ad:0f:e1:45:40:3d:32:cb:26:d1:
f8:95:63:e4:01:d4:87:7e:d6:01:ce:ef:4c:73:37:36:a8:05:
b2:ee:77:8e:0e:3a:6a:b0:38:2c:88:fa:f2:39:09:5f:1a:fd:
d8:9b:42:e9:1e:08:03:5b:d0:7a:64:c2:bb:59:36:80:a4:04:
d7:3c:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:47 2025 by rpki-client