Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/C_aNSK27IL0ef_XijweU2RPchWA.roa
File: C_aNSK27IL0ef_XijweU2RPchWA.roa (raw, json)
Hash identifier: AAB8t6cky94vEMRlHEjmFzwz+r8V0keTmo8fqjM3Yr0=
Subject key identifier: 0B:F6:8D:48:AD:BB:20:BD:1E:7F:F5:E2:8F:07:94:D9:13:DC:85:60
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 01852F7C7F059F11504A48A865DB1B28D71B
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/C_aNSK27IL0ef_XijweU2RPchWA.roa
Signing time: Tue 20 Dec 2022 12:22:46 +0000
ROA not before: Tue 20 Dec 2022 12:22:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209014
IP address blocks: 91.196.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:7c:7f:05:9f:11:50:4a:48:a8:65:db:1b:28:d7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Dec 20 12:22:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf68d48adbb20bd1e7ff5e28f0794d913dc8560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:90:58:43:a5:1d:ff:bd:2e:07:84:c1:cc:
a8:bc:2e:87:e7:08:59:65:80:bf:bf:56:8d:7d:fe:
04:a8:b8:03:5a:5c:2f:fd:ae:fb:6b:09:b0:a6:67:
3f:53:05:79:e8:4d:fe:62:f9:5f:d3:cf:ec:8a:6b:
06:c0:5d:c2:e3:ac:46:aa:2a:b5:32:8b:03:af:12:
ba:79:e1:5e:a4:9f:0a:60:54:98:14:2c:78:57:9e:
77:93:64:64:49:68:99:0e:81:92:db:a2:c3:de:73:
56:fd:2d:a0:95:4b:64:d5:cf:d8:cb:89:80:1d:5f:
49:63:87:21:36:63:67:74:c1:a1:3f:01:5b:8f:48:
4d:41:9d:73:19:b7:9c:80:4b:b6:00:b0:5e:27:32:
a3:73:7a:39:40:ac:c0:ec:5c:02:08:25:74:57:16:
a7:2a:02:90:a7:37:d5:2b:9b:d4:e0:27:b0:c6:69:
4f:47:66:b3:88:25:b8:de:f6:a4:8a:0a:1d:a5:c1:
33:c1:87:1f:7b:ff:ec:fa:48:ef:08:da:3a:69:0e:
91:65:ab:77:f3:60:0b:23:62:23:6c:5b:6d:b1:bf:
41:98:76:34:a6:d1:ac:d7:05:d9:d6:59:4f:ea:5d:
3a:bc:7a:74:f8:55:2d:4d:f3:ca:11:64:a2:18:bc:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:8D:48:AD:BB:20:BD:1E:7F:F5:E2:8F:07:94:D9:13:DC:85:60
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/C_aNSK27IL0ef_XijweU2RPchWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:c1:f8:54:14:8a:5d:ac:bd:b4:7c:45:c2:1d:b7:5f:7c:
31:b3:ae:89:e1:84:71:c9:2f:d9:04:2d:bc:4b:af:b6:db:6b:
a3:89:9a:4b:5d:e1:75:30:e7:8b:e8:90:63:a2:ba:4a:ee:01:
94:97:8e:9c:f8:3b:98:5a:b4:7d:b8:9b:67:80:4a:8b:db:7e:
cf:ca:24:30:3c:98:ab:1d:59:11:9b:de:3e:4a:64:99:21:53:
d7:bb:7b:5e:10:1e:d5:11:4a:d6:a8:cb:86:9e:15:f9:6d:33:
dc:8b:1a:e1:2f:41:23:b7:e2:0d:22:5c:83:14:96:63:ae:71:
36:6b:95:16:4e:e0:fa:78:b7:c4:84:40:62:b7:c1:eb:e5:5c:
0e:d8:40:38:84:ad:8b:1d:f0:f9:a0:01:28:61:94:67:4c:52:
46:35:6c:b0:1a:ec:8c:a6:82:c4:b4:59:36:d2:e4:15:7e:22:
1a:98:a1:50:76:fc:70:0b:a1:42:f1:5a:d0:c9:40:e9:12:8d:
44:cf:e0:1a:93:1a:47:25:d4:55:10:11:61:64:78:b2:a2:2f:
8d:d4:95:2b:be:2a:03:93:02:99:0d:1c:3b:48:1e:17:35:b1:
80:6e:0c:94:c3:1e:5a:33:97:87:fe:c3:36:96:3a:a4:d1:b7:
07:eb:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:24 2025 by rpki-client