Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/dfZnRbEVtK3Z1Lhec6fWlQGoygU.roa
File: dfZnRbEVtK3Z1Lhec6fWlQGoygU.roa (raw, json)
Hash identifier: bQy53OzLUdCetWzTOKYPWHhcH3exMSuGHwk1XW77AF8=
Subject key identifier: 75:F6:67:45:B1:15:B4:AD:D9:D4:B8:5E:73:A7:D6:95:01:A8:CA:05
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 01857255B14000ECF48760A863068047CDD0
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/dfZnRbEVtK3Z1Lhec6fWlQGoygU.roa
Signing time: Mon 02 Jan 2023 11:54:56 +0000
ROA not before: Mon 02 Jan 2023 11:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48342
IP address blocks: 91.209.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b1:40:00:ec:f4:87:60:a8:63:06:80:47:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jan 2 11:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75f66745b115b4add9d4b85e73a7d69501a8ca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:6e:77:ef:1d:21:f6:c4:2d:11:28:95:17:
6f:4d:22:82:db:ab:b6:0e:2f:a3:82:e8:80:0e:9c:
09:57:f5:07:bf:de:e7:1d:fd:14:d2:19:50:ed:eb:
06:bb:88:75:f8:5f:1b:43:51:d3:ed:64:90:77:0c:
74:7e:cc:58:8b:ec:36:e4:30:d6:11:a5:94:dc:e7:
dc:01:bd:1a:87:72:25:2c:4f:ed:7d:b5:d9:88:10:
b4:02:f7:de:64:04:40:09:a9:ee:e3:01:1f:d7:fb:
46:e7:24:00:ea:09:b6:14:2a:8c:e7:ca:69:30:bc:
ac:a5:0f:3a:d4:4d:ce:7d:8f:05:61:7f:ea:b0:c8:
88:2a:79:3d:35:f7:23:e0:c3:5e:53:be:16:f8:d4:
f1:66:90:c6:d0:e8:97:46:43:df:bd:65:65:8a:e1:
c2:c7:15:1a:8e:07:15:4f:b5:3e:48:26:bd:20:17:
c9:f5:5d:2b:a4:f6:0b:2e:0f:5f:2a:ea:4d:80:7d:
0f:79:4e:cd:2f:17:4d:95:ae:57:00:59:b2:7d:d9:
63:26:71:57:42:23:f8:40:28:e4:bf:69:d0:b5:57:
e0:9e:4c:cf:49:39:cf:e4:46:b0:45:b2:bd:17:1d:
45:6a:75:df:ce:07:ef:19:78:c3:7c:02:7a:d3:d9:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:67:45:B1:15:B4:AD:D9:D4:B8:5E:73:A7:D6:95:01:A8:CA:05
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/dfZnRbEVtK3Z1Lhec6fWlQGoygU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:d2:6a:5a:0f:0e:77:d7:73:36:f7:38:97:23:15:92:83:
7d:57:a4:e3:f6:32:29:7b:a5:9d:e0:20:98:2c:de:4e:f3:49:
a3:f8:e8:aa:90:fc:af:96:e3:34:02:cb:a4:ca:94:21:9c:24:
e4:01:89:82:3f:df:c0:8a:c9:6c:36:b5:f1:27:63:d0:df:16:
86:c6:c8:7f:f9:27:f8:84:4b:51:ea:bc:b4:bb:f4:21:00:fe:
e8:21:a9:b6:e0:b1:7c:4c:ad:0e:8f:86:f0:e3:c7:e4:26:02:
55:e0:6d:b0:a4:57:1d:43:97:8a:c3:af:00:86:f3:5d:f5:06:
a9:05:c4:25:4e:1e:e7:70:fe:62:fe:91:fb:a5:af:74:3b:e3:
d6:e5:78:dc:32:42:76:5f:00:50:84:ed:8e:3b:4d:84:ca:41:
09:9d:52:39:4d:ef:31:15:10:79:a1:c3:20:cf:90:e6:f7:5e:
8d:48:f6:05:2b:ca:4e:43:00:97:95:10:17:ef:59:90:34:b8:
71:19:76:b2:c6:04:b7:9e:bb:63:b5:4d:67:55:b0:ac:b6:78:
34:6c:44:b3:3d:9f:1d:32:13:a6:e5:05:26:23:7e:8e:c9:29:
3b:2e:d0:e9:19:20:eb:09:89:62:00:d8:33:62:7c:86:03:69:
0d:cc:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:38 2025 by rpki-client