Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5pIYlV6brRARD0RSZ1hwlcU7TlA.roa
File: 5pIYlV6brRARD0RSZ1hwlcU7TlA.roa (raw, json)
Hash identifier: TCGpnG3YMp+AAmQLwaUuQhbTE5SJ8Ci1cBroAAsopp8=
Subject key identifier: E6:92:18:95:5E:9B:AD:10:11:0F:44:52:67:58:70:95:C5:3B:4E:50
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 01821FE46A2A3E3F48E3C14AA9B5B80763D0
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5pIYlV6brRARD0RSZ1hwlcU7TlA.roa
Signing time: Thu 21 Jul 2022 08:33:59 +0000
ROA not before: Thu 21 Jul 2022 08:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204054
IP address blocks: 91.216.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:e4:6a:2a:3e:3f:48:e3:c1:4a:a9:b5:b8:07:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Jul 21 08:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69218955e9bad10110f445267587095c53b4e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:e7:4b:58:83:24:c4:45:b2:86:f9:81:27:
cb:c5:35:cc:28:2d:f5:e4:28:72:e4:01:35:32:c3:
56:86:69:ef:ee:77:14:4a:89:4d:63:27:ed:c8:74:
1f:dc:31:ae:a5:c9:03:fb:53:ff:d6:89:80:dd:8a:
34:79:53:51:37:07:89:d5:25:53:65:4d:d6:bd:ee:
99:bf:9d:82:fb:87:f9:88:1e:65:f9:19:94:8e:c7:
e2:db:5f:23:ac:b2:e5:b9:df:4f:dd:06:aa:99:57:
e0:16:18:0f:77:c2:31:59:1f:3c:6c:53:7a:dd:09:
51:aa:f0:f6:6d:04:a6:44:29:12:ae:c6:ae:ee:d8:
58:e5:99:a1:90:f9:e8:e1:4b:26:72:a8:14:e7:db:
90:e2:6e:5e:0b:26:9b:7b:19:82:f8:f7:a1:fd:9f:
fd:1f:37:80:78:ef:d1:e8:05:d3:c1:aa:d8:b4:d2:
b2:66:c3:9c:30:4b:02:a9:de:32:2d:ca:58:aa:6b:
ed:36:54:42:f4:4a:d4:da:72:ac:0f:8e:6f:5b:f2:
fb:b8:a8:dd:45:2b:dd:cd:64:a6:4d:9b:94:69:f7:
8a:73:a6:4a:e4:85:1b:5f:88:fb:0a:6d:6b:30:2d:
dc:0a:84:ac:01:9a:27:11:c6:f8:80:05:b2:9d:f7:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:18:95:5E:9B:AD:10:11:0F:44:52:67:58:70:95:C5:3B:4E:50
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/5pIYlV6brRARD0RSZ1hwlcU7TlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b0:e6:d5:e5:c9:02:81:bf:4d:f5:c6:9a:d3:b0:ae:45:53:
a1:3f:8b:c5:27:90:05:fc:31:82:da:d7:ee:89:b8:28:f9:88:
bd:5b:e5:7d:a2:9c:0f:00:32:1b:0e:d4:53:9d:bb:68:92:8a:
59:0e:29:35:6a:f9:6e:e8:78:13:fb:e8:3e:e9:c4:5b:66:72:
9c:1b:22:f4:99:d2:b9:4d:4d:fb:81:42:b5:b4:77:64:c3:49:
70:b1:70:5a:3b:44:64:26:7a:c0:12:e7:94:31:a7:ad:e3:80:
7b:36:bc:de:66:d7:8c:0d:f5:31:8e:88:b3:29:70:31:1a:7d:
6d:f5:02:a3:6e:0d:d0:46:19:6b:f3:b0:02:be:8e:f7:24:6e:
e8:a4:34:4b:49:88:fb:80:f0:0f:3a:d0:f6:13:b5:ff:34:c6:
f7:6f:c8:7d:9d:c8:0f:ab:b6:4d:7e:46:70:97:94:46:90:f7:
89:ed:a0:85:cd:a4:c1:7d:9c:88:18:80:cd:29:6b:a5:a7:af:
cd:d0:53:ea:86:c7:bc:e2:20:00:e1:16:b4:e8:c2:2f:9a:c2:
c4:bf:0c:5d:5f:39:44:19:39:4b:10:19:b8:2b:31:b1:05:51:
d2:2a:0e:f3:09:f9:dd:a9:32:0c:a1:51:46:a5:2f:0d:21:c7:
75:29:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:35 2025 by rpki-client