Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/un1Aa1G77R2wmMzh5sBObelfaeM.roa
File: un1Aa1G77R2wmMzh5sBObelfaeM.roa (raw, json)
Hash identifier: AIEnVRzOa1tysmernjBhg743v4egSZMISW42hgb8/mg=
Subject key identifier: BA:7D:40:6B:51:BB:ED:1D:B0:98:CC:E1:E6:C0:4E:6D:E9:5F:69:E3
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 068C707E
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/un1Aa1G77R2wmMzh5sBObelfaeM.roa
Signing time: Sat 01 Jan 2022 09:01:08 +0000
ROA not before: Sat 01 Jan 2022 09:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31010
IP address blocks: 91.212.85.0/24 maxlen: 24
2001:678:598::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109867134 (0x68c707e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: Jan 1 09:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba7d406b51bbed1db098cce1e6c04e6de95f69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:1a:3c:8e:9b:f3:ce:36:66:75:ad:58:be:
04:73:c3:9c:98:bf:22:e4:7b:94:c8:65:f0:35:26:
92:3c:b5:70:06:27:e3:18:ee:52:41:00:c4:6a:de:
2f:a5:8e:77:d7:d7:18:7b:69:c6:90:53:99:38:c1:
4f:f6:2f:35:aa:75:ce:99:01:fc:ba:56:cb:ad:e2:
1d:c6:08:b8:d9:2f:68:b8:2c:90:06:df:70:0a:1a:
ab:cd:fa:dc:5e:d2:d0:69:d4:13:a8:dc:e3:f9:a6:
33:37:22:98:e3:2e:ed:8c:70:29:d5:bc:3e:3f:f0:
d3:31:af:f8:bd:b3:d7:67:ea:a1:1f:a7:b5:f2:e0:
2d:c7:8e:fb:a6:c5:f8:83:f7:e2:78:ec:0b:39:37:
11:97:d8:19:52:27:89:fa:cd:58:9e:bd:c9:cd:68:
6c:b5:4d:ce:6c:0f:9e:cb:22:8b:b9:6d:86:86:56:
d8:dd:8e:e2:72:24:f3:ba:27:18:67:4e:68:cc:98:
38:ce:4b:b6:80:7d:04:54:5c:e2:be:7a:7d:72:f9:
b0:e3:d9:dc:6e:c1:df:88:a9:70:61:0a:87:c5:9d:
c3:f4:0c:c4:6f:36:23:9f:f3:e3:d4:b1:c4:b3:fa:
c2:19:6f:61:cc:5d:2b:d8:8e:3b:36:d8:fd:dd:74:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:40:6B:51:BB:ED:1D:B0:98:CC:E1:E6:C0:4E:6D:E9:5F:69:E3
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/un1Aa1G77R2wmMzh5sBObelfaeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.85.0/24
IPv6:
2001:678:598::/48
Signature Algorithm: sha256WithRSAEncryption
66:63:ff:7c:4c:03:81:5b:15:76:9a:19:fd:61:4c:98:e1:3c:
9b:13:cc:a8:7c:53:99:79:43:f0:7a:92:2e:28:59:11:99:2b:
f2:02:cd:37:61:09:96:6a:02:e7:18:e9:d7:bf:29:c0:e7:1f:
ce:31:f1:89:64:50:ab:66:9e:f1:b1:3c:cb:33:42:b6:c9:a8:
28:a5:3f:eb:e0:32:02:d5:85:51:b3:bb:6c:db:19:5d:25:9b:
d9:95:db:ae:94:5e:1f:a5:40:45:db:78:1d:de:df:62:8d:52:
ef:bd:a7:1c:e4:1c:54:5b:c5:ea:18:45:cb:6e:2e:5e:d8:51:
42:83:e6:31:78:f3:dc:63:96:42:19:ba:51:6e:4a:fd:2b:bb:
f7:e1:fb:d7:eb:86:74:21:67:3e:72:38:6b:9b:09:d0:37:5e:
56:04:36:5f:9a:5a:54:bf:30:c6:18:dc:64:11:a7:7d:e0:71:
e3:62:0b:b8:8b:13:ef:4d:35:f7:e6:06:70:29:e2:d9:d4:48:
fe:9c:b3:22:06:a1:f6:eb:76:d0:b0:f9:b6:50:8d:3b:82:89:
61:e0:29:4a:23:07:a2:12:56:38:4d:2f:e4:2d:57:7d:59:12:
65:4c:0c:2c:e9:11:03:a0:35:e6:10:7c:d4:48:12:5a:bc:c8:
f6:64:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:11:03 2025 by rpki-client