Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/9ALcnsggzz1McgI3guhiffpk9Cs.roa
File: 9ALcnsggzz1McgI3guhiffpk9Cs.roa (raw, json)
Hash identifier: W40j9Ody14LPIhMHqd5b+3S0dlyn8nsgHsQNGTTLezM=
Subject key identifier: F4:02:DC:9E:C8:20:CF:3D:4C:72:02:37:82:E8:62:7D:FA:64:F4:2B
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 01856D93EC4769C545C139C9EBD22C5DFD87
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/9ALcnsggzz1McgI3guhiffpk9Cs.roa
Signing time: Sun 01 Jan 2023 13:44:48 +0000
ROA not before: Sun 01 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204054
IP address blocks: 91.216.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ec:47:69:c5:45:c1:39:c9:eb:d2:2c:5d:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Jan 1 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f402dc9ec820cf3d4c72023782e8627dfa64f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:d3:ee:eb:76:fe:a8:36:91:34:cf:31:ac:
d6:cd:83:38:09:e6:48:c0:eb:0a:5d:7f:96:43:f2:
53:4f:e3:ae:3f:83:7f:17:55:81:cc:78:ed:9a:01:
13:35:f7:50:30:db:48:c5:50:f5:e1:2c:42:a1:29:
02:68:33:ad:05:a4:3d:9c:b2:8f:d2:de:c9:bd:cd:
67:53:32:71:d7:f4:a0:57:78:5e:23:43:a6:a5:95:
bc:23:b1:0b:0f:58:57:7e:1d:4a:b6:34:de:d5:67:
a1:6d:e9:b7:d2:f9:b5:5e:30:bc:db:ba:4b:1a:91:
92:48:ef:1c:06:d6:99:6d:5a:4c:ab:58:9f:16:dc:
35:90:e2:59:eb:40:4c:3f:e0:3f:84:8f:66:d6:d6:
0c:64:a9:ba:3b:02:e4:68:2e:08:f2:eb:3f:89:f0:
73:35:62:3b:33:26:e3:fe:f7:d6:2f:4a:30:3e:d6:
97:3c:35:f5:5a:65:7d:d2:d0:06:57:50:23:38:60:
a6:cb:7f:3d:0e:c2:63:f1:26:be:c2:c2:98:14:ee:
60:a6:9f:a2:21:f1:18:73:ba:76:09:2b:fb:47:b4:
84:fa:c1:34:d9:9c:0c:ac:ee:2c:cb:cd:28:61:df:
b2:02:c8:46:e3:40:6e:eb:4d:b7:12:04:63:d2:61:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:DC:9E:C8:20:CF:3D:4C:72:02:37:82:E8:62:7D:FA:64:F4:2B
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/9ALcnsggzz1McgI3guhiffpk9Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
98:84:92:2a:17:2f:11:27:64:70:a7:4a:43:d9:79:5d:19:e6:
f0:ad:82:4b:62:75:b5:09:91:bc:79:a3:de:6c:ff:25:de:42:
23:da:7c:51:1b:f2:7d:6a:1e:33:c3:93:2e:dd:68:3b:16:9c:
33:40:eb:91:21:44:8e:e6:b9:50:29:bf:d9:3f:f9:71:27:cb:
ef:a8:4a:da:e1:68:68:c3:04:27:c7:91:ab:70:bf:db:c4:f4:
c7:da:26:0a:35:e3:db:08:6c:e1:04:d6:29:0a:1c:07:e4:aa:
f3:e5:ee:9e:55:4d:85:13:25:5b:ca:bc:e6:89:bf:f0:9f:11:
7e:ce:61:e0:05:32:f6:b5:5a:3a:18:13:66:15:1f:0d:09:e7:
d2:fc:43:f4:59:bd:ac:77:ea:8d:72:86:3d:9d:55:dc:a8:61:
30:7d:de:96:62:fd:5c:f4:a6:da:80:45:d5:64:20:32:cc:b1:
49:08:b0:1e:cf:41:e4:db:9b:8b:f1:7e:f8:de:b4:9c:7c:0a:
a0:9d:36:ae:4c:bc:1f:d0:69:80:f1:0f:65:94:51:3e:50:70:
9e:4c:fb:80:5d:4b:9f:28:6a:83:cd:80:4a:da:54:ec:3a:7e:
6e:63:7f:2c:0e:a6:a1:3b:a5:38:ab:33:e3:c2:5e:f0:5c:33:
d5:49:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:15 2025 by rpki-client