Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PrYQ9nfTkovAWQhlXkKqa_XujrY.roa
File: PrYQ9nfTkovAWQhlXkKqa_XujrY.roa (raw, json)
Hash identifier: b3CGVmisEKO+dxJRzFulAu6a+1ToCN0P4RgVn3aXZGA=
Subject key identifier: 3E:B6:10:F6:77:D3:92:8B:C0:59:08:65:5E:42:AA:6B:F5:EE:8E:B6
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01856F8B90AAEE3DEFBE5914835C1C39356E
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PrYQ9nfTkovAWQhlXkKqa_XujrY.roa
Signing time: Sun 01 Jan 2023 22:54:55 +0000
ROA not before: Sun 01 Jan 2023 22:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210975
IP address blocks: 91.211.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:90:aa:ee:3d:ef:be:59:14:83:5c:1c:39:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 22:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb610f677d3928bc05908655e42aa6bf5ee8eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:9b:72:08:e9:eb:6a:f7:11:d9:6c:e4:c9:
73:16:33:f3:c4:7b:73:37:4e:5e:08:fa:ad:b3:b1:
e2:d2:75:d6:30:a3:b0:f4:7c:8f:7a:88:84:3b:b2:
87:23:82:d0:5b:5a:3e:78:d9:be:1d:63:4e:ae:25:
1f:ee:63:e7:2d:91:8e:30:2a:88:ed:48:e5:04:d5:
ec:fe:23:4e:1e:5b:c5:15:0f:2a:75:a9:a2:31:56:
05:b8:60:6f:5a:50:34:83:64:25:9c:c5:bc:d5:6e:
0e:09:3a:0d:a2:eb:b3:9f:32:b2:b1:13:cd:52:b7:
b0:e8:d5:f1:10:f3:12:a7:15:28:a4:f7:15:c2:09:
3d:e6:a1:c4:e2:b0:9a:60:c2:2b:5e:0b:9c:b4:ec:
90:7f:49:91:7d:57:cc:a1:9f:d2:83:c5:65:14:a8:
33:ba:73:3c:3d:5a:b1:f3:e4:b1:be:f7:4d:53:88:
44:db:3a:57:f3:48:07:db:b4:87:63:85:fb:48:8c:
60:65:84:1e:50:a4:ba:a1:65:81:5f:47:2f:58:2d:
9f:9c:71:7d:d5:23:52:1c:b9:93:1d:56:8e:a6:1a:
2c:66:3b:49:d5:43:b3:f2:15:1b:fe:c9:26:5a:7b:
a6:12:af:74:28:c0:3a:96:a5:d8:00:e3:05:ae:3f:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:10:F6:77:D3:92:8B:C0:59:08:65:5E:42:AA:6B:F5:EE:8E:B6
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/PrYQ9nfTkovAWQhlXkKqa_XujrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:00:b3:c6:1d:0c:a4:8d:06:2d:f0:36:8f:93:c2:1c:6e:
cc:c7:ed:00:af:32:91:b1:21:2e:3d:1f:31:fe:9d:fb:99:4f:
f7:97:4e:0b:66:d2:84:f8:a6:cf:67:dd:d1:eb:af:a3:b4:07:
4f:24:2b:c0:f0:9a:34:19:06:21:87:c3:84:7a:4f:0b:7b:ce:
ba:53:87:e1:8d:3f:e1:2e:8d:9d:f6:bf:e1:18:69:5b:c6:06:
1f:2c:d2:5a:c6:49:91:e7:cb:e5:4b:1b:47:38:b2:69:da:38:
18:ee:f8:9e:5c:19:9c:2c:99:40:a2:ab:b8:36:1a:bc:7c:2b:
0f:6d:4d:c3:b1:49:f9:ad:e9:38:e7:28:34:a0:03:d5:75:cf:
22:ff:31:0e:28:f4:7d:6f:f9:6c:c5:64:8f:1c:9b:55:b4:79:
ea:19:1d:9a:ba:5d:3c:6f:2e:c8:14:d4:52:0e:b3:9c:9d:de:
a6:1b:89:40:57:b0:e2:d8:e2:d0:4c:36:86:58:e4:ba:3b:d8:
dd:26:59:f4:f8:76:e0:9a:43:a2:22:22:60:35:d4:75:fe:15:
e7:21:7b:7f:8a:86:00:92:8d:30:75:b7:ee:3a:a2:9f:92:95:
3c:a7:9a:f9:0a:03:67:4a:4e:65:fb:07:df:02:98:3a:9b:97:
b6:9f:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:23 2025 by rpki-client