Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/bVQtu_MNk8cNvvB7JvUwoplyt78.roa
File: bVQtu_MNk8cNvvB7JvUwoplyt78.roa (raw, json)
Hash identifier: KNhvwX153b18bxOnlnS/AbZOROuBPFPYu699KNisUmM=
Subject key identifier: 6D:54:2D:BB:F3:0D:93:C7:0D:BE:F0:7B:26:F5:30:A2:99:72:B7:BF
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 01857383979F1FEE4163097A8DA5FC50F933
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/bVQtu_MNk8cNvvB7JvUwoplyt78.roa
Signing time: Mon 02 Jan 2023 17:24:41 +0000
ROA not before: Mon 02 Jan 2023 17:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196837
IP address blocks: 91.223.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:97:9f:1f:ee:41:63:09:7a:8d:a5:fc:50:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Jan 2 17:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d542dbbf30d93c70dbef07b26f530a29972b7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:32:2c:92:6c:b1:a6:25:48:f2:a6:c7:89:
44:9c:3b:0d:4b:1a:21:b9:66:51:78:2c:af:d5:d9:
66:d4:2c:2b:be:04:4c:93:3c:8a:a8:53:e4:6a:3e:
46:e5:86:45:e1:24:6e:bb:33:bc:71:28:6e:73:b6:
06:77:06:33:5b:bf:ee:cb:9c:78:f9:27:f8:a7:8e:
5d:db:1a:15:f9:b9:64:82:ed:45:5f:07:7d:aa:9f:
01:7f:bc:da:80:21:3d:60:0c:80:61:46:09:6a:84:
0b:71:f0:db:13:09:61:9a:52:78:99:52:73:7d:7d:
b1:fc:a6:bb:08:67:d3:02:9a:c3:8f:e7:71:3e:85:
1c:7b:ba:c3:cb:f2:88:39:c7:f6:76:12:9a:96:74:
be:52:78:8c:80:69:d4:48:6d:04:4a:30:86:6d:0e:
7f:d6:a8:f6:46:e0:af:83:bf:88:4e:2c:7c:27:79:
9e:56:7b:ab:8c:5d:ad:a2:5c:c5:27:0f:73:a9:52:
60:83:40:4e:69:a4:5a:73:b2:3e:4f:65:a4:f0:15:
56:1b:6d:5c:0e:e5:d2:fc:f1:52:bb:b2:72:5b:d0:
26:d4:0c:91:37:ea:25:9e:a6:b6:96:7f:79:3f:c3:
64:f4:1b:80:96:da:ff:02:a8:09:73:3a:e9:5a:36:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:2D:BB:F3:0D:93:C7:0D:BE:F0:7B:26:F5:30:A2:99:72:B7:BF
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/bVQtu_MNk8cNvvB7JvUwoplyt78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:55:3b:f0:8d:52:0f:85:57:87:96:68:68:7d:04:57:28:5c:
43:42:2b:0c:e9:e6:91:c2:03:59:2d:4f:a8:d4:3a:8f:a6:d7:
ca:c9:c5:4d:f7:22:30:08:19:63:99:2b:bf:d2:12:55:26:6b:
8f:48:99:0b:16:ba:0e:69:8a:23:0e:36:bb:bc:4c:6d:94:a9:
22:42:12:49:45:da:9b:fe:81:69:00:8b:71:4b:61:34:ef:d5:
8c:dd:9a:a7:b7:a2:f3:26:d3:80:86:9b:bd:ee:51:d1:0b:b9:
da:39:52:0e:09:69:a2:b7:33:c0:76:8f:12:b1:5a:1a:d3:f2:
b5:8d:69:58:e5:1d:e6:7e:6c:c9:d0:9d:0d:eb:05:2d:f8:eb:
97:1c:23:98:77:dc:90:6c:20:bb:71:ed:62:1f:ce:36:8f:2e:
b4:61:c1:4d:75:6a:08:e3:f4:01:02:ce:6c:14:90:88:1d:3c:
8b:a4:9e:f9:c6:88:f6:c0:ee:10:d5:90:08:c3:bd:00:1c:06:
95:36:ea:19:18:7e:5a:c0:a0:11:06:0c:c4:53:98:9e:de:b1:
39:3d:9a:c1:f5:7f:e9:60:1a:c0:8a:86:16:b7:54:bf:0b:75:
05:bb:e3:a5:ad:92:46:ee:01:fc:70:d0:de:25:fd:b6:09:42:
a8:64:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:45 2025 by rpki-client