Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/3QphvmpUbKQjM2JNa9BQVEB3E1w.roa
File: 3QphvmpUbKQjM2JNa9BQVEB3E1w.roa (raw, json)
Hash identifier: yyySsm25QVe8Uh4XUPcScPLIE8RBCvwfVnmnLttHAQg=
Subject key identifier: DD:0A:61:BE:6A:54:6C:A4:23:33:62:4D:6B:D0:50:54:40:77:13:5C
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0185739F0FF3B7F4A96825D303BE2359CA45
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/3QphvmpUbKQjM2JNa9BQVEB3E1w.roa
Signing time: Mon 02 Jan 2023 17:54:42 +0000
ROA not before: Mon 02 Jan 2023 17:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51838
IP address blocks: 91.220.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:0f:f3:b7:f4:a9:68:25:d3:03:be:23:59:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Jan 2 17:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd0a61be6a546ca42333624d6bd050544077135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:23:13:37:72:fb:c3:78:67:e8:bc:ab:49:
24:c7:b5:09:28:b3:f5:07:dd:90:41:a3:1e:ee:6b:
33:ca:a8:8c:4d:c3:a4:2f:9a:34:c8:e6:66:24:76:
7b:01:ef:ca:cb:1d:31:98:2d:e6:ee:7f:5e:e5:23:
1c:9a:d0:00:01:a0:b7:54:db:33:8e:28:1e:98:2b:
64:da:47:61:4a:ac:f8:9c:e9:fc:e0:a6:ed:cf:d9:
00:34:8d:ce:17:d6:f3:cd:2f:cd:65:1c:b5:ec:8d:
a2:16:bb:0b:38:bb:9d:ac:18:2f:44:b6:ee:49:0f:
9e:b8:3b:9a:a7:94:eb:93:f0:69:bb:96:9a:10:df:
fc:e5:b6:5b:e5:eb:ee:62:da:e8:00:04:3d:cd:37:
93:59:65:c1:50:ca:07:af:e6:c6:40:e0:57:58:e3:
fa:9e:55:cd:9b:4b:26:f8:32:6a:70:5a:7a:9a:34:
5d:99:33:06:d6:cc:4a:ee:05:6b:0e:ea:49:03:78:
3a:bc:6f:6a:9e:d4:6f:f3:5a:36:ee:ac:17:f4:bd:
c2:5b:96:3d:f2:a5:55:2b:f3:12:eb:22:44:e9:59:
e1:9f:93:e9:06:5b:eb:3c:b2:81:48:87:cd:6b:a9:
29:85:f1:1e:47:7c:38:35:ca:dd:a0:2f:6c:86:50:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:61:BE:6A:54:6C:A4:23:33:62:4D:6B:D0:50:54:40:77:13:5C
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/3QphvmpUbKQjM2JNa9BQVEB3E1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:85:2e:72:e4:da:eb:92:f5:50:62:5b:87:43:fc:f4:63:5c:
e1:17:ae:4a:52:79:8a:90:80:80:4d:d5:f6:61:92:f1:38:c2:
16:4a:ab:f7:7e:77:b1:58:7a:ca:e3:f9:ae:59:f9:71:6b:50:
4c:7e:ea:71:51:1c:f3:66:27:11:e4:00:a0:7f:31:86:af:40:
d1:b9:f6:0d:0d:05:40:69:6b:e9:fa:94:00:78:0e:e0:d3:1e:
63:1d:0f:c2:59:2c:48:4f:5a:09:47:97:b9:5a:c6:cf:d6:1a:
d7:11:e9:d0:2c:d5:b4:94:88:eb:76:35:73:25:2e:47:0c:91:
22:5f:0e:25:6a:88:55:cf:18:d7:dd:1d:3c:85:73:18:78:f1:
a7:76:9d:76:e4:9d:6c:d8:64:49:d0:e6:5f:f5:99:ce:8e:59:
f3:0f:e7:7f:be:71:06:36:84:45:ea:ff:bf:fa:97:fa:38:0f:
f6:cd:9f:54:6a:c6:73:a3:bf:f0:06:5e:a6:4f:45:3b:d4:41:
de:97:21:d5:e7:4f:f7:cf:46:ee:23:69:5e:52:ad:f4:00:b0:
b9:c4:e8:6a:23:bc:37:80:eb:f8:61:05:1e:11:0b:e6:3c:b7:
55:57:53:f7:cd:7a:85:bd:66:72:7a:5a:87:89:65:8a:cb:89:
6f:0b:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:06 2025 by rpki-client