Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/1puIuyo-JEgI3X0V1RcBsKMEMD8.roa
File: 1puIuyo-JEgI3X0V1RcBsKMEMD8.roa (raw, json)
Hash identifier: g8CAkTtNWAKBWHzItxaODnNn1JOdn23F6gaLHXOtdm4=
Subject key identifier: D6:9B:88:BB:2A:3E:24:48:08:DD:7D:15:D5:17:01:B0:A3:04:30:3F
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE6C114
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/1puIuyo-JEgI3X0V1RcBsKMEMD8.roa
Signing time: Sat 01 Jan 2022 12:59:44 +0000
ROA not before: Sat 01 Jan 2022 12:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211780
IP address blocks: 91.211.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266780948 (0xfe6c114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d69b88bb2a3e244808dd7d15d51701b0a304303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:5d:0f:73:1b:28:55:e5:9f:ff:e5:04:63:
44:44:8b:bb:54:b6:d4:90:0d:dd:7f:74:db:37:ae:
8c:12:4d:b0:a1:48:0e:0c:6f:1c:35:a6:64:71:d9:
53:d4:c1:5f:c4:44:50:73:96:88:d8:f7:24:34:8e:
de:eb:9f:f6:4e:c4:b2:d5:86:a1:f5:3c:20:b9:26:
b0:16:47:25:33:29:f0:21:4a:e3:01:bb:a7:c9:cd:
ff:f4:fe:d0:6a:6e:d6:42:19:35:24:89:1e:68:48:
75:cf:49:d7:98:5a:2e:bd:4a:9a:38:1d:90:09:af:
47:84:d5:22:62:de:5a:19:d4:f8:f4:84:f7:29:bb:
37:ab:e5:86:bb:88:ee:c5:a2:94:3c:2f:d1:77:d4:
35:62:a4:ee:55:81:21:50:80:17:37:72:1c:1a:40:
c2:68:a9:78:18:76:c7:34:20:52:f3:53:27:45:a3:
bb:f3:fc:d1:03:84:3f:8e:06:8c:26:8d:8a:46:29:
71:5b:60:f4:a2:0a:38:08:6a:5b:b7:4d:56:33:d6:
70:68:22:30:de:9b:6a:a3:ff:3c:e1:3d:77:3c:86:
3a:e9:e2:5a:16:1b:97:45:d3:e8:da:4f:9f:19:85:
ea:99:a4:ed:6e:e2:7b:8d:17:21:95:e6:de:51:b6:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:88:BB:2A:3E:24:48:08:DD:7D:15:D5:17:01:B0:A3:04:30:3F
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/1puIuyo-JEgI3X0V1RcBsKMEMD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:52:29:d6:43:14:f6:60:fd:bb:62:6c:ea:89:07:d1:d6:89:
9b:cb:12:8f:04:e9:5f:34:8a:e5:8a:ac:cb:2c:b3:11:88:17:
70:80:2c:53:4c:45:44:fe:db:87:1f:d0:96:85:0b:fc:6d:a1:
de:6a:13:70:a9:0d:e7:a3:21:cd:f9:35:ac:b2:42:24:9c:a4:
09:2e:8b:1e:23:b5:62:ee:11:80:fe:9c:08:3d:04:b0:55:94:
6a:26:a0:93:da:86:eb:42:75:ed:3a:56:83:6c:e4:be:50:6c:
e5:ba:fd:6a:7c:e6:68:cb:63:13:c0:52:50:d2:0e:ce:f5:ba:
dc:cf:e4:9d:a0:93:1d:d1:69:06:a9:46:04:52:5b:2d:25:85:
fe:bf:58:8e:e4:ba:32:00:04:45:37:30:e9:40:cb:cb:d8:e4:
15:23:94:14:0c:38:8f:54:bd:91:81:4b:49:cc:21:f5:cd:c6:
a1:c5:28:ab:9b:1a:65:cd:78:2a:89:0d:ea:0d:b9:a1:2a:25:
a8:e5:8a:5b:66:c9:e2:27:16:d4:24:07:16:69:7c:29:25:e2:
94:32:6b:79:21:b8:ca:63:57:68:31:d6:19:27:6e:6d:bf:ee:
3d:6d:2e:eb:8d:35:4d:a8:5b:94:75:f9:0f:04:40:b5:3a:1c:
d8:0a:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:09 2025 by rpki-client