Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/x_v6qfByILG0xUFpT6mdbk6oM0w.roa
File: x_v6qfByILG0xUFpT6mdbk6oM0w.roa (raw, json)
Hash identifier: Q+D44BiaTdH1flpO7WwyyL7ilRXTTOP2kgpeGjmOMnc=
Subject key identifier: C7:FB:FA:A9:F0:72:20:B1:B4:C5:41:69:4F:A9:9D:6E:4E:A8:33:4C
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 0188F6BFAD5CBC6E2205D0D226541539EA97
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/x_v6qfByILG0xUFpT6mdbk6oM0w.roa
Signing time: Mon 26 Jun 2023 08:08:56 +0000
ROA not before: Mon 26 Jun 2023 08:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 91.208.180.0/24 maxlen: 24
91.236.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:bf:ad:5c:bc:6e:22:05:d0:d2:26:54:15:39:ea:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jun 26 08:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7fbfaa9f07220b1b4c541694fa99d6e4ea8334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:ea:f7:e4:6f:7f:fd:b1:0e:16:f8:ae:a3:
7e:87:cf:fd:d1:c9:2e:a0:b9:ca:f2:82:18:ad:ab:
0e:f8:eb:c1:c5:07:95:26:f8:df:e3:e6:47:83:cc:
4a:0c:76:e4:92:30:db:f1:87:0d:bd:5d:03:a8:f4:
36:0f:bc:09:16:7d:d3:89:95:74:15:3e:38:ab:2a:
55:ca:4d:23:28:38:e1:6a:f8:ec:36:7c:f5:3c:08:
84:da:9a:a7:c0:91:3f:62:13:e5:f9:ab:ed:c0:10:
11:73:85:af:7c:3a:95:41:3d:aa:1a:f0:51:ad:1d:
c7:39:8a:ec:75:e3:76:2f:dc:d7:1c:13:a7:d9:13:
cf:0e:9e:7e:48:bd:0c:bc:f4:0c:fc:fc:3c:52:77:
71:c7:98:69:c7:b1:19:79:39:fc:6e:41:ae:d5:34:
49:be:d7:70:22:21:0e:0f:2c:ef:39:56:fa:fc:8c:
1d:d4:bf:d9:af:b2:43:5d:93:fd:19:9b:18:83:72:
c0:3a:e3:42:be:09:eb:9d:64:f1:e6:fe:fb:bf:07:
3c:7e:cd:a5:ae:66:54:68:91:07:ea:8f:4b:e6:2e:
a1:d9:3e:63:6f:15:47:c4:93:af:9d:64:59:b3:10:
f8:60:33:5f:95:4e:40:99:8a:af:37:52:d3:ea:32:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:FA:A9:F0:72:20:B1:B4:C5:41:69:4F:A9:9D:6E:4E:A8:33:4C
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/x_v6qfByILG0xUFpT6mdbk6oM0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.180.0/24
91.236.78.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4f:ec:ee:35:cb:c4:7d:6b:36:53:ff:a2:a1:21:ab:a6:b4:
dc:c6:62:aa:f6:2a:9a:9f:e9:b5:a8:07:e2:6a:a4:b8:ae:ba:
10:33:e0:74:e6:19:af:a5:83:90:51:1f:54:fd:2f:ae:94:c3:
1e:98:bf:7d:0b:cb:ff:c4:83:b1:19:16:62:5e:b4:68:32:f7:
f0:33:f7:db:4b:f5:0c:5e:90:73:e6:b3:c9:54:d4:bb:52:7e:
d5:03:c4:8b:b0:68:33:ce:7f:de:1f:b6:36:85:28:08:87:78:
48:b4:af:05:e0:f9:e3:db:75:e6:db:ed:48:ac:d1:fa:cf:de:
aa:7a:d9:22:1a:f3:b7:8b:2e:86:4b:1f:f6:04:9c:21:78:7f:
4e:85:94:d8:11:97:8c:92:35:90:1f:fa:a7:f5:f1:08:2c:e6:
6e:61:99:eb:da:ab:2a:84:23:ad:d2:04:59:83:bd:80:05:94:
57:ca:9f:bd:9b:db:51:fd:83:56:68:51:45:31:7f:72:8f:bd:
2c:3c:f9:86:3b:00:ce:28:28:c2:7b:16:2a:22:54:19:87:ba:
ee:37:b5:f8:84:20:0f:14:ba:4b:4d:13:69:51:0a:42:64:48:
6c:fb:80:c3:b3:3b:8a:33:dc:0f:bb:d7:11:f9:86:b9:52:5c:
81:ea:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:34 2025 by rpki-client