Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/0OEdCIFQqV1w3Ci-CyWyiterebs.roa
File: 0OEdCIFQqV1w3Ci-CyWyiterebs.roa (raw, json)
Hash identifier: DS7cxP8ZZuHgRGBtt7+3wVmHDtKnmgObK2AF71Xadnw=
Subject key identifier: D0:E1:1D:08:81:50:A9:5D:70:DC:28:BE:0B:25:B2:8A:D7:AB:79:BB
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 0181FC624E461D79A1F748106D05D10D182D
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/0OEdCIFQqV1w3Ci-CyWyiterebs.roa
Signing time: Thu 14 Jul 2022 11:05:09 +0000
ROA not before: Thu 14 Jul 2022 11:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51410
IP address blocks: 91.217.137.0/24 maxlen: 24
2001:67c:13e4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:62:4e:46:1d:79:a1:f7:48:10:6d:05:d1:0d:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Jul 14 11:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0e11d088150a95d70dc28be0b25b28ad7ab79bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:0f:14:d8:2e:19:b9:29:d0:03:c8:9c:5a:
b8:8e:1e:a9:f1:bd:63:01:34:55:20:71:b1:21:52:
a0:af:2b:23:f4:c1:da:23:09:7c:99:d3:e3:8b:f1:
d6:ec:13:1b:86:8f:8d:68:e0:a1:16:be:35:70:91:
b6:cd:ab:39:f6:8f:af:cd:c0:85:f6:ff:59:1b:17:
1d:b5:3a:22:13:ed:48:2c:c9:bb:24:ff:01:88:e6:
8f:85:cf:1f:a3:f8:85:d8:96:52:77:75:21:08:76:
93:4e:73:86:14:12:20:84:c9:87:5e:9e:b7:de:2d:
90:be:17:4d:b5:7a:39:5c:8f:33:6e:35:20:9a:f1:
3d:8b:e3:87:34:26:9c:fa:6e:ff:8a:96:d5:53:b2:
1e:1a:4d:a0:a0:52:4b:38:69:7d:b5:b7:ec:c7:99:
94:c0:ca:22:07:c7:da:e4:06:a8:4d:f2:c8:67:30:
65:b7:6e:28:51:2a:86:8c:4f:6f:3f:8c:cb:1c:19:
e5:e4:bc:6b:21:b0:5d:7c:dd:93:e2:ac:44:3b:80:
0d:3f:c0:b9:6b:7d:1d:31:f0:d0:d6:69:b9:4b:e1:
63:13:93:c4:38:40:75:59:d1:99:19:9b:55:43:6c:
fe:bd:8c:5d:e7:8c:53:08:83:b1:3c:ee:ca:9a:38:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:1D:08:81:50:A9:5D:70:DC:28:BE:0B:25:B2:8A:D7:AB:79:BB
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/0OEdCIFQqV1w3Ci-CyWyiterebs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.137.0/24
IPv6:
2001:67c:13e4::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e1:b6:6d:fb:ed:d2:c4:23:65:1b:ab:b1:56:5a:4b:24:27:
95:39:b1:84:66:a4:2a:7f:a8:32:e6:e9:d3:03:04:94:b5:14:
82:2e:af:66:2f:b9:51:07:47:6d:d1:1f:b1:2c:46:f3:bc:0b:
4f:5c:f5:41:29:a2:3c:a2:27:e9:21:a4:0e:3f:79:dc:bf:11:
4b:e0:21:a7:7e:56:66:ce:93:fa:0e:29:0d:02:2c:2a:0b:85:
4e:19:51:27:c4:ed:b8:59:cd:6a:20:3e:6c:81:15:88:e1:71:
b6:28:72:c9:92:37:0f:c5:7a:4d:02:4b:3e:9c:d2:13:d1:d2:
a2:54:94:03:d3:e5:fb:9a:61:50:f7:09:3a:72:11:3d:aa:7d:
f7:7a:22:65:65:78:02:51:98:a1:dc:60:b2:05:b3:7c:3a:86:
16:99:50:d8:66:2c:b4:62:a5:ce:77:13:63:79:19:ef:83:82:
6c:73:6d:94:55:64:2e:a4:3a:07:bc:ce:28:3f:d5:4f:c5:c6:
ad:1c:6c:09:43:a2:08:18:a4:1d:a0:d6:f4:8c:8b:9f:c9:9f:
52:0e:3e:c7:57:8d:60:ee:2d:3f:d7:ed:5b:86:a7:9c:ed:fd:
6b:ca:d2:96:70:cf:30:a4:c5:07:ad:41:db:a3:86:63:bc:a1:
bc:7c:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:06 2025 by rpki-client