Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/3S2gADK19sk2nJo9VmVv1MQs2Uw.roa
File: 3S2gADK19sk2nJo9VmVv1MQs2Uw.roa (raw, json)
Hash identifier: 5G/48e7gztiDunwSPmhcbX0Jv1oNziQNsVwFazCLrQw=
Subject key identifier: DD:2D:A0:00:32:B5:F6:C9:36:9C:9A:3D:56:65:6F:D4:C4:2C:D9:4C
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 0713909C
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/3S2gADK19sk2nJo9VmVv1MQs2Uw.roa
Signing time: Sat 01 Jan 2022 11:56:30 +0000
ROA not before: Sat 01 Jan 2022 11:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 91.227.168.0/24 maxlen: 24
91.227.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118722716 (0x713909c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 1 11:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd2da00032b5f6c9369c9a3d56656fd4c42cd94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:52:7f:91:c0:b7:53:89:e3:6f:22:1f:bf:
a8:3f:a3:84:8a:19:23:51:48:c0:fb:97:86:7e:6b:
4a:1c:89:88:1d:58:ce:2e:5a:e2:2c:9d:2b:46:41:
13:25:a4:7e:d3:6f:56:3e:fe:3c:66:9e:5f:e3:83:
ca:43:05:0c:5e:51:19:2b:65:c1:b1:56:32:70:03:
cd:d6:46:e9:5f:36:66:e3:d4:8c:8d:6c:16:2c:86:
e7:d0:42:b5:fe:dc:3d:ad:2e:d1:fb:3e:64:8c:93:
49:3d:68:89:6c:ae:21:56:5c:91:4b:1d:3a:a2:fc:
ee:6a:00:d4:cc:06:64:94:fc:0c:cf:ef:a3:b1:05:
aa:a0:af:2b:bc:aa:d6:38:07:28:33:43:08:81:65:
c0:18:83:7b:0f:da:2d:f6:89:54:bb:90:c9:70:82:
d4:75:85:46:f7:00:28:d0:ad:d0:19:50:40:0a:d0:
31:4c:3e:ef:67:7a:ce:16:68:68:bb:9e:ac:78:fd:
5a:97:ba:84:85:ea:3f:e9:b2:d9:5a:db:f6:6f:c8:
2a:15:4d:2f:f7:6f:44:cd:38:3f:9c:14:88:4b:93:
9d:e3:00:cb:cf:1f:5e:08:2c:21:ba:57:4f:94:d2:
4b:58:ce:6e:b2:18:72:b2:fe:c3:83:8a:5a:9a:dd:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:A0:00:32:B5:F6:C9:36:9C:9A:3D:56:65:6F:D4:C4:2C:D9:4C
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/3S2gADK19sk2nJo9VmVv1MQs2Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.137.0/24
91.227.168.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7b:7b:9b:d4:f3:6c:26:f8:43:2b:ec:fd:13:c3:05:ba:1f:
61:76:b0:20:d3:5c:50:ec:d0:f7:89:7c:99:41:a2:cc:23:f8:
7c:db:e1:7b:ab:cf:64:f6:3d:f1:69:65:4e:42:a6:42:a8:ff:
97:35:d4:c5:c8:04:ce:9e:f4:cd:4a:ab:e4:b5:6e:c4:ae:84:
de:25:ad:47:5d:02:c2:b0:cb:a7:2b:3d:36:db:c7:fc:fe:38:
cb:23:c5:47:0d:4a:a6:62:3c:b2:1d:6b:48:d7:cf:68:20:e6:
d8:bb:d5:a7:06:4a:e0:2a:ea:32:92:07:0d:01:6c:29:7f:9b:
f6:b1:64:58:b3:86:88:82:f3:5b:45:33:30:10:8a:76:6f:92:
c3:bb:5a:6c:68:6c:50:3a:64:f1:76:91:57:34:8d:c8:d1:d8:
86:04:87:c2:fd:db:e3:f9:22:35:26:3c:44:d1:55:ea:39:3d:
5a:45:e4:58:8b:62:93:32:5c:b8:db:eb:af:cf:11:97:37:78:
b1:f1:70:3e:94:96:20:02:24:9e:04:05:d2:d1:53:2a:08:8a:
e7:98:ed:29:ee:cc:0a:68:93:3c:83:32:66:42:a1:27:44:15:
e0:21:f2:cd:ad:58:11:5a:7b:13:a4:55:5b:ab:dc:38:4f:66:
b6:47:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:16 2025 by rpki-client