Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/RosKp6dVDmVjSKp6E2WyLnDEqUc.roa
File: RosKp6dVDmVjSKp6E2WyLnDEqUc.roa (raw, json)
Hash identifier: TGtMFTejL8OuPcKFw6zn121q4+XJZv1gpmHLb0W5iUg=
Subject key identifier: 46:8B:0A:A7:A7:55:0E:65:63:48:AA:7A:13:65:B2:2E:70:C4:A9:47
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 01857195692F704F829700370DAAAC0BE634
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/RosKp6dVDmVjSKp6E2WyLnDEqUc.roa
Signing time: Mon 02 Jan 2023 08:24:55 +0000
ROA not before: Mon 02 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197895
IP address blocks: 91.228.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:69:2f:70:4f:82:97:00:37:0d:aa:ac:0b:e6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Jan 2 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468b0aa7a7550e656348aa7a1365b22e70c4a947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:53:0f:b7:0a:22:22:eb:05:f6:9d:bd:49:
18:ff:9f:db:0f:7c:be:fc:64:e8:b8:9e:4f:3a:6d:
b5:df:9f:d4:a2:cb:88:09:51:67:fa:f5:c6:86:af:
82:2e:f7:2e:bd:08:2a:fa:96:33:eb:e3:24:61:1f:
12:f7:57:df:ac:2a:a2:3d:0e:a1:9b:d5:d4:87:b0:
fa:2f:c7:23:03:5e:e9:8f:0e:22:96:d0:30:26:cd:
a5:9d:8e:42:e2:c3:f6:3d:8c:7f:ad:c5:09:da:79:
1b:e1:ca:57:b5:83:3f:ba:82:d5:ae:cd:89:c8:0a:
e2:ad:ad:4d:36:15:5f:8a:be:bb:05:9a:a0:d2:d9:
16:59:c4:88:0f:6a:df:d8:34:8b:11:f9:16:2f:c9:
1b:32:40:c8:37:6e:c6:05:27:8d:8a:40:2f:6b:54:
a6:a1:67:e6:c5:20:0c:cc:a2:75:3c:dc:69:b7:f4:
f7:1a:c5:44:61:ea:83:a7:e5:bc:b7:6d:b2:f3:23:
3a:9c:6f:14:80:04:89:06:b6:3e:1a:38:f8:57:02:
54:b0:5f:06:90:e7:cc:f7:7d:e3:ef:11:67:d3:86:
08:b9:c6:ae:18:fc:5a:01:c8:60:88:2f:95:91:12:
54:ea:2d:04:67:c5:c5:21:1c:8f:34:ac:9c:7e:05:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:0A:A7:A7:55:0E:65:63:48:AA:7A:13:65:B2:2E:70:C4:A9:47
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/RosKp6dVDmVjSKp6E2WyLnDEqUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.44.0/22
Signature Algorithm: sha256WithRSAEncryption
73:56:14:b0:1d:de:99:38:82:fb:a4:3c:7e:cc:8a:32:75:f5:
5a:83:b0:85:8b:56:ee:7a:78:02:8b:77:7e:e6:da:1d:87:dc:
da:39:3b:9b:72:e1:e4:50:59:81:d3:a3:bb:3b:da:24:14:1a:
c5:2e:d9:eb:14:3a:61:17:60:55:fc:4c:5e:92:68:b1:85:6d:
4e:ae:bd:76:3f:29:76:d8:53:83:d6:d6:f6:d6:92:49:3c:f8:
49:11:f3:c6:52:b9:23:97:21:8c:05:16:6f:e5:cd:52:85:28:
43:d0:c9:0b:49:0d:09:d4:79:bf:4d:6a:c4:dc:d0:b1:ec:41:
75:9c:3c:fa:2f:18:f3:55:7e:97:31:0a:eb:37:22:d9:46:34:
bd:96:3b:3b:ee:fe:17:3a:c6:57:ed:25:74:47:9f:a1:54:70:
8d:92:63:e5:79:0e:b6:30:c5:15:73:40:6e:37:33:2b:5a:94:
2f:4a:b5:e7:2b:a5:ef:59:46:0c:41:08:6d:92:fd:32:28:ae:
19:1f:ac:85:53:d5:c9:a5:97:99:18:64:5a:a9:dc:c7:51:f6:
0c:95:38:26:54:ea:2b:bb:95:ec:a2:24:97:21:1c:b5:16:71:
cc:4e:6e:7d:97:1f:95:96:a3:10:47:8b:e8:44:81:72:65:f2:
d7:37:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:51 2025 by rpki-client