Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/f3AfnmYpX7kN5tcc49ZgQ1mrMtk.roa
File: f3AfnmYpX7kN5tcc49ZgQ1mrMtk.roa (raw, json)
Hash identifier: CFvUkisxTQe/U3l1jyvlHNHPv35/IqDH1xMCKpEhG3U=
Subject key identifier: 7F:70:1F:9E:66:29:5F:B9:0D:E6:D7:1C:E3:D6:60:43:59:AB:32:D9
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 0405B2BC
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/f3AfnmYpX7kN5tcc49ZgQ1mrMtk.roa
Signing time: Sat 01 Jan 2022 01:59:10 +0000
ROA not before: Sat 01 Jan 2022 01:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51739
IP address blocks: 91.223.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67482300 (0x405b2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Jan 1 01:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f701f9e66295fb90de6d71ce3d6604359ab32d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:c8:db:83:ba:08:b7:c3:fe:0f:d9:2e:26:
57:5c:be:01:35:20:60:87:a5:54:6f:95:19:ff:6b:
0b:5e:87:54:20:9b:63:71:2c:28:b4:ef:16:38:2a:
da:ec:3e:e7:14:85:03:5f:ac:bf:c3:1e:3e:16:61:
0b:8f:1b:e3:b7:3e:87:ba:f1:8d:b9:40:23:ab:31:
48:29:af:02:44:c2:85:11:bf:35:b7:26:86:a8:42:
d7:66:4f:98:09:a2:76:ec:b4:a4:9b:f6:1d:5b:a7:
31:68:1f:a5:b0:73:b9:ee:97:41:13:3c:58:32:4f:
fd:8b:03:d3:f4:bf:49:f5:2b:7a:12:be:36:ee:f0:
2a:06:10:89:15:36:e2:cd:80:08:38:ae:6d:99:f6:
94:56:8c:20:1c:80:d0:30:fa:1a:43:be:fc:5b:d0:
6c:0e:3c:f4:39:65:bb:92:ee:2c:4e:a9:75:e5:a2:
5d:f9:a8:64:f2:2f:5f:88:cd:a1:b4:73:26:16:06:
d6:bc:6f:a7:fe:aa:b5:6c:6a:f5:35:d9:fe:1d:7c:
e7:81:5a:52:62:9a:f7:81:b6:e8:e6:57:e9:c4:65:
57:01:e1:a6:a6:81:99:7e:3e:b3:e3:33:a7:ee:e0:
03:15:f3:87:4a:7c:a2:47:68:2e:00:91:05:66:3c:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:1F:9E:66:29:5F:B9:0D:E6:D7:1C:E3:D6:60:43:59:AB:32:D9
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/f3AfnmYpX7kN5tcc49ZgQ1mrMtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:11:e5:b1:b2:f3:f3:4c:d9:5f:7e:6a:2d:81:f5:ef:40:1b:
78:55:6f:08:7e:63:91:85:ca:d7:df:47:cb:e4:f9:b0:46:06:
39:4f:c3:b0:2e:51:5b:c4:12:7d:a6:65:91:ef:19:b8:5b:0f:
bb:50:5d:ea:c1:a4:98:28:f1:be:40:e1:fa:3b:f9:e6:0b:05:
09:24:e6:a4:f9:8e:54:d3:4e:cd:8a:e2:d0:45:ba:00:dd:48:
5a:89:53:49:1e:6c:f9:0b:cd:ac:52:df:91:11:c8:43:f1:a0:
1c:05:c1:05:15:b1:14:58:9d:a2:e0:9e:c0:58:14:61:6f:a3:
ab:54:26:bd:47:cc:1c:8e:31:8a:cf:41:62:09:20:51:5b:fc:
1e:69:fc:47:4a:16:e1:5e:98:e4:3a:0a:5c:29:f8:17:51:a5:
19:6c:47:8d:a8:5e:c9:c3:64:36:bc:4f:17:47:fe:00:9c:46:
50:ba:26:d8:6a:e8:74:1d:8b:2a:09:77:62:a8:18:6c:8e:b8:
c5:1c:c2:64:9b:72:6e:de:dd:55:42:ba:cd:4a:c4:69:5c:3e:
f0:b8:12:35:f4:e8:c5:99:e6:de:4b:a5:97:27:b2:7c:7d:66:
27:0c:40:71:4d:4f:d0:80:6b:13:9a:f9:d6:5b:df:b4:55:d9:
7f:b3:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:16 2025 by rpki-client