Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/DXr5BNpMUwc61qXmpKQVnv3HAio.roa
File: DXr5BNpMUwc61qXmpKQVnv3HAio.roa (raw, json)
Hash identifier: DRf8zoCAIYrS81vZ6g9SuyeVh+3pBuooU0qwcGKk8m8=
Subject key identifier: 0D:7A:F9:04:DA:4C:53:07:3A:D6:A5:E6:A4:A4:15:9E:FD:C7:02:2A
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0646FD97
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/DXr5BNpMUwc61qXmpKQVnv3HAio.roa
Signing time: Sat 01 Jan 2022 11:00:51 +0000
ROA not before: Sat 01 Jan 2022 11:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50719
IP address blocks: 195.191.252.0/23 maxlen: 23
5.206.200.0/21 maxlen: 21
91.227.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105315735 (0x646fd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 11:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d7af904da4c53073ad6a5e6a4a4159efdc7022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:c0:6c:14:ae:8f:f5:73:90:e2:fc:76:8d:
aa:58:ba:aa:cb:cc:a8:ed:c2:56:29:89:b6:97:da:
f8:34:6f:69:d7:74:97:17:62:7c:0c:96:0b:70:39:
a8:48:04:10:8f:f1:3d:59:12:64:04:d6:d2:fc:f2:
71:10:29:e8:94:1a:89:0d:7a:e0:75:f3:b5:95:0e:
a5:e0:02:25:d2:12:a9:98:11:5e:49:3a:d9:39:e6:
ef:45:ba:24:86:49:cb:9b:ca:83:5b:ee:49:ee:a7:
b3:5d:e9:9d:07:9d:9d:cc:91:7d:fe:5a:9a:72:01:
0f:90:8f:62:53:01:36:d2:fb:70:9b:9f:58:60:f0:
27:74:a8:1e:2b:8f:98:1d:56:a7:cc:82:3d:78:f1:
09:01:eb:d0:05:0e:f4:4e:91:b1:7f:af:a4:c0:00:
64:82:f3:36:3a:e9:f1:b0:f2:fd:41:72:1f:92:52:
b7:ba:78:ec:59:d9:dd:d4:09:07:14:c7:c7:39:88:
89:0b:03:19:ae:d9:5e:26:a1:c8:52:ae:60:85:c7:
7e:2c:0e:dd:18:df:88:41:c5:f5:fc:f2:c6:54:df:
ba:31:3a:a9:17:e8:65:fd:19:3f:1f:21:41:8f:14:
cf:23:1e:09:a6:ae:67:af:bc:49:72:3d:7b:fc:1f:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:F9:04:DA:4C:53:07:3A:D6:A5:E6:A4:A4:15:9E:FD:C7:02:2A
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/DXr5BNpMUwc61qXmpKQVnv3HAio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.200.0/21
91.227.231.0/24
195.191.252.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:c7:83:41:9f:09:e6:40:d6:44:36:20:8a:46:c3:aa:3a:e9:
2f:dd:09:e0:42:62:a6:fc:1e:a9:ad:c7:ce:18:b6:ef:38:74:
32:d3:2f:04:dc:b7:fa:49:a3:2c:5a:a4:ee:bb:aa:b8:e2:98:
d2:23:7e:af:a9:d7:26:71:77:67:10:ef:bc:1f:fe:83:78:d4:
4a:0e:61:5c:63:90:4f:16:b7:1a:12:73:17:1d:67:63:0e:72:
1c:9d:57:e2:90:82:39:b2:b5:70:65:13:b5:8d:59:d0:f1:0e:
dd:80:f8:1a:9f:83:f1:56:3b:f2:93:36:3c:40:7b:dd:61:ba:
c7:7b:f8:76:06:31:13:7d:dd:8e:eb:14:10:d7:5a:f6:3d:a1:
88:05:57:46:0f:ec:ab:ff:5e:d0:51:e3:28:6e:1b:ce:0a:8c:
8e:9e:6b:67:0b:1e:47:47:e7:8b:72:e6:c9:88:86:83:7a:d7:
1d:f4:2d:5e:9d:42:b4:8c:36:f6:e7:1e:e6:4e:9f:51:09:91:
79:43:4b:8b:b0:7b:7b:f9:3a:62:93:70:bd:f2:1f:24:83:8f:
c4:c3:fb:7b:30:33:ba:39:4d:42:de:a7:44:87:21:5b:cd:2d:
19:e8:d7:cb:05:aa:1e:37:76:e5:ca:13:f0:0e:2a:b6:7b:b6:
ed:8d:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:57:30 2025 by rpki-client