Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/lMEpa0iGWbpkkgrNWSiAPxuDLvs.roa
File: lMEpa0iGWbpkkgrNWSiAPxuDLvs.roa (raw, json)
Hash identifier: EKv12uhd6HUXBilbK7bug5t2Q6FpqgY14QG8bCiYJ/k=
Subject key identifier: 94:C1:29:6B:48:86:59:BA:64:92:0A:CD:59:28:80:3F:1B:83:2E:FB
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 09BE5D0E
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/lMEpa0iGWbpkkgrNWSiAPxuDLvs.roa
Signing time: Sat 01 Jan 2022 16:07:24 +0000
ROA not before: Sat 01 Jan 2022 16:07:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 193.108.238.0/24 maxlen: 24
91.213.13.0/24 maxlen: 24
2001:67c:1064::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163470606 (0x9be5d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jan 1 16:07:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94c1296b488659ba64920acd5928803f1b832efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:58:f2:1a:4f:a6:27:4e:d0:49:33:83:31:
b2:94:ef:97:25:26:6e:30:30:15:0d:48:6c:cc:a2:
f2:28:e4:fb:f2:a0:f3:a0:7b:c2:49:7d:50:db:99:
39:97:8f:25:0c:e6:a7:28:70:a1:2f:2e:46:01:dc:
3f:cb:6c:95:dd:e0:eb:64:88:f7:55:03:53:24:33:
9a:72:5c:7b:69:44:6b:4d:61:95:39:66:bb:06:79:
ac:9d:0a:a8:d9:44:4c:9e:47:85:6f:6f:cd:ae:b0:
61:c9:46:94:11:1a:f2:8b:7b:a7:56:61:65:2a:00:
5e:f1:46:56:fd:dd:77:48:d8:d6:96:4d:1a:1e:fd:
43:9b:27:ed:11:89:31:f8:24:17:67:47:33:9a:7d:
60:7b:45:e6:7e:08:7f:9b:f6:e3:51:1d:2c:53:65:
cd:8c:ee:41:bc:ac:b3:49:9b:9b:40:27:d2:73:f4:
5c:76:f5:b9:dd:fd:7c:5e:14:e6:f8:fc:d7:06:b2:
c7:73:33:cd:9e:4a:cb:ae:62:40:f1:b1:1e:db:68:
3c:b8:c3:9e:c0:71:95:df:3d:0b:b3:ac:d1:31:f1:
2d:5b:15:0a:db:78:77:c3:2c:8b:d5:19:d1:37:1a:
bf:23:79:21:4a:a7:4f:63:19:a3:cd:24:0d:76:8b:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:29:6B:48:86:59:BA:64:92:0A:CD:59:28:80:3F:1B:83:2E:FB
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/lMEpa0iGWbpkkgrNWSiAPxuDLvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.13.0/24
193.108.238.0/24
IPv6:
2001:67c:1064::/48
Signature Algorithm: sha256WithRSAEncryption
72:6f:3b:fb:e4:98:f9:56:3e:57:ad:bf:d3:51:e0:39:67:2f:
0a:ba:fb:1f:05:e5:5f:94:64:48:6e:71:57:72:47:26:6f:3c:
75:db:bd:dd:7e:df:e9:37:51:7d:cd:4a:ea:9e:82:60:cf:77:
2e:7c:b2:03:55:5a:1b:9f:d1:38:06:5e:21:1c:93:dd:83:a1:
90:46:b6:7a:8c:06:a9:e4:53:6b:97:7f:98:ac:3c:3b:6f:a7:
5d:5c:71:03:2a:c6:6c:79:34:9b:3b:89:1c:23:34:9c:08:2a:
59:98:26:66:a0:5b:77:3b:d2:f1:f0:30:32:1f:b7:21:1b:a1:
74:64:30:21:a3:54:ba:31:55:a8:ff:99:ab:10:96:8c:25:ac:
80:8b:36:db:8d:c0:d3:e5:95:b6:8e:4e:6a:33:a2:79:79:95:
a0:47:fd:89:59:80:ca:52:98:7e:8c:57:1b:e6:51:71:93:b5:
7b:75:60:80:a6:c4:5e:ad:04:bc:88:84:b6:a1:36:8c:61:4c:
f6:92:f6:d9:17:58:47:4f:fe:0e:a8:94:c3:61:46:fa:37:28:
90:77:8c:7e:75:ec:77:b4:3a:e0:11:c0:68:91:06:a2:d0:ed:
d3:f8:6a:0e:54:67:89:c8:5c:b7:27:6d:8d:50:75:d4:ec:05:
4e:c9:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:35 2025 by rpki-client