Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/R0XhR5eGE61k3VSMFXlC2SXQesA.roa
File: R0XhR5eGE61k3VSMFXlC2SXQesA.roa (raw, json)
Hash identifier: stjnE7Rdb7d9L1evg9JeQ9dlX5tsGz361k+2rN4JpeY=
Subject key identifier: 47:45:E1:47:97:86:13:AD:64:DD:54:8C:15:79:42:D9:25:D0:7A:C0
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 01856FF958D9207551C33A052A4462B9B1C1
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/R0XhR5eGE61k3VSMFXlC2SXQesA.roa
Signing time: Mon 02 Jan 2023 00:54:50 +0000
ROA not before: Mon 02 Jan 2023 00:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43638
IP address blocks: 141.138.164.0/22 maxlen: 22
141.138.160.0/21 maxlen: 21
141.138.160.0/22 maxlen: 22
91.197.152.0/22 maxlen: 22
91.197.152.0/23 maxlen: 23
91.197.154.0/23 maxlen: 23
2a01:9380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:58:d9:20:75:51:c3:3a:05:2a:44:62:b9:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Jan 2 00:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4745e147978613ad64dd548c157942d925d07ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:d4:a9:ca:fa:e3:24:10:28:dd:6d:d1:09:
fc:9a:7c:92:01:d9:52:b2:53:75:86:ce:95:ff:1e:
52:50:d3:5e:61:df:d3:3a:1c:a4:21:85:a7:cc:f3:
55:c1:5e:6b:f9:a8:90:6c:33:07:02:06:45:e4:e4:
44:a6:b6:7d:66:f9:73:c8:98:c5:db:01:62:c3:f7:
9e:4f:c2:2a:61:23:75:83:db:c6:e4:17:f7:69:f0:
0d:ff:6c:b6:7c:eb:27:e8:26:cf:fe:a3:63:3f:84:
5a:b6:34:79:ff:4c:e0:a0:6c:52:3d:3a:1d:01:92:
d5:06:12:ef:23:0c:7a:26:26:e3:4d:58:c2:d3:52:
18:6c:df:aa:c6:06:dd:c6:9d:db:37:1f:e8:92:54:
72:0e:57:10:9f:9b:b3:3c:fe:20:6f:8f:b2:9a:ef:
6d:cb:57:1f:a8:52:1b:4c:6f:a3:d6:9b:59:26:58:
4f:2a:40:b7:f1:1f:d9:49:64:cd:66:19:94:14:1b:
21:45:08:fd:a6:1f:2e:32:94:1e:af:b5:ce:25:dd:
29:ab:6d:12:e5:b6:c5:33:72:53:2f:3c:38:d0:59:
08:23:f8:e0:56:e8:36:a7:e7:a6:99:b1:65:1c:6a:
c2:0d:df:1b:c8:0e:be:c5:cf:55:bc:fd:d7:be:a1:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:E1:47:97:86:13:AD:64:DD:54:8C:15:79:42:D9:25:D0:7A:C0
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/R0XhR5eGE61k3VSMFXlC2SXQesA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.152.0/22
141.138.160.0/21
IPv6:
2a01:9380::/32
Signature Algorithm: sha256WithRSAEncryption
99:f9:2d:95:6e:cb:2e:d1:d1:47:c0:bc:87:f4:4c:9e:c7:3e:
88:6c:b1:d7:19:b3:fc:48:f9:b6:6c:24:e8:ec:f7:f5:1a:61:
fd:a3:be:6b:6f:8d:7b:e8:78:bd:59:de:a6:31:14:e7:36:ec:
3d:d4:cc:63:7e:0c:ec:2a:ae:32:ae:c7:63:54:38:db:6c:f3:
8d:95:46:1c:05:1d:fc:24:fa:ba:db:aa:e2:34:dc:d6:65:91:
37:1b:14:04:51:85:3a:77:da:f3:02:3f:69:82:01:14:c3:b6:
11:d1:e5:da:00:fa:87:a7:1f:35:6c:a9:39:e8:08:68:52:36:
a4:08:ff:3a:9c:9d:dd:ab:e3:4f:38:f1:4a:31:db:de:d0:70:
74:2d:c7:ac:3a:a9:57:82:b9:66:c0:68:43:32:e4:45:ae:33:
34:5e:f3:58:12:b3:d2:ba:c4:a9:6e:0b:90:4a:f5:40:0a:f5:
ef:45:dd:b4:9f:df:a9:a2:84:a1:db:0f:10:8b:b6:a4:40:b2:
78:79:1d:0c:e3:89:2f:fd:20:6b:60:fb:b3:db:3e:3c:b3:32:
d4:77:7e:32:f7:67:13:cd:e2:d6:cc:7c:7a:67:43:23:b1:13:
36:a9:e0:a8:3c:9f:7f:e3:27:99:4f:5f:29:b2:77:2b:99:d7:
c1:62:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:41 2025 by rpki-client