Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/xAeMl9SUV5I4J8LHB0tXoXbJo4E.roa
File: xAeMl9SUV5I4J8LHB0tXoXbJo4E.roa (raw, json)
Hash identifier: iJP37n5IkTs5iQaPR7HoKopqbC5dib0vcafQhap0esU=
Subject key identifier: C4:07:8C:97:D4:94:57:92:38:27:C2:C7:07:4B:57:A1:76:C9:A3:81
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 018B4873D9A463CBDD40AE7A6018FE410658
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/xAeMl9SUV5I4J8LHB0tXoXbJo4E.roa
Signing time: Thu 19 Oct 2023 15:00:33 +0000
ROA not before: Thu 19 Oct 2023 15:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216186
IP address blocks: 91.238.238.0/24 maxlen: 24
2a10:be40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:73:d9:a4:63:cb:dd:40:ae:7a:60:18:fe:41:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Oct 19 15:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4078c97d49457923827c2c7074b57a176c9a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:8b:1c:16:13:5e:38:e2:08:71:af:b6:c7:
f1:cc:38:0a:99:f7:5f:ab:9d:dc:28:53:38:dd:26:
5d:37:ae:c1:2b:ac:87:b9:6e:29:9d:f7:9e:7b:aa:
9d:0e:4c:f9:66:b0:bc:10:25:b7:6c:d5:ea:a8:f4:
cc:6d:02:b3:9d:b7:c2:f3:34:a6:90:22:b8:20:0f:
33:dc:b6:03:41:d0:3c:85:88:78:0c:14:d8:e6:16:
e0:c8:1c:02:4a:bd:fe:4e:4f:bb:df:84:55:ec:93:
09:78:f1:29:c8:43:15:7d:a1:d5:b4:8e:d0:23:ab:
43:59:05:60:15:2b:81:70:61:0b:90:34:8e:11:bb:
35:e6:a1:3e:66:d6:d3:90:55:7c:04:12:3c:fa:28:
24:10:af:89:2d:fa:81:56:be:98:0c:5b:89:9b:c5:
b0:b4:af:43:3e:3c:a4:ca:8e:37:68:c1:3d:be:be:
c5:23:da:11:d8:79:e9:62:c6:d9:f8:6b:35:c6:04:
5c:d7:16:cd:9f:a3:09:60:e1:87:5b:00:f7:89:a9:
d7:b4:5c:1c:0f:6b:2b:63:70:2c:00:1e:80:41:59:
12:3a:cc:ab:2d:0b:93:c2:82:4d:9b:0d:e5:93:af:
ad:60:1a:3e:6a:9f:93:24:5e:36:59:74:a5:58:0f:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:8C:97:D4:94:57:92:38:27:C2:C7:07:4B:57:A1:76:C9:A3:81
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/xAeMl9SUV5I4J8LHB0tXoXbJo4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.238.0/24
IPv6:
2a10:be40::/32
Signature Algorithm: sha256WithRSAEncryption
12:4a:df:ab:19:31:4d:48:da:31:3e:04:3d:fe:c4:05:97:a6:
d0:29:de:35:34:3f:93:3a:7b:f7:11:62:69:2a:73:a4:0e:f1:
fd:37:26:2b:b1:ce:24:3e:70:ec:1d:a5:fa:c8:c4:3a:b5:4a:
06:e3:2b:12:28:d0:53:65:94:c0:53:5b:ae:e4:5c:1a:41:ee:
70:bd:bb:b6:c9:83:0a:44:12:15:1d:54:92:e1:d2:d7:b7:d3:
ec:6c:83:fb:50:db:4a:68:47:7b:de:11:f5:41:6a:cc:94:ce:
00:44:10:6d:ef:d0:c7:7d:04:5c:00:ff:73:77:a3:da:6f:84:
61:78:d0:46:ac:db:9e:72:81:73:98:3d:7a:98:07:81:e9:0a:
bd:c2:d1:a1:47:cb:7a:44:71:0e:f6:33:31:99:30:7d:cb:06:
55:b3:68:09:07:35:a2:98:4a:86:2b:a0:05:95:f4:7d:1d:90:
3d:33:c3:01:b4:fb:2f:a4:de:2c:b4:2b:a3:00:d4:ce:06:e2:
af:b8:81:39:6c:32:15:e3:f5:ba:e4:0d:8a:12:09:57:dc:12:
bd:90:b4:30:82:36:85:90:67:ac:a6:39:ce:c3:5c:d0:b2:be:
e9:e2:9f:74:2b:83:63:5f:bc:8a:91:b0:e2:e0:21:8d:34:cc:
0b:6c:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:31 2025 by rpki-client