Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/5iZC3mFW1YTQlt-UX_R5ouoKsVs.roa
File: 5iZC3mFW1YTQlt-UX_R5ouoKsVs.roa (raw, json)
Hash identifier: KsHSBkf0iB2cHjrKD9IMPO8upVAEJUT1oSQd56Galng=
Subject key identifier: E6:26:42:DE:61:56:D5:84:D0:96:DF:94:5F:F4:79:A2:EA:0A:B1:5B
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 06EC34A3
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/5iZC3mFW1YTQlt-UX_R5ouoKsVs.roa
Signing time: Mon 21 Feb 2022 16:33:07 +0000
ROA not before: Mon 21 Feb 2022 16:33:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207840
IP address blocks: 91.198.196.0/24 maxlen: 24
2a0f:8840::/30 maxlen: 30
2a0f:8840:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116143267 (0x6ec34a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Feb 21 16:33:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e62642de6156d584d096df945ff479a2ea0ab15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:ba:4f:d7:ba:d1:2d:78:71:3e:4c:d8:61:
11:98:40:a4:4e:a8:10:ad:db:63:81:d3:2e:57:e6:
e6:77:84:81:d3:e2:0c:54:03:90:da:0c:83:1c:5f:
98:a7:e5:e5:1d:ce:fd:ea:6f:5e:67:d0:63:24:f7:
ea:51:fc:52:5d:96:6d:94:79:73:55:5f:4d:a6:f6:
d2:1d:e5:ea:26:a6:ab:d5:8e:56:8e:e0:c4:53:62:
dd:c3:11:bb:ca:fe:fb:17:50:c5:ec:03:46:3a:09:
06:a0:9c:2d:52:0f:c8:57:7b:15:15:b3:da:ff:f3:
df:ca:ea:31:d5:56:c5:4d:fd:c0:73:c6:ff:80:08:
b5:0a:3d:63:f2:73:ff:8c:94:e8:11:55:c1:4c:20:
90:ae:47:91:a3:ec:a5:09:fa:2e:7b:21:a9:42:f2:
e0:9a:04:7b:bd:7d:25:27:5d:f6:4b:23:89:79:2d:
94:ab:3b:a5:3e:7f:da:b2:79:a8:be:d6:4e:51:5b:
67:62:9c:fd:a9:8e:53:f9:d3:fa:ee:50:a4:09:a8:
21:16:4c:d6:8f:77:35:03:fe:d1:4a:81:13:49:6f:
86:83:99:a2:14:60:ad:d6:01:0b:fe:5d:99:b1:64:
f5:df:d3:0c:7a:e8:d3:03:d2:50:bf:64:3b:89:2f:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:42:DE:61:56:D5:84:D0:96:DF:94:5F:F4:79:A2:EA:0A:B1:5B
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/5iZC3mFW1YTQlt-UX_R5ouoKsVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.196.0/24
IPv6:
2a0f:8840::/30
Signature Algorithm: sha256WithRSAEncryption
66:d2:19:97:bb:c6:0f:6e:51:ab:0f:71:af:cf:da:75:90:6a:
8f:e4:a3:66:9a:0c:43:7a:b9:d6:a8:5e:a7:63:7b:a8:ad:09:
9a:a3:d6:1a:37:e1:62:f9:db:85:4a:a5:ec:d5:80:7d:58:3f:
de:fe:2f:05:aa:bf:22:07:5c:c6:88:fe:97:15:a4:03:91:d0:
16:67:9e:ae:0d:9a:b4:49:1b:aa:db:8b:3f:2d:0e:f8:a6:34:
18:8b:3a:c9:4e:1d:37:c6:ba:6e:80:46:4e:88:07:b9:57:e5:
11:9b:b7:43:84:53:33:69:15:43:82:a5:cf:52:18:92:bb:a7:
62:f7:29:69:f0:1b:99:49:07:73:c6:c9:87:c5:25:45:56:ac:
b6:97:1b:36:ca:b7:cf:00:7c:7a:0b:e8:17:fa:ac:4b:14:93:
69:9f:71:77:fc:1d:13:d6:c2:47:01:b5:c8:7f:22:86:f6:9c:
2d:16:da:2a:83:bf:6a:a7:84:bf:4a:75:5d:ee:42:b3:4a:46:
e2:18:f0:36:08:59:5a:62:c2:e8:8f:7d:09:7a:9c:15:17:3f:
5f:b5:ad:60:f4:3f:ce:7f:b8:c3:23:35:15:1d:3e:9c:b5:c5:
15:e1:d6:41:38:a0:88:9e:8f:b7:ec:0e:36:de:63:b6:73:ac:
7c:52:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:40 2025 by rpki-client