Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/5vawkEhL9uXXDuTm2PXWnFoUB5U.roa
File: 5vawkEhL9uXXDuTm2PXWnFoUB5U.roa (raw, json)
Hash identifier: jsJH2jy12kp6iCX1tSmFQQnB7v+MDtAoYF3s193br7I=
Subject key identifier: E6:F6:B0:90:48:4B:F6:E5:D7:0E:E4:E6:D8:F5:D6:9C:5A:14:07:95
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 264F98
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/5vawkEhL9uXXDuTm2PXWnFoUB5U.roa
Signing time: Fri 25 Mar 2022 13:54:50 +0000
ROA not before: Fri 25 Mar 2022 13:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57967
IP address blocks: 91.237.90.0/24 maxlen: 24
2001:67c:2794::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510744 (0x264f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 25 13:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f6b090484bf6e5d70ee4e6d8f5d69c5a140795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:e2:63:0d:b8:3d:b8:8d:dc:3b:67:c3:a9:
45:c9:7f:78:7f:a5:58:18:32:ce:32:c6:29:9e:c4:
56:30:9c:64:5e:1b:30:fa:1a:40:e5:61:19:d3:42:
db:f9:e7:09:28:3b:41:7c:cb:be:92:45:41:d2:95:
19:a3:89:cf:8a:45:a0:00:50:dc:87:f1:b4:d2:5e:
cd:f2:64:af:2a:54:e0:a2:14:30:ca:df:25:4b:aa:
f9:e7:b4:e8:f4:88:09:71:b0:5f:4f:53:b5:2f:a7:
84:41:0a:9a:21:aa:a5:7f:fb:ef:cb:8d:17:22:ef:
92:0a:ee:2f:dd:3f:d7:56:42:1c:64:a8:91:d2:3f:
7b:e0:eb:46:a4:c1:f6:ed:fe:d3:79:43:d3:63:6b:
fa:3e:7a:ca:e0:b9:0a:dd:ab:5d:a3:bd:05:01:6c:
4e:9c:c5:4b:64:fe:57:dc:bb:48:c5:44:76:73:0f:
6e:eb:ae:68:97:e0:61:3d:cd:9b:ae:9d:6f:e6:2f:
bd:dd:9b:28:5c:d2:f8:77:3d:9e:b2:29:89:91:8a:
9e:7b:4d:21:d3:ff:53:70:dc:3e:de:47:b7:92:61:
1f:a5:27:e9:b3:f8:d2:cf:cc:9a:70:57:eb:f4:4a:
8e:d3:fe:fc:c3:85:8d:6e:c0:1e:1c:ac:49:32:ef:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F6:B0:90:48:4B:F6:E5:D7:0E:E4:E6:D8:F5:D6:9C:5A:14:07:95
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/5vawkEhL9uXXDuTm2PXWnFoUB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.90.0/24
IPv6:
2001:67c:2794::/48
Signature Algorithm: sha256WithRSAEncryption
82:c4:f9:99:71:42:a9:29:df:a9:c4:d9:3d:a5:e4:e2:1e:ec:
99:df:ec:7a:ef:59:ef:0b:6b:ad:76:b8:e5:41:76:da:5e:bf:
f8:f5:98:2e:75:9a:5c:63:e0:6e:c8:92:4d:95:1f:e6:0b:f3:
e9:16:12:7b:d0:51:eb:e1:d3:3c:e2:53:e0:4d:c2:84:cf:87:
ac:71:d7:ff:d0:08:f1:43:4f:aa:b7:08:d2:1b:0b:36:cf:b4:
38:22:df:1e:20:f3:12:26:36:1a:ab:87:49:b9:81:1c:b8:8a:
1a:c4:66:3a:d6:8e:18:73:c8:4c:0a:7c:8f:d9:00:ff:f8:6a:
68:18:3c:b8:25:28:e0:2f:86:aa:35:e9:82:f1:3a:82:2b:f7:
9b:2e:89:56:7f:af:ba:55:c3:c9:3c:c0:2b:0f:60:aa:d7:7e:
b8:f2:fd:c4:fc:ac:8d:47:96:ad:e0:9f:57:b5:65:24:cc:59:
71:85:c0:d3:53:be:bb:8e:2c:ac:56:d6:81:b0:9e:e7:15:bb:
b3:4a:c6:f3:bb:44:b1:21:50:3e:d8:2d:bd:6e:4a:e3:c8:e0:
09:8a:94:e3:fb:40:00:47:94:8c:89:39:17:d5:d5:ff:da:6e:
80:a5:7b:6f:31:d0:90:ee:3b:4f:bd:9e:c0:40:0b:40:5f:01:
6c:93:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:23 2025 by rpki-client