Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/nt7lbW5wQtk-e6aEkShOc7-Raew.roa
File: nt7lbW5wQtk-e6aEkShOc7-Raew.roa (raw, json)
Hash identifier: djR8xtnAlXGkngBoG/QQZyuZIKKOlYi3cjBI+liePLY=
Subject key identifier: 9E:DE:E5:6D:6E:70:42:D9:3E:7B:A6:84:91:28:4E:73:BF:91:69:EC
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0B3390CF
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/nt7lbW5wQtk-e6aEkShOc7-Raew.roa
Signing time: Sat 01 Jan 2022 11:59:52 +0000
ROA not before: Sat 01 Jan 2022 11:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43125
IP address blocks: 91.194.83.0/24 maxlen: 24
91.194.82.0/23 maxlen: 23
91.194.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187928783 (0xb3390cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jan 1 11:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9edee56d6e7042d93e7ba68491284e73bf9169ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:22:25:7c:c3:4b:92:2d:f1:f4:b5:23:3f:
fd:cb:5b:8d:0d:17:f2:ad:30:72:c6:a5:aa:0a:12:
ef:11:33:02:7f:3d:58:cb:30:e3:b3:94:ae:3d:52:
53:3a:00:e1:95:30:f2:3e:f8:a4:a2:f3:65:6b:cd:
8d:94:fc:53:ba:29:e3:03:09:e0:94:b4:5c:97:74:
e8:64:4f:01:10:8d:46:22:37:4b:4b:d0:af:32:82:
08:90:d5:1d:c7:d1:18:30:4b:0e:a3:e3:19:48:22:
77:43:62:a7:86:5e:9e:01:c5:3c:3d:f3:b1:89:ba:
06:a7:b4:ac:3b:e9:2e:1e:f8:54:76:a2:b4:30:f5:
38:c3:34:14:3c:eb:17:19:dc:df:8f:2c:b2:ca:96:
19:3c:1a:3b:89:7f:e6:d1:8f:a8:38:cc:65:8b:c7:
4c:67:39:ff:d5:dd:10:17:13:a0:16:3b:1e:e7:fe:
cb:0c:97:b2:9c:d5:0d:2e:0c:65:74:a3:8c:d5:92:
4a:f3:e0:ce:78:e3:06:30:c1:89:61:10:e7:60:b6:
f6:56:b4:01:ee:e2:2b:82:77:53:a3:4d:92:e2:84:
4c:5d:a1:a6:13:81:fb:18:7a:a9:d8:58:8d:02:93:
da:e3:17:39:70:b5:0e:9f:5f:57:fe:1a:37:fd:1a:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:E5:6D:6E:70:42:D9:3E:7B:A6:84:91:28:4E:73:BF:91:69:EC
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/nt7lbW5wQtk-e6aEkShOc7-Raew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.82.0/23
Signature Algorithm: sha256WithRSAEncryption
42:9f:54:b9:f9:ca:d4:78:dc:22:b2:e0:be:bf:17:ca:1d:7c:
e5:22:f6:f4:1f:0a:74:14:34:14:28:ea:51:e4:8a:10:fc:c8:
12:98:88:1f:82:c8:74:8a:eb:a4:03:99:15:c8:43:ca:ad:8a:
6e:00:b8:c7:29:e1:0b:72:18:78:f1:81:1b:88:e6:d7:f3:89:
c1:59:b0:bc:7d:fa:ce:d3:bf:a9:df:5f:75:3c:88:70:21:52:
b2:31:2d:f7:7a:00:f2:3f:26:a8:90:1a:f4:d0:fb:c9:8a:d9:
c9:d8:f6:8e:33:95:1c:c5:48:64:dc:67:a5:b8:72:2c:41:0f:
9a:4b:fb:ab:b0:8b:e1:58:bc:2a:6f:64:d4:9c:af:1d:af:6f:
ba:13:90:99:67:16:67:00:0c:e3:ad:52:0f:ef:8f:05:ff:89:
b5:04:84:c7:76:3b:6b:a9:3a:fe:c1:45:94:ca:cf:ba:c8:71:
0e:d1:62:2f:10:99:c8:7b:7d:46:3d:31:1f:76:62:8b:8a:44:
a0:c1:1d:9d:cc:a1:18:7c:cf:f8:06:3b:24:29:1d:ad:d5:8c:
2d:ec:ae:71:f6:a9:93:a5:e6:f2:d9:0d:54:31:e0:58:35:00:
06:14:e1:c5:83:a2:0d:4e:f0:a5:0f:c1:f6:d6:5c:6c:7e:82:
07:f4:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:35 2025 by rpki-client