Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/bLzFz117YbPjsSRqco_vNvrgpic.roa
File: bLzFz117YbPjsSRqco_vNvrgpic.roa (raw, json)
Hash identifier: WaZ9nQjFDFgZ2UzeqAp4M4MzO/eEhiyJOgoop8L+0YY=
Subject key identifier: 6C:BC:C5:CF:5D:7B:61:B3:E3:B1:24:6A:72:8F:EF:36:FA:E0:A6:27
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 04FC4CED
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/bLzFz117YbPjsSRqco_vNvrgpic.roa
Signing time: Sat 01 Jan 2022 08:54:48 +0000
ROA not before: Sat 01 Jan 2022 08:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.218.37.0/24 maxlen: 24
2a02:ef80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83643629 (0x4fc4ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jan 1 08:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cbcc5cf5d7b61b3e3b1246a728fef36fae0a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:b8:16:2f:7d:c4:48:33:97:ca:39:d2:6e:
0e:62:69:e2:32:6d:82:d3:14:b3:63:6c:1c:dd:8f:
eb:77:c8:bc:81:e5:67:45:2f:d3:09:83:1f:81:32:
6d:a2:03:b2:f4:4a:c0:8a:56:f6:b4:f4:b0:dc:b4:
75:25:94:73:02:4b:f5:d5:5a:4f:91:7b:d4:85:a2:
8e:df:90:a7:fd:60:c2:2a:71:02:cb:9d:fa:de:7b:
90:99:81:4d:09:7c:34:72:1d:a7:b6:4e:72:47:9c:
8f:52:b8:3f:0d:0e:ca:d6:d8:38:d6:64:e5:28:54:
d6:6c:fc:46:69:81:69:f9:d9:95:2a:82:e9:84:bd:
53:7c:8d:ae:99:0e:ac:6f:6f:b3:25:4d:c9:04:64:
ca:dd:fa:3c:8c:9e:57:cb:14:5d:f2:09:36:0d:e3:
43:06:a5:69:ad:37:a0:29:c8:b7:08:9f:ca:d5:15:
4b:63:b2:d4:5c:9e:83:cc:02:19:b2:73:21:76:d9:
f0:2d:c2:ae:bf:cc:2c:83:ee:b3:2f:dc:d6:a7:46:
96:5c:41:d0:53:07:98:34:a6:1c:cc:a0:ec:58:04:
9d:ef:69:93:66:2d:67:5e:17:f3:a2:a4:61:1d:60:
6e:43:8a:cc:63:73:38:62:61:c0:81:45:09:fa:4f:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:C5:CF:5D:7B:61:B3:E3:B1:24:6A:72:8F:EF:36:FA:E0:A6:27
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/bLzFz117YbPjsSRqco_vNvrgpic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.37.0/24
IPv6:
2a02:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
43:ee:da:a2:c1:2b:3f:8f:5f:0c:5a:64:c8:1b:6d:33:31:24:
35:5d:49:b2:d4:5a:ff:55:a9:f4:2e:c5:c2:71:2f:df:7c:74:
c7:01:91:5d:43:34:06:f2:0e:57:42:1c:62:88:44:00:4a:53:
fc:e9:39:6f:75:d0:90:2c:aa:c9:d1:f6:b6:45:fd:25:da:5b:
04:12:4f:bb:e4:c5:6b:96:ef:5b:2a:9a:5c:9f:a3:9a:db:a6:
9e:b4:95:9a:f4:21:62:89:08:36:8d:80:3b:da:58:de:a0:e1:
4f:76:95:6d:f6:81:cd:37:12:8b:45:32:21:ae:de:f2:7a:6d:
a3:31:86:ed:38:70:5c:90:db:0f:32:ad:5a:20:6d:57:73:9e:
b0:f0:71:f4:43:6d:9f:b8:90:b7:e4:54:2f:81:47:f1:15:86:
56:f2:d0:95:b7:28:bb:b5:54:c7:dd:59:14:dc:3d:9d:5b:72:
ce:94:f6:93:da:44:1b:7b:74:b6:5f:38:a5:4d:88:77:5e:1d:
46:45:7a:54:f0:65:86:7e:f5:f3:1a:e5:86:82:6e:ae:e1:c0:
27:6f:95:c0:ac:9a:6d:2e:fe:43:5f:21:9b:17:83:b6:b6:8f:
93:31:c8:1c:15:67:02:4d:6b:95:d2:12:6e:bf:9f:7a:9f:12:
bd:c7:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:40:23 2025 by rpki-client