Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/sCEjrSt_jQUiw_g7XRAOkIoB8Gs.roa
File: sCEjrSt_jQUiw_g7XRAOkIoB8Gs.roa (raw, json)
Hash identifier: Sq9yw5WRs5yFptDTMJ/n7o994/74NoAtgHk6gV1H8dk=
Subject key identifier: B0:21:23:AD:2B:7F:8D:05:22:C3:F8:3B:5D:10:0E:90:8A:01:F0:6B
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0186EB422986DA62BDCDFCEAD0BF786EEED3
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/sCEjrSt_jQUiw_g7XRAOkIoB8Gs.roa
Signing time: Thu 16 Mar 2023 16:30:27 +0000
ROA not before: Thu 16 Mar 2023 16:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51274
IP address blocks: 91.226.225.0/24 maxlen: 24
91.226.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:42:29:86:da:62:bd:cd:fc:ea:d0:bf:78:6e:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Mar 16 16:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b02123ad2b7f8d0522c3f83b5d100e908a01f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:b9:0e:f6:6c:5c:66:b3:b9:2b:40:8d:60:
7b:5f:41:3f:8b:1a:1f:1f:53:b3:fa:d2:30:6c:aa:
ee:ad:2e:f6:c4:7d:f4:c6:fc:a4:54:b5:90:67:3f:
82:44:03:f4:72:69:bd:db:02:dd:6b:8a:9f:93:80:
92:6e:99:d8:1a:a6:d4:4c:41:26:20:7a:24:b5:54:
41:67:7f:2f:0d:a7:b0:6f:92:50:ef:6f:a1:74:23:
34:1f:43:01:5c:40:a7:12:df:c2:3a:a1:ca:2c:94:
d0:57:5e:41:a0:be:63:f9:0a:dc:7b:b9:20:e9:62:
20:41:3c:4a:60:0c:f6:1c:cc:18:2a:49:67:a0:a9:
35:70:41:3b:17:e8:b2:b6:86:41:40:15:7c:11:82:
6b:1f:16:1d:da:6c:3d:51:91:fe:40:4c:29:69:07:
67:e1:4e:f2:b2:d1:19:c7:bb:36:9f:69:3e:6c:7b:
14:97:d8:79:9f:12:2e:04:07:c3:23:89:e0:6f:83:
bf:1d:ed:8e:cd:56:48:47:4f:4e:7c:e7:75:66:96:
b0:a7:f9:42:58:8a:3f:ec:9a:61:ba:2f:ee:56:49:
0e:14:5b:b1:d6:e8:2f:eb:fa:94:9d:be:25:ea:f8:
d4:28:73:e4:26:c1:70:98:b2:b0:04:f4:43:c6:3c:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:23:AD:2B:7F:8D:05:22:C3:F8:3B:5D:10:0E:90:8A:01:F0:6B
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/sCEjrSt_jQUiw_g7XRAOkIoB8Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.224.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e2:9b:00:68:0f:d2:b1:a0:44:bc:ef:ff:3d:62:b0:f8:b2:
6d:d0:e4:5d:01:ed:b6:2d:03:46:da:b0:cc:ad:61:e5:c5:1d:
f2:e1:d5:52:c5:67:13:e4:cd:93:bd:3e:2e:38:04:76:97:68:
69:3b:c8:ff:b4:19:95:d5:c3:40:a1:ec:70:e3:cc:b1:66:68:
1b:3b:4c:90:89:a9:fc:6e:cf:1d:03:f3:33:b5:99:f2:40:d5:
0b:88:7a:f1:91:18:a1:8d:ae:c6:9b:90:57:73:d7:95:b6:db:
d1:50:5e:73:bd:22:73:14:1b:46:62:d7:dd:e0:2b:14:f6:42:
00:a1:65:3f:8a:f5:25:92:9c:73:cd:2e:d2:f0:7f:e9:e6:3e:
6a:5b:14:86:87:37:67:ed:cb:12:c6:a0:c9:45:86:1d:a7:6b:
04:b6:42:0c:86:bc:79:40:da:86:c8:2f:7f:ff:5a:67:ec:22:
1f:06:66:91:08:ea:7a:97:78:de:ae:7a:75:e7:df:d3:cb:13:
31:ad:ac:eb:2e:7d:d2:70:16:b5:db:ed:71:76:cd:34:6d:e3:
be:10:2d:b9:6c:ca:f0:ec:e0:98:d4:54:83:3b:02:4d:a3:76:
5d:b4:5f:4f:e8:bf:68:89:93:0b:f3:d6:a8:ed:18:d0:d5:fe:
d2:81:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:54:46 2025 by rpki-client