Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/CU1OPg-9IgU8iDImnO8huhBTgZk.roa
File: CU1OPg-9IgU8iDImnO8huhBTgZk.roa (raw, json)
Hash identifier: yX/KkCDY4PcoroAOa4DNMrW0TbWCJBJGycz6VYAVUiE=
Subject key identifier: 09:4D:4E:3E:0F:BD:22:05:3C:88:32:26:9C:EF:21:BA:10:53:81:99
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 012C8843
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/CU1OPg-9IgU8iDImnO8huhBTgZk.roa
Signing time: Sat 01 Jan 2022 12:01:09 +0000
ROA not before: Sat 01 Jan 2022 12:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59437
IP address blocks: 91.239.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19695683 (0x12c8843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Jan 1 12:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=094d4e3e0fbd22053c8832269cef21ba10538199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:83:64:f0:78:69:8a:c2:5a:cc:3a:fe:5a:
6d:c6:37:29:80:8c:35:33:df:69:51:08:31:54:3d:
4d:f2:7c:1d:a4:51:41:42:f8:6d:60:1f:46:e9:78:
8a:5e:ea:bd:58:11:30:9e:d6:2e:0e:87:78:db:ac:
7b:10:9f:cc:b2:cf:44:8f:d6:ec:d5:92:23:db:d7:
d0:01:b7:c2:af:b5:aa:95:c2:08:38:f0:e1:5e:8d:
9a:4a:f2:13:08:39:87:63:ab:5e:06:f9:dc:bb:50:
e8:d4:8d:60:bb:7c:d9:a6:3d:e0:d8:ed:eb:b1:88:
17:64:64:97:db:97:54:e7:a2:15:fb:b2:aa:df:b8:
a3:41:8a:76:b7:12:2f:37:db:0e:8b:55:cd:92:69:
7c:5c:10:14:ed:76:d7:b9:ad:a1:73:a4:2f:ae:89:
cb:41:41:f0:39:6d:01:a1:ad:89:d8:f6:60:7e:77:
e2:80:fd:ca:4f:79:ca:6b:c3:e5:33:61:d9:b6:25:
3c:77:16:2b:61:17:97:3e:83:da:a5:d6:65:8a:c6:
a4:b5:69:49:f1:cb:12:e8:2b:5c:68:8b:d1:5c:a4:
46:cc:d9:1a:3c:53:7d:2f:0d:cd:55:39:eb:c3:03:
53:7d:df:17:95:7b:a6:47:c8:03:35:a9:6d:0a:60:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:4E:3E:0F:BD:22:05:3C:88:32:26:9C:EF:21:BA:10:53:81:99
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/CU1OPg-9IgU8iDImnO8huhBTgZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:98:e6:0c:1e:52:c7:75:2b:85:a9:28:79:a0:4b:3f:9f:ba:
9e:23:ed:1d:99:a4:9f:fe:d1:f1:2a:4c:7c:1c:c9:e7:37:dc:
af:b2:95:c6:da:11:2d:f0:78:75:b7:37:16:09:b0:3d:26:2f:
01:a3:a2:12:38:51:42:40:36:ba:0c:d6:40:c6:42:a9:51:d0:
d4:72:18:dd:ec:4b:bb:e8:81:93:b5:6d:c2:69:d8:6d:bd:ad:
29:59:ab:ff:dd:73:ef:ea:6e:50:81:58:91:68:b0:df:10:11:
85:af:bc:eb:10:2c:cf:28:0a:1b:e8:cb:a5:f1:86:ae:c1:b3:
a9:5f:45:91:b6:d9:ff:d1:63:08:18:91:52:71:b9:eb:96:c0:
09:ee:49:8e:a3:f7:f5:94:aa:76:bc:6b:fb:2b:98:e8:1b:b9:
6e:fd:63:9c:56:8a:25:e2:04:12:58:58:b5:be:07:1a:2d:6d:
62:da:93:24:cf:52:8f:91:d6:78:4f:75:3c:c1:0c:58:8e:04:
28:00:06:65:2a:b0:93:62:55:ba:58:c2:5d:39:0e:ab:83:cb:
58:9c:f6:0b:e0:5c:a0:98:a0:c2:d4:8a:4d:33:e1:04:3e:02:
37:0d:6c:d1:81:74:2d:1e:dd:de:36:90:ed:a9:45:95:d4:fd:
18:d9:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:07:17 2025 by rpki-client