Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/XUfy_OmJyxsV2RnBqUv9QDpgAsM.roa
File: XUfy_OmJyxsV2RnBqUv9QDpgAsM.roa (raw, json)
Hash identifier: tVqeMAgpIh754bemaTMQCMpAMZI/OTqFajL8zWk14Aw=
Subject key identifier: 5D:47:F2:FC:E9:89:CB:1B:15:D9:19:C1:A9:4B:FD:40:3A:60:02:C3
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0182B075F1E4C7B9E92103863D757240BDCA
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/XUfy_OmJyxsV2RnBqUv9QDpgAsM.roa
Signing time: Thu 18 Aug 2022 10:18:15 +0000
ROA not before: Thu 18 Aug 2022 10:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50912
IP address blocks: 91.216.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:75:f1:e4:c7:b9:e9:21:03:86:3d:75:72:40:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Aug 18 10:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d47f2fce989cb1b15d919c1a94bfd403a6002c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:c5:f1:40:bf:b3:b5:84:5d:76:c4:15:b7:
e0:20:eb:22:90:2d:4a:90:11:63:57:3d:84:df:97:
70:38:50:e0:80:8e:69:cb:f3:61:49:33:c8:71:e5:
aa:f3:d5:60:19:a2:ad:ce:f5:92:90:c6:94:e0:dd:
42:8c:24:b7:a0:07:5b:8f:f1:99:21:af:8e:95:5a:
24:2a:ca:5c:e9:50:b0:07:79:5b:1e:b5:a0:df:43:
6f:72:21:ef:20:26:15:cd:e3:a5:82:00:db:fa:b8:
cf:bd:1a:4c:93:93:99:d0:12:6c:2c:6a:f3:60:98:
33:7e:5e:6b:d7:4d:38:86:bc:b2:3b:52:4b:d0:9c:
c5:9c:a2:ed:9c:9c:d4:a0:c6:be:35:38:a0:52:0f:
52:3c:32:83:a9:ff:19:08:a3:b1:f6:d3:f3:ba:d9:
bd:e3:59:c1:c3:5d:39:fb:87:5a:8a:5e:78:a2:91:
f4:85:74:22:84:75:01:8e:a0:58:73:63:91:5c:7f:
4e:74:a1:f4:ce:43:f6:b2:31:dc:9a:18:9c:59:58:
bb:15:f8:53:99:c0:be:71:96:71:e4:b5:52:f2:01:
97:00:95:97:20:29:ab:33:4a:25:a9:cd:1b:d5:90:
96:1a:cc:6d:3f:6b:9a:fe:ef:48:be:00:15:50:d3:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:F2:FC:E9:89:CB:1B:15:D9:19:C1:A9:4B:FD:40:3A:60:02:C3
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/XUfy_OmJyxsV2RnBqUv9QDpgAsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.27.0/24
Signature Algorithm: sha256WithRSAEncryption
91:52:a6:13:20:9a:b9:43:1f:7a:cf:2c:90:85:b3:17:d8:c7:
4a:68:40:c8:6e:56:4a:a1:24:0c:ad:04:03:c0:7a:0d:14:20:
a5:9d:7c:51:b1:e2:80:0d:54:f4:01:bf:98:69:8b:09:c0:41:
17:45:23:0d:52:e2:f4:c0:cf:c8:48:0e:5c:66:86:26:81:cf:
aa:59:fe:4c:97:6a:4e:3f:4b:28:01:50:dc:69:2c:ae:75:2a:
22:56:31:80:f6:bd:d8:85:45:bd:ea:b8:94:ff:73:a9:93:de:
fd:5e:d9:36:65:fc:44:df:0e:41:f5:c6:c9:3b:a7:32:25:f4:
5b:07:79:6f:8c:8c:0a:36:55:ef:14:c9:0b:84:7f:94:fc:a2:
7e:22:c0:47:18:b0:95:e2:e2:10:d2:71:10:95:d3:45:f5:45:
d5:03:d9:1f:d6:c0:0d:e9:56:1d:be:ce:2d:80:49:03:4f:db:
5c:dc:98:62:59:b3:1a:57:d0:3c:d9:97:b5:4a:00:d0:ac:65:
f2:9b:ff:24:c3:b5:c7:99:4c:2f:0f:b5:21:8f:76:43:65:a5:
d4:fc:a7:69:0e:e4:da:46:05:17:f5:12:13:d3:e3:c6:8e:58:
dc:99:bf:8b:64:1f:21:0d:4d:a9:11:af:56:3e:58:62:86:a6:
8e:19:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:47 2025 by rpki-client