Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/vYnYoZmH-re1GFWKPUhWKcJnDY4.roa
File: vYnYoZmH-re1GFWKPUhWKcJnDY4.roa (raw, json)
Hash identifier: dkQNgO3bwbETcINBbjmHcFbm9lPAGm/hf3g8FaBulSo=
Subject key identifier: BD:89:D8:A1:99:87:FA:B7:B5:18:55:8A:3D:48:56:29:C2:67:0D:8E
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 018A9C4175176E77B7EB91A157E1533B73C2
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/vYnYoZmH-re1GFWKPUhWKcJnDY4.roa
Signing time: Sat 16 Sep 2023 04:30:50 +0000
ROA not before: Sat 16 Sep 2023 04:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201108
IP address blocks: 91.206.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:41:75:17:6e:77:b7:eb:91:a1:57:e1:53:3b:73:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Sep 16 04:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd89d8a19987fab7b518558a3d485629c2670d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:4c:c6:36:72:bf:21:a0:9c:8e:f1:fc:e4:
ed:b9:6c:f9:07:81:5a:81:f4:bb:04:e7:79:1d:c0:
a9:55:65:3d:d7:5b:56:29:39:a0:95:ee:f0:8d:ca:
85:cd:44:b9:ff:13:28:a6:99:f8:19:b5:94:b4:67:
4d:f7:c6:f7:6f:a6:e1:64:b3:fc:bf:3d:31:3e:c4:
7c:45:5b:f3:66:f8:71:c3:a8:a1:51:dd:11:87:9f:
65:3a:d3:1d:89:57:03:c0:65:95:38:5d:a7:06:70:
18:f5:77:f8:d6:72:20:18:71:b0:d6:d9:72:05:32:
b6:55:38:94:ab:13:58:10:4c:0b:ca:f0:fa:59:40:
50:3e:24:26:8f:42:30:b5:e2:c9:2e:cd:15:cb:88:
d6:06:f2:77:32:e1:a8:55:4f:ec:56:4d:96:a3:be:
b9:14:d9:f8:67:9b:f0:53:b5:b8:99:92:ca:aa:4d:
02:9d:c3:ce:91:5e:7f:a7:cd:83:66:63:1d:c0:e9:
a1:d9:f6:f2:eb:97:c4:4e:e2:1c:87:7f:a5:41:e8:
4b:6f:6e:f7:00:bf:ce:8c:9c:93:80:50:15:8d:0f:
b3:83:0e:b3:a9:a3:58:75:86:ac:fb:ce:62:dc:a2:
c3:0e:8a:3f:51:d8:4c:b0:b1:cf:4c:38:6a:80:01:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:D8:A1:99:87:FA:B7:B5:18:55:8A:3D:48:56:29:C2:67:0D:8E
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/vYnYoZmH-re1GFWKPUhWKcJnDY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.113.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b1:4c:e1:c3:9c:70:0c:18:52:c2:ce:d0:b9:ca:83:75:fc:
1b:f9:74:86:56:ad:6c:04:37:c3:48:62:41:b2:16:35:36:db:
6a:b9:64:5d:df:88:3e:56:11:28:ce:d3:a0:66:a3:c6:4f:a7:
50:bb:d0:90:fc:8e:21:94:8f:c0:57:33:c4:61:01:95:3b:70:
4e:e6:07:05:36:b7:b0:b2:7f:2a:ed:7a:0b:1d:f0:42:92:bd:
37:3f:83:1a:c5:3e:cf:a7:71:7d:c3:07:9e:2e:60:7c:77:6f:
09:2c:50:cb:98:1d:97:69:c9:26:f9:a1:21:92:9f:37:99:2b:
ca:8e:2c:0e:53:57:ac:d6:f9:e1:a9:7e:e4:c8:2d:51:da:35:
3a:ff:08:06:bf:4f:e2:fa:06:8e:f3:d2:ab:45:69:ca:cb:14:
7f:8c:06:a6:08:c4:37:1c:10:f5:b9:e6:77:03:33:2c:10:af:
fa:f0:79:ce:44:1c:e7:42:41:7b:e2:37:2e:8e:70:a8:2b:36:
33:48:72:ef:8c:9f:56:eb:56:58:c3:a7:c0:a0:ca:ca:8e:3e:
17:d5:cd:4c:db:1b:cd:d2:8f:df:af:59:cb:74:65:23:33:64:
25:3f:ee:89:f9:1c:81:9c:96:b2:72:64:ad:3a:9c:c6:8c:72:
20:0e:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:49 2025 by rpki-client