Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Axy6G7j-IIKyEluYeo6FrkBkOFg.roa
File: Axy6G7j-IIKyEluYeo6FrkBkOFg.roa (raw, json)
Hash identifier: WtEQnu3jxtC0WHT3W4uQ5CEhY/aujJSuAsfPCpf179Q=
Subject key identifier: 03:1C:BA:1B:B8:FE:20:82:B2:12:5B:98:7A:8E:85:AE:40:64:38:58
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01856F8B91BEDA15BCFE236444A955FD1210
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Axy6G7j-IIKyEluYeo6FrkBkOFg.roa
Signing time: Sun 01 Jan 2023 22:54:55 +0000
ROA not before: Sun 01 Jan 2023 22:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211780
IP address blocks: 91.211.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:91:be:da:15:bc:fe:23:64:44:a9:55:fd:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 22:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=031cba1bb8fe2082b2125b987a8e85ae40643858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:2a:3f:48:62:bb:fb:eb:62:72:7f:30:1e:
f1:38:d7:ff:93:f7:79:88:ea:94:50:d0:99:f3:49:
6a:02:b7:e9:50:f1:f6:bf:65:31:35:7c:f3:ea:f6:
d3:e6:1f:0a:d4:c3:71:fe:fa:40:a4:d9:ed:3d:96:
3a:d1:e7:cb:ce:72:a9:46:e0:e6:f0:8f:4d:c8:4d:
e0:9e:34:9a:d7:2c:ba:54:5d:1a:07:70:f8:23:0a:
3a:4d:e0:1e:1a:64:bf:bd:bb:ae:29:25:1d:0b:4c:
fc:96:98:93:02:db:76:c0:bd:ed:9e:c0:81:63:59:
0a:8e:1b:ab:17:36:ce:89:15:54:26:e1:20:e5:bd:
3e:e3:1b:43:3a:24:37:9f:19:d7:fb:92:48:f9:23:
cb:fb:32:b9:d2:b6:2d:1e:4e:86:41:c3:23:cd:85:
94:46:c2:15:5d:ee:58:d5:78:e7:c3:c2:fe:1b:18:
4a:64:82:1d:f8:8e:11:d3:73:d0:f5:b4:6d:f0:28:
35:17:b0:fb:88:14:95:f4:88:6a:04:71:bd:f3:8f:
fd:bb:2b:bf:9f:9c:2b:aa:a1:f0:70:23:cb:17:8b:
43:45:1d:61:39:36:c7:cb:e2:6b:50:97:f8:30:82:
88:cd:3c:a4:dc:68:37:a5:d7:4a:c7:05:13:3a:bf:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:BA:1B:B8:FE:20:82:B2:12:5B:98:7A:8E:85:AE:40:64:38:58
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/Axy6G7j-IIKyEluYeo6FrkBkOFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:42:44:c6:30:04:d9:c4:27:41:ef:03:f7:8c:db:e2:7f:1e:
ad:22:9f:71:81:52:d3:b7:0c:90:e9:e4:4b:50:be:cf:39:ec:
53:21:74:23:07:8f:9f:66:7c:b9:ba:0c:e7:59:b8:1c:cc:38:
92:dc:96:31:6b:34:b4:1d:41:6e:9b:5f:7c:6c:2e:af:92:a2:
d7:1a:84:20:65:dc:e1:88:66:a6:74:7a:9d:23:61:f8:f0:07:
12:ac:03:57:44:f9:29:4a:09:fc:c6:f7:d6:4a:fe:32:cf:13:
d1:55:67:d5:40:c3:62:71:31:8f:da:de:c8:34:45:0a:67:18:
7b:6c:60:8b:56:d2:31:96:7d:3a:0b:b0:ab:25:fd:cb:55:15:
cf:77:b5:b3:a3:fc:f0:dc:6c:97:72:80:5c:25:97:5c:2e:2f:
4f:cf:31:ce:15:0f:65:21:32:bf:c0:c5:84:66:db:19:cf:ef:
a2:a7:97:a1:8b:aa:d1:3c:cb:b2:fa:14:6e:86:fa:d4:72:0c:
85:e1:b6:6e:c0:4e:fb:cf:ff:5a:9e:bc:b9:9a:94:6f:51:7b:
a9:99:ff:09:bb:17:29:a7:7a:c6:8e:7e:49:6f:e0:1b:6a:5c:
91:b9:69:8c:65:5d:3f:6e:f8:fd:7d:cc:4f:fa:d7:fe:03:84:
a5:7a:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:03 2025 by rpki-client