Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/DqU1DCtz7SVzydY9ycbYvoiDPS0.roa
File: DqU1DCtz7SVzydY9ycbYvoiDPS0.roa (raw, json)
Hash identifier: O/V9Z54Yv0lMVwZRA40ZaSvorAF5a5FPT1mcwdS+ySA=
Subject key identifier: 0E:A5:35:0C:2B:73:ED:25:73:C9:D6:3D:C9:C6:D8:BE:88:83:3D:2D
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 01856BE5AD949DFE390108E6A66469608827
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/DqU1DCtz7SVzydY9ycbYvoiDPS0.roa
Signing time: Sun 01 Jan 2023 05:54:52 +0000
ROA not before: Sun 01 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197052
IP address blocks: 91.216.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ad:94:9d:fe:39:01:08:e6:a6:64:69:60:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jan 1 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea5350c2b73ed2573c9d63dc9c6d8be88833d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:00:0c:9e:ad:7d:22:eb:d1:0d:87:d4:7a:
e2:95:6d:df:a8:3b:89:87:92:75:43:19:cc:44:e5:
9e:19:7b:c7:04:ff:76:bb:0f:8c:38:dd:dd:e3:f0:
d6:78:d1:9e:07:f3:31:73:23:9a:a5:c7:5a:a8:d3:
68:13:ca:41:12:7e:d0:c7:ec:64:01:be:99:04:2b:
2b:49:43:61:1c:ac:78:30:2e:a0:a0:ee:8b:80:08:
7b:c8:20:d5:fc:b9:7e:5f:be:ce:8e:40:5d:3f:87:
e2:75:26:b6:5c:a3:74:7e:94:f5:5b:64:fb:c5:22:
17:e7:e0:3c:a0:7a:8f:d3:e6:be:8b:61:55:c0:fc:
f4:f8:dd:5a:f1:f6:92:d1:94:58:8b:0b:98:de:27:
1f:5f:3c:50:ec:b3:34:ca:52:9f:6d:92:87:9e:c9:
ea:7f:e3:9d:03:15:38:dc:af:1f:5d:ef:95:d1:3b:
3b:16:48:85:2b:8d:c8:4a:fa:64:40:6d:d1:95:d6:
fc:71:63:17:64:22:ae:41:c3:64:c2:cc:a4:f2:bd:
7c:38:a4:d7:2f:e5:74:d0:e0:e1:51:37:7d:f4:6f:
a8:d0:35:d7:fb:c5:17:34:a2:c4:a1:1d:52:5c:3a:
a6:9d:31:b6:9b:f4:5f:57:f9:40:e0:4d:1a:80:56:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:35:0C:2B:73:ED:25:73:C9:D6:3D:C9:C6:D8:BE:88:83:3D:2D
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/DqU1DCtz7SVzydY9ycbYvoiDPS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.66.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9d:84:7f:ca:ce:41:85:00:31:44:98:57:17:1f:62:c6:22:
ec:42:53:b1:c5:66:8b:80:19:95:a5:be:c0:04:c9:e8:fc:86:
24:02:2d:36:d5:6a:38:e1:79:f1:5d:83:e0:ae:f7:e1:44:78:
8b:6a:55:e0:77:d3:95:0c:a4:1e:c1:9f:57:29:d6:92:f2:cc:
4d:33:d0:8b:33:43:8c:35:aa:5b:d4:8c:08:27:b0:e7:a8:b4:
84:41:1c:dc:6c:35:36:40:97:46:4d:f1:fe:f5:0b:b7:9d:2f:
e4:17:93:fe:7b:7e:b2:45:d2:2f:07:57:18:e5:52:f1:86:13:
31:22:43:00:7a:41:6a:b1:93:ee:2f:64:8b:ae:0b:0e:fd:ae:
56:f6:dd:48:47:67:c6:91:4b:85:97:ac:21:bf:c8:55:c6:cf:
f4:c6:fb:8a:8a:d7:8b:ac:f4:ba:88:d6:a4:a0:7b:8c:a1:55:
75:db:47:70:da:73:51:8f:9b:2e:0d:c0:89:b8:c6:57:2c:db:
4c:42:73:b2:5c:f0:83:3e:e6:0c:15:09:dd:e1:bc:6c:db:47:
db:67:0d:c2:b7:b0:a3:b3:17:6e:08:af:d9:68:fb:56:f1:50:
90:21:24:03:11:35:f7:be:d8:d9:9b:c8:47:44:e9:e8:0c:bd:
c6:55:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:13 2025 by rpki-client