Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/8113Vn-czuUcJS_imDeMcT9NWQ4.roa
File: 8113Vn-czuUcJS_imDeMcT9NWQ4.roa (raw, json)
Hash identifier: +8cmP4nmS7ZV0wSOOMSrEI0V6K3BGWepHsgs2W6pw8Q=
Subject key identifier: F3:5D:77:56:7F:9C:CE:E5:1C:25:2F:E2:98:37:8C:71:3F:4D:59:0E
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 02DBD41C
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/8113Vn-czuUcJS_imDeMcT9NWQ4.roa
Signing time: Sat 01 Jan 2022 06:57:41 +0000
ROA not before: Sat 01 Jan 2022 06:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43187
IP address blocks: 91.198.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47961116 (0x2dbd41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Jan 1 06:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35d77567f9ccee51c252fe298378c713f4d590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:c5:09:32:8c:7a:d6:81:c2:92:09:c1:1c:
03:57:39:53:05:8e:0b:f8:a3:50:02:be:0a:c8:10:
4a:55:0d:3a:70:6f:ee:82:d4:05:aa:5c:92:b4:b8:
de:ac:7e:21:57:7f:c1:80:ef:98:51:b6:2e:f6:7d:
3c:ee:f9:8f:c6:cd:93:bf:f4:d4:ad:3d:bc:11:96:
13:6c:0e:f0:6e:3a:f7:29:6e:c7:72:6d:71:24:76:
49:89:3b:b4:9b:62:6a:49:7b:b1:e4:7d:08:0c:8e:
6a:f2:33:ce:2f:1a:1c:ad:63:13:80:77:e7:0e:46:
bd:87:d9:fe:b6:8f:ed:ed:02:6d:23:3e:50:5a:a5:
7f:6a:9c:05:ce:18:90:cd:6b:88:31:fd:85:f8:cb:
77:63:f8:13:49:01:40:94:eb:cf:2c:82:c5:24:cb:
87:fb:68:ee:77:10:eb:a0:a0:0f:3f:e6:0c:1e:a3:
97:46:ca:70:77:2a:06:9e:01:a0:21:c0:81:db:f1:
35:0a:34:cb:ff:3a:1a:96:70:35:2a:70:15:8c:b1:
a9:37:ec:75:48:9d:a5:58:37:7b:81:15:5c:ea:44:
b5:82:17:72:12:b8:22:9a:09:57:23:f2:51:e5:e7:
02:07:69:34:1a:ac:b2:23:af:b9:4f:0e:ae:cd:1e:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:77:56:7F:9C:CE:E5:1C:25:2F:E2:98:37:8C:71:3F:4D:59:0E
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/8113Vn-czuUcJS_imDeMcT9NWQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f8:b1:e0:e4:9f:c3:db:96:ce:4c:b0:a8:1a:58:c8:1b:b7:
7c:be:be:7a:6a:fc:3d:b8:e2:ce:24:94:e2:15:3d:b8:cc:b3:
41:e4:6f:28:17:8e:97:26:03:a2:44:46:61:71:aa:30:f7:87:
e6:b2:9d:f7:31:ea:b5:ba:aa:8b:cc:35:b5:62:20:b4:4b:86:
ab:4b:39:2a:0c:13:37:f1:9d:17:77:6b:14:5d:c0:13:39:0a:
f9:64:20:a5:23:be:39:c5:ee:83:38:af:76:35:90:b3:44:0e:
88:39:6f:5b:b5:bc:b9:d0:04:b6:ea:89:0e:98:06:63:4f:3b:
65:ce:d0:6e:6d:90:ec:e0:c5:cd:f1:60:78:b6:f0:71:42:d7:
f4:ab:cc:d6:a8:25:a5:c0:ac:0f:26:f3:10:2b:31:34:7e:56:
9a:44:f6:37:de:26:6c:17:0b:80:03:93:89:e8:40:f5:cd:fe:
7d:9a:92:aa:2d:a4:5a:94:ce:0a:7e:d5:52:3b:bd:5e:02:ae:
27:cb:cf:95:3a:97:f1:93:bc:39:a0:ae:e2:f9:82:f8:38:f9:
64:5d:9f:cf:a8:b6:b3:bf:d4:3f:ba:3e:5c:0d:26:4b:47:49:
61:05:22:54:61:98:00:40:5e:35:91:2e:9b:10:c5:ae:d9:64:
6e:f8:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:40 2025 by rpki-client