Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/x7Jf_jlf3tkaaUEIzXqfiTlwC7A.roa
File: x7Jf_jlf3tkaaUEIzXqfiTlwC7A.roa (raw, json)
Hash identifier: gMo9CHlsHdHf67G9wQwE+swSviRltUpgFwatJuWa+fQ=
Subject key identifier: C7:B2:5F:FE:39:5F:DE:D9:1A:69:41:08:CD:7A:9F:89:39:70:0B:B0
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0277FA00
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/x7Jf_jlf3tkaaUEIzXqfiTlwC7A.roa
Signing time: Sat 01 Jan 2022 09:04:29 +0000
ROA not before: Sat 01 Jan 2022 09:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197052
IP address blocks: 91.216.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41417216 (0x277fa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jan 1 09:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7b25ffe395fded91a694108cd7a9f8939700bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:76:ee:90:25:c4:d1:c5:e6:1b:40:df:7f:
0e:ab:33:26:ec:f5:52:ac:74:ff:7e:4a:39:d4:fc:
a7:fd:0a:8f:77:47:91:22:d7:27:89:8a:ce:a5:a0:
14:2c:00:5b:64:50:a7:df:3e:9e:f8:cd:b1:a9:d9:
a6:0d:10:dd:92:df:bb:67:65:60:68:73:ed:76:33:
be:91:a6:4a:6f:86:17:c9:25:a2:26:1e:e2:2f:ff:
c6:ea:6a:9f:5d:86:ff:f5:9c:3e:e4:00:2b:e8:3a:
ad:96:6a:c0:eb:57:86:54:fc:a8:6f:7b:46:6e:82:
68:2a:50:90:e1:72:2b:ff:4c:23:9c:33:d0:1a:18:
6e:d9:fa:ca:f2:81:87:4f:49:3e:2e:10:67:ce:4b:
6b:80:cf:17:ae:a2:63:76:7c:bc:9d:5a:6e:6b:69:
f0:1d:c5:4c:3f:54:53:bd:4e:d7:da:08:46:50:1c:
b7:62:3e:c0:2c:5f:3e:63:3b:9f:4e:6a:89:5e:70:
a3:06:2b:70:10:6a:3c:24:25:fa:ec:c3:3d:03:6b:
a8:3c:88:e3:33:83:3d:b1:30:e6:b5:cf:7e:b8:13:
fb:24:55:f7:ed:da:4c:a2:b8:e8:d7:37:01:d4:a1:
b6:d5:70:2a:c9:78:72:0e:bf:ef:9c:93:09:d6:51:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:5F:FE:39:5F:DE:D9:1A:69:41:08:CD:7A:9F:89:39:70:0B:B0
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/x7Jf_jlf3tkaaUEIzXqfiTlwC7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.66.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5b:3e:24:30:58:0f:7b:5c:87:f9:31:86:e4:5a:c1:54:06:
50:2e:29:47:58:c9:43:a9:d5:f9:2b:32:df:0c:c0:0f:67:04:
be:ce:54:9a:09:52:c7:d3:0f:49:5a:8b:57:0d:c7:e8:fe:e2:
53:9c:86:2f:b3:72:1a:71:fb:2d:55:ba:c1:6e:a9:49:6b:86:
aa:15:cc:34:e1:fe:3d:2b:11:0e:88:56:ac:d6:35:cb:46:88:
48:16:1b:bc:2e:6a:aa:f9:4e:76:ee:dc:8d:96:c0:cb:46:b9:
40:81:de:85:c8:c6:81:4a:76:ab:43:60:2c:bb:89:d2:cf:24:
6a:eb:d6:db:13:2d:23:15:61:8c:2d:b5:8f:6b:19:db:68:a6:
41:95:d7:78:98:40:48:07:10:60:ff:61:56:22:3a:7d:57:92:
4b:4f:64:f7:c9:1c:32:9b:04:7f:5d:b2:16:22:96:9b:5e:f7:
0f:6a:ba:57:11:38:27:0f:40:b1:c7:7e:c7:fb:1d:f2:59:f5:
f8:11:a5:92:2a:c4:16:17:e9:ed:84:67:1c:79:b2:9f:29:77:
6d:4c:3e:b3:53:8e:ec:94:bc:28:42:89:0e:91:a0:dc:c6:e8:
e3:bb:7b:f0:03:75:29:9a:67:e9:7d:0a:c3:00:e3:4a:28:3a:
0e:21:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:29:11 2025 by rpki-client