Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/L6kFDstXDoG46hiFbpJpSx7OyIQ.roa
File: L6kFDstXDoG46hiFbpJpSx7OyIQ.roa (raw, json)
Hash identifier: uxlRe7+PwQcayS0HG+R5qlgKmoQ4Sc8JtXAP32mge1s=
Subject key identifier: 2F:A9:05:0E:CB:57:0E:81:B8:EA:18:85:6E:92:69:4B:1E:CE:C8:84
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 03E178DB
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/L6kFDstXDoG46hiFbpJpSx7OyIQ.roa
Signing time: Sat 01 Jan 2022 11:58:09 +0000
ROA not before: Sat 01 Jan 2022 11:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51180
IP address blocks: 91.241.96.0/20 maxlen: 21
91.241.112.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65108187 (0x3e178db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 11:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa9050ecb570e81b8ea18856e92694b1ecec884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:a1:d0:a7:60:55:42:7c:dd:76:e7:9a:8a:
36:bb:40:fb:da:56:57:f9:85:c0:8a:89:0d:3b:c2:
48:90:e1:dc:11:00:73:24:cd:07:28:69:6a:68:46:
96:d5:41:4c:88:99:d5:0e:ed:17:b2:d6:0a:5b:69:
57:62:c3:70:6b:1b:06:38:4f:02:37:51:1d:d0:d3:
2f:7b:8f:fa:93:5c:71:f6:e8:50:ef:60:61:35:d7:
34:e0:c9:93:b6:d1:dd:41:f7:50:57:a5:d0:c4:e4:
30:98:01:20:75:db:92:4b:3f:35:0c:06:d2:17:55:
5c:a9:b2:df:3e:38:bb:1b:41:d4:2c:5b:e9:f3:48:
0c:f3:b5:15:50:2c:4b:af:88:3f:27:b8:15:c0:93:
24:22:92:2e:8f:56:12:2e:3f:a7:a8:d8:a6:8b:43:
51:0f:a8:dd:00:03:9d:76:ea:ea:ea:7d:02:8e:2a:
22:de:99:f7:66:35:3f:1b:04:c5:5b:e5:c4:53:d8:
6b:89:71:75:5c:91:33:39:1f:e9:80:47:34:8b:14:
d0:8b:69:d6:38:9e:92:f5:e7:7f:9f:ea:03:91:10:
c7:77:64:3f:89:c2:e4:ab:52:6c:fa:ae:bc:01:ed:
68:02:ae:b3:07:8f:0d:ea:67:87:b0:17:5c:30:32:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:05:0E:CB:57:0E:81:B8:EA:18:85:6E:92:69:4B:1E:CE:C8:84
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/L6kFDstXDoG46hiFbpJpSx7OyIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.96.0-91.241.119.255
Signature Algorithm: sha256WithRSAEncryption
27:f9:f1:fa:94:a3:4e:29:55:c7:5a:28:bd:01:33:b4:10:37:
18:05:f1:bb:9c:4e:93:f5:32:34:87:a8:ac:20:40:09:56:a5:
b6:b3:b6:c3:68:2d:ea:27:53:00:a4:46:63:44:12:12:58:c6:
65:e6:8d:23:b0:68:49:54:33:d5:90:c8:c2:7c:75:f7:7a:3b:
37:32:5e:5c:a7:ac:43:c4:2d:82:58:21:58:9c:8b:92:ee:b1:
9c:86:d9:40:89:0d:f3:37:ec:cb:f6:17:0a:2a:de:2c:33:ce:
dd:00:87:5c:ca:dd:40:fd:fc:2a:9a:cd:16:e1:2e:91:45:09:
ba:5c:69:38:2c:b8:8e:c0:b7:3c:f5:25:9c:63:ba:05:1f:8f:
8d:91:e1:36:40:8a:ae:19:41:9d:81:c9:37:04:47:58:25:01:
94:fd:b8:c2:f2:f7:05:8b:92:75:5a:17:76:73:f0:34:48:9a:
42:92:b5:a6:b1:d0:33:bc:73:96:40:44:58:58:9e:a2:5a:d8:
79:1b:eb:f7:6e:1c:61:c9:25:08:fa:a6:1f:8c:1e:22:53:5f:
83:c0:58:1e:55:eb:f1:d1:5d:95:5b:30:3a:e4:f1:bf:66:81:
31:4c:33:7a:b8:34:5d:a0:e3:26:24:2e:3b:5c:98:65:3d:84:
b3:42:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:44 2025 by rpki-client