Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/4hSkKz0JkxgSW5FAsRgYTjx-ido.roa
File: 4hSkKz0JkxgSW5FAsRgYTjx-ido.roa (raw, json)
Hash identifier: vJfctrxpfKV6DVr8hQKhcyBAuUFGoDQtV9W9w4cNfe8=
Subject key identifier: E2:14:A4:2B:3D:09:93:18:12:5B:91:40:B1:18:18:4E:3C:7E:89:DA
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 018570E74BDE8425A06A01F07E869BD5693B
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/4hSkKz0JkxgSW5FAsRgYTjx-ido.roa
Signing time: Mon 02 Jan 2023 05:14:44 +0000
ROA not before: Mon 02 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 91.220.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4b:de:84:25:a0:6a:01:f0:7e:86:9b:d5:69:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Jan 2 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e214a42b3d099318125b9140b118184e3c7e89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:46:86:97:c2:9c:da:68:50:f0:00:0a:9a:
73:3e:8b:97:28:3f:70:12:cf:bf:f2:e5:8b:f9:01:
a7:7b:b6:84:e4:5b:44:c9:0e:90:52:87:40:63:9c:
4a:d8:51:5e:fc:41:9e:9b:31:1a:59:bf:f6:7b:52:
3f:f3:dd:7c:91:46:91:8e:67:ff:f4:bc:10:48:86:
4d:9e:64:58:38:e8:fa:be:e9:de:29:29:69:26:82:
88:dc:fa:46:18:db:f9:18:3f:c3:47:7b:ca:c4:1a:
e5:aa:84:a0:52:0f:08:d9:82:0a:bf:b4:50:2e:95:
8a:34:dc:3c:94:bd:7f:0c:4a:23:5d:4f:10:be:03:
71:f1:88:d2:50:51:cb:2d:aa:28:e5:9d:7d:5a:a9:
36:be:02:8e:80:d9:a5:ef:17:a0:0f:b0:db:9b:ad:
4c:70:f4:eb:3e:e1:97:a3:7f:8c:7c:f4:ed:1f:fa:
05:fe:1e:f1:f1:e2:8b:e9:ce:e3:ab:e8:1f:f9:0f:
54:c9:48:3d:d6:31:30:11:eb:3b:5f:50:09:fc:86:
d0:30:4a:d4:61:5d:7a:6a:a6:16:d8:83:18:a0:58:
b1:8a:e7:67:fb:fe:63:2b:6c:8d:33:39:ac:fd:f3:
d8:d7:dd:ba:85:4a:fb:51:b1:77:60:09:81:42:cf:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:A4:2B:3D:09:93:18:12:5B:91:40:B1:18:18:4E:3C:7E:89:DA
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/4hSkKz0JkxgSW5FAsRgYTjx-ido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:70:77:c4:4c:db:d4:07:45:b6:6f:64:e5:78:21:a6:f3:67:
6c:4d:0a:8f:6f:e5:e4:17:5f:25:e4:db:1b:aa:1e:9a:d3:b2:
29:94:ac:b0:64:61:36:53:a9:51:dc:43:7f:49:d8:92:eb:6d:
f1:af:8d:1d:c3:3c:99:11:d7:8b:53:a6:aa:d3:d9:0a:78:0d:
6d:bd:78:c9:34:01:78:93:10:65:be:bf:d9:32:06:7d:38:8b:
79:df:3a:63:c9:5a:4f:45:dd:ee:37:96:da:3c:b5:c9:d4:47:
6a:f5:1d:b3:66:47:77:5d:ae:53:ad:62:4a:bc:2b:e0:7a:2e:
1f:78:a1:e0:e7:ae:fd:8a:94:85:80:06:23:67:de:67:eb:63:
cc:d6:58:ae:d5:c4:34:cd:dc:25:a4:49:67:e6:1d:b9:19:ea:
b4:d0:66:53:b1:e2:da:7d:3c:27:24:86:5a:3c:7f:cb:00:8a:
1f:d6:25:29:f4:c6:ad:99:f1:44:29:a5:71:2b:36:7e:89:ec:
5c:d9:b6:c7:92:8b:39:95:63:da:32:90:70:6f:39:d2:8c:c0:
50:15:45:79:f7:63:ff:68:08:4e:22:71:f4:fc:a1:33:21:a1:
c1:d0:ce:ec:2c:02:f5:3a:a1:3b:90:ca:8c:98:5b:19:71:b8:
d9:e2:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:52:26 2025 by rpki-client