Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/6UH-iNz44u1MTjqRIPdqZc1WoW0.roa
File: 6UH-iNz44u1MTjqRIPdqZc1WoW0.roa (raw, json)
Hash identifier: Y6ca0zuuODqZyJSVyx1kje+6vUR1G+W/+DEoRcbU9k4=
Subject key identifier: E9:41:FE:88:DC:F8:E2:ED:4C:4E:3A:91:20:F7:6A:65:CD:56:A1:6D
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01856FD4EEE73767C94FE9E3B1C118BFE61F
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/6UH-iNz44u1MTjqRIPdqZc1WoW0.roa
Signing time: Mon 02 Jan 2023 00:15:03 +0000
ROA not before: Mon 02 Jan 2023 00:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3170
IP address blocks: 92.60.44.0/22 maxlen: 24
91.218.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:ee:e7:37:67:c9:4f:e9:e3:b1:c1:18:bf:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jan 2 00:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e941fe88dcf8e2ed4c4e3a9120f76a65cd56a16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:42:dd:96:05:63:a2:4d:78:ba:bf:50:30:
79:d9:31:74:ba:d6:36:88:4e:0c:d3:5b:cc:42:7b:
1c:e4:8f:e0:ed:af:fb:81:aa:56:c2:ce:37:ec:23:
17:db:63:61:1a:cb:1c:ce:40:ea:45:ce:48:27:1e:
db:a1:72:5b:26:22:fd:e1:1a:cf:17:11:2c:73:a5:
15:3c:0f:cc:9c:d3:f1:8e:63:13:85:f4:43:75:6e:
4b:58:60:6c:5b:aa:9a:c7:4e:a0:c0:9c:4e:7e:b1:
79:a6:8e:ae:93:fd:08:3c:64:36:4f:48:57:f4:e5:
16:db:69:17:88:dd:c9:4c:ce:fa:c2:0a:c3:c5:03:
a4:b1:c8:81:0c:31:44:26:fc:86:44:f9:b4:14:27:
46:50:74:81:29:3a:59:fb:03:34:b8:92:ff:e8:6d:
39:65:55:12:d9:ea:c4:55:71:71:47:1a:35:4e:35:
88:e2:ef:d6:49:32:da:a8:2d:f6:42:47:05:38:8f:
a1:c2:df:e8:f4:87:f5:d1:ee:b5:d6:5d:b3:e0:61:
25:ed:e5:ff:55:ce:a8:76:23:63:64:6c:06:d2:41:
0c:c5:1d:b4:cb:8b:96:68:3f:d9:01:1f:55:2d:ce:
6f:68:38:51:81:90:35:f4:aa:2b:02:74:6d:d4:a6:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:FE:88:DC:F8:E2:ED:4C:4E:3A:91:20:F7:6A:65:CD:56:A1:6D
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/6UH-iNz44u1MTjqRIPdqZc1WoW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.58.0/24
92.60.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:04:47:27:73:9d:9f:c7:22:15:ce:a6:fb:01:62:fd:3f:2f:
52:3d:1f:a9:3a:97:b5:8e:a6:5e:39:bd:c6:85:ec:be:70:6e:
4f:19:31:70:96:ad:40:9b:ed:48:76:09:20:8c:b3:41:f4:8d:
06:ed:e9:52:12:cc:fe:ef:ed:f2:e1:f4:91:3c:46:ea:1b:b0:
d0:44:70:5a:89:58:85:ba:b9:6a:0b:b7:4a:15:a6:4f:cf:71:
96:b8:7b:0a:90:b3:1b:c9:ae:24:c8:03:64:90:3f:25:33:1e:
c5:ba:50:a1:35:51:9c:2f:26:de:1a:12:02:25:91:15:6d:0f:
53:01:28:32:2d:26:62:8e:64:46:3d:0e:20:99:4b:3f:31:1a:
8f:98:4e:4e:ed:e3:d4:d2:e4:8a:24:de:20:b7:21:1e:c5:14:
26:d0:18:96:2d:ea:3b:a9:64:29:33:1f:fe:ec:cd:2f:8e:47:
cc:03:54:c6:fe:43:12:24:ee:95:a7:52:bc:c0:3e:94:56:67:
1b:8f:74:3b:05:5a:b8:13:32:cc:d2:22:1e:4c:ed:14:90:76:
44:35:ce:98:da:3e:96:02:aa:24:7c:14:ac:a2:97:74:76:5a:
2d:ff:87:0e:78:09:30:56:56:e2:7e:39:13:72:bb:40:c4:a4:
90:7c:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:25 2025 by rpki-client