Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/ccv0_QtRPdferJp6K_3Z9oZWrlY.roa
File: ccv0_QtRPdferJp6K_3Z9oZWrlY.roa (raw, json)
Hash identifier: 05FIfWrqMNYFoGFr/iegBnnszKnBLmLDqHD3z2QQ4FA=
Subject key identifier: 71:CB:F4:FD:0B:51:3D:D7:DE:AC:9A:7A:2B:FD:D9:F6:86:56:AE:56
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 098C9655
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/ccv0_QtRPdferJp6K_3Z9oZWrlY.roa
Signing time: Sat 01 Jan 2022 04:04:22 +0000
ROA not before: Sat 01 Jan 2022 04:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 91.220.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160208469 (0x98c9655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Jan 1 04:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cbf4fd0b513dd7deac9a7a2bfdd9f68656ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:bf:e0:35:fe:e4:b1:f8:b5:de:32:b9:72:
e6:a7:be:e8:c8:1d:11:bf:90:e5:3d:28:3d:db:ff:
fd:54:e5:3b:39:97:94:3c:bf:e1:67:98:15:1e:37:
66:2b:19:26:4b:6b:4c:53:5f:14:79:7b:0c:cc:e0:
1a:22:09:d0:cf:6e:d7:df:fe:c8:53:47:cc:85:4f:
7f:ad:ef:da:ff:b0:83:db:b3:13:88:56:35:7d:c1:
87:7a:cb:13:7b:6e:dc:e8:7b:6f:a1:b8:5f:40:3e:
d5:b8:1e:0c:0b:b3:e0:ee:40:f0:1f:92:5a:ec:bb:
07:d8:8c:44:68:78:84:d7:0a:3d:a5:c3:6b:65:e2:
0d:c8:00:14:38:50:e3:89:be:ff:70:99:fb:e2:65:
8b:43:da:52:91:21:ab:b1:70:76:30:62:d0:ba:3c:
ce:e0:fe:2a:5d:d2:4b:8f:44:00:d3:3b:d7:af:84:
61:92:c4:59:5f:b1:19:89:a5:02:4a:83:ff:91:a1:
9c:99:82:ad:9f:d8:15:5e:f0:0b:d5:e1:5e:54:27:
ae:c3:cb:64:4b:92:2b:ae:52:fe:4d:04:1f:a0:dd:
ac:fc:86:38:17:33:9b:1d:86:ee:5d:fa:09:ac:a1:
54:da:bd:67:c7:35:3d:26:cb:fb:77:31:b8:02:e2:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:F4:FD:0B:51:3D:D7:DE:AC:9A:7A:2B:FD:D9:F6:86:56:AE:56
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/ccv0_QtRPdferJp6K_3Z9oZWrlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e0:bd:39:9b:3d:ed:7c:66:9f:c8:9b:9c:bf:ac:cd:c7:e3:
8c:bd:89:be:58:91:ce:7c:fa:da:68:b2:9a:a3:5c:d1:41:20:
a0:c4:3b:9e:da:81:71:50:e3:b2:05:44:76:36:04:40:29:4a:
ba:81:4b:9c:4f:3f:49:bd:1b:9b:0c:60:1b:3b:11:bb:e1:6c:
6d:7d:27:dd:50:1a:2c:d7:7f:15:f0:89:93:7c:e1:b5:18:b1:
ca:8c:e1:a9:a7:36:6c:2f:62:f8:46:d4:60:24:29:3f:78:7c:
cd:d4:db:37:e4:db:d7:9e:8c:a2:44:92:22:8a:41:49:42:57:
a3:82:4f:27:a7:56:10:7f:40:6f:8b:73:0d:a1:03:72:b3:73:
98:c3:19:af:d4:db:0b:45:45:25:e3:78:80:73:03:8f:a4:a7:
7d:ee:03:e3:0f:99:2a:08:2d:09:f2:25:93:ae:5f:4c:9d:42:
ad:3c:17:ca:d4:c7:f3:c6:f4:03:41:ba:fd:a0:c7:eb:e5:f8:
aa:b8:8a:85:e7:7c:c6:72:df:da:fb:3a:fc:77:5f:f7:cd:1e:
16:f2:dc:c3:c7:f9:e7:9e:87:1c:0a:03:99:c3:72:7f:38:7e:
22:58:bf:e6:8a:15:0f:df:c2:44:c3:d8:9e:0a:c4:55:65:b1:
3d:18:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:31 2025 by rpki-client