Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/z3ciOlys5w2dSie2zGJJW_IK19w.roa
File: z3ciOlys5w2dSie2zGJJW_IK19w.roa (raw, json)
Hash identifier: ljiYIHmjzg5JERu5KKFCwPHiOgLxUsj7/A4NliKtZ9E=
Subject key identifier: CF:77:22:3A:5C:AC:E7:0D:9D:4A:27:B6:CC:62:49:5B:F2:0A:D7:DC
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 01856E1449F5EA5C09C181A8FEDB642DE086
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/z3ciOlys5w2dSie2zGJJW_IK19w.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198882
IP address blocks: 91.240.35.0/24 maxlen: 24
2001:67c:29d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:49:f5:ea:5c:09:c1:81:a8:fe:db:64:2d:e0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf77223a5cace70d9d4a27b6cc62495bf20ad7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:ee:3f:e0:73:c0:c4:46:e0:aa:64:67:a7:
b5:c2:34:9d:cf:a1:29:38:19:b3:3a:5e:e7:a4:85:
04:b0:53:ec:86:58:24:5c:2c:6d:fc:06:37:41:50:
64:9c:cd:75:fb:aa:96:41:1c:86:d8:01:09:f1:1d:
ad:0b:d1:23:79:d8:72:c2:5c:50:54:26:15:cf:c3:
32:13:40:25:be:d8:fd:c7:ff:7f:ba:41:c4:9f:e0:
12:63:bb:14:30:71:b7:25:4f:84:f4:5f:3c:44:3d:
31:c5:cd:a8:aa:63:96:d2:c3:ca:00:0f:20:93:73:
b4:1b:bd:d3:64:cd:01:31:18:5a:57:75:13:c7:eb:
7e:b5:5a:f3:97:57:74:be:10:83:c3:76:58:d0:c9:
b6:d6:12:78:3e:9d:56:25:ba:78:66:f1:8f:b9:c1:
85:7c:61:f7:8d:16:4c:0e:1c:5e:fc:51:a4:b1:57:
1c:1f:7a:ef:f7:84:38:57:ba:f5:ec:03:ab:79:ab:
16:44:ab:5c:60:94:bd:85:44:10:57:3b:b2:dc:54:
d4:ef:04:6f:ad:06:c9:89:00:8d:03:5a:52:c4:82:
f6:21:b8:cd:c1:e7:e8:1e:9d:ce:de:d3:fd:aa:9f:
75:a1:72:12:b0:68:90:a3:7d:aa:9c:d6:07:5b:9f:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:22:3A:5C:AC:E7:0D:9D:4A:27:B6:CC:62:49:5B:F2:0A:D7:DC
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/z3ciOlys5w2dSie2zGJJW_IK19w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.35.0/24
IPv6:
2001:67c:29d0::/48
Signature Algorithm: sha256WithRSAEncryption
53:a7:33:52:3a:7c:31:e0:73:6b:90:df:0e:73:2c:b7:c0:bf:
f0:48:5c:fe:fc:3f:6c:82:f3:73:99:6d:49:eb:6d:b4:44:39:
97:71:c2:ee:3a:72:c6:28:c2:2f:68:4b:2e:a1:da:df:83:f0:
64:99:e5:47:f5:fc:fc:96:62:a3:13:f0:9f:fb:cd:de:57:61:
ae:d1:dc:4a:ee:e0:3e:49:2d:e7:3c:3d:53:ba:c6:f7:ef:81:
d4:94:58:65:f2:5b:da:16:bf:3d:dc:4c:fa:ed:d4:53:a1:1c:
5c:99:42:00:d8:a8:e6:28:ae:8a:34:20:b2:95:d5:eb:e5:d3:
1e:52:90:6d:4e:e5:ac:c5:c2:a1:18:5d:fc:07:3d:b2:28:6b:
72:7e:d7:b2:39:5e:75:b2:8e:5e:fd:5f:80:98:a0:f8:b7:a9:
2e:51:e4:9a:da:d6:53:65:61:8e:55:d5:e4:0c:3a:8e:62:7b:
71:4d:62:0a:9f:ad:b7:fc:52:2f:0f:92:1f:a3:7a:84:7c:19:
c3:83:91:97:5f:9c:5b:c3:9c:48:6f:8b:8c:e1:f3:cd:62:1e:
00:0d:5e:36:81:20:08:a4:0b:2b:78:7f:8b:d0:7c:61:d0:c2:
52:0b:ba:5b:17:13:45:40:02:8a:9d:1f:2c:d7:04:c5:1f:a8:
3f:b1:d1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:00 2025 by rpki-client