Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/j-znJqW4r0HX0tnMPcugJY2uYhQ.roa
File: j-znJqW4r0HX0tnMPcugJY2uYhQ.roa (raw, json)
Hash identifier: gIcYvt7EIsHLvLy6crGvi9ivqqoBevWBAvM5d92j6UQ=
Subject key identifier: 8F:EC:E7:26:A5:B8:AF:41:D7:D2:D9:CC:3D:CB:A0:25:8D:AE:62:14
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0185707050BA76C43AEC4101595D088AED01
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/j-znJqW4r0HX0tnMPcugJY2uYhQ.roa
Signing time: Mon 02 Jan 2023 03:04:46 +0000
ROA not before: Mon 02 Jan 2023 03:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48167
IP address blocks: 91.209.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:50:ba:76:c4:3a:ec:41:01:59:5d:08:8a:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Jan 2 03:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fece726a5b8af41d7d2d9cc3dcba0258dae6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:8a:4b:df:ea:cb:d0:83:f2:fb:19:8d:19:
09:83:f5:f3:64:ab:d2:2d:34:1a:20:9d:d0:86:22:
d9:43:97:2b:92:0a:cc:8d:59:ac:97:c4:42:56:d8:
6b:36:57:64:c9:bf:b0:1d:ec:4f:af:47:db:db:29:
a1:4d:e9:d7:30:0a:0c:5d:1f:9a:47:32:90:74:11:
9e:4f:4b:63:b1:75:a4:1c:0d:8d:b0:1c:56:4f:6e:
7e:3e:75:16:92:25:1d:19:4b:84:05:89:3e:8a:2c:
38:1f:b9:e5:51:fd:dc:7e:e1:be:ec:f9:26:fd:4b:
ce:4d:5c:b7:20:a5:15:c9:7d:c7:5e:d9:4a:60:eb:
64:83:70:e4:f5:8f:76:91:ae:f8:69:4c:1b:83:d7:
e4:56:21:18:03:b5:a0:b9:a7:9e:d4:00:07:a5:4e:
06:5e:53:d9:15:d0:d8:ab:67:6d:af:dc:e0:ba:ac:
70:87:15:d0:c6:39:11:79:cf:12:9a:8a:06:36:3c:
71:c9:bf:dc:fe:67:55:47:3a:d3:56:2a:58:7d:b5:
35:0c:e4:bd:fc:20:54:a9:10:0e:73:1a:4d:60:d6:
1e:be:fb:82:8c:8d:cb:36:68:29:ad:80:f2:b9:af:
bd:17:53:14:eb:f8:8c:18:3d:e9:3a:28:a5:e6:68:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:E7:26:A5:B8:AF:41:D7:D2:D9:CC:3D:CB:A0:25:8D:AE:62:14
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/j-znJqW4r0HX0tnMPcugJY2uYhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ee:08:5c:c8:14:93:84:81:e1:55:3b:8a:e3:df:69:ca:61:
8c:0f:74:9a:9d:f5:db:ff:5d:a6:88:7d:7e:2c:86:bc:7e:93:
eb:82:c8:5e:e8:ca:76:e0:f4:18:59:f4:74:15:e7:e3:3d:0d:
c7:43:ff:16:2f:0d:bc:0f:1e:f0:51:16:a3:13:d5:67:97:69:
dc:f9:f5:f5:e6:db:1e:b6:3f:9f:3a:6c:d2:cb:c1:76:f6:8c:
15:6e:80:53:fb:24:da:37:e7:85:ee:27:a4:36:9e:00:2b:b4:
69:22:36:ee:47:ce:16:c5:46:86:5f:5d:56:64:4b:5f:a5:5b:
16:50:e0:cc:c2:3a:bb:0d:53:9c:92:d8:77:f8:c3:5f:e6:c2:
2c:d4:39:bb:72:cd:69:fd:98:19:f5:e9:29:1f:e1:eb:3a:bd:
4b:3f:db:51:8c:f3:31:c6:fa:55:87:c3:70:23:be:6d:82:d8:
5a:ee:e3:30:a0:58:aa:70:43:f5:4a:f9:fc:15:6a:d6:d9:4e:
12:ce:b6:5c:85:ab:4e:72:e5:c6:62:e7:3f:38:c8:4a:43:d6:
54:f3:f8:98:a9:38:ca:15:2e:49:2f:0a:87:2f:fe:d3:0f:e6:
c3:0b:9b:7d:1a:4d:64:d6:4d:c9:88:63:03:c0:52:1f:d3:17:
75:46:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:25 2025 by rpki-client