Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/2UNvUraELQebnkg3JKJ9JyPcpio.roa
File: 2UNvUraELQebnkg3JKJ9JyPcpio.roa (raw, json)
Hash identifier: IUrBO594uxi/bnekHK5ilst/IrDmrg94Sh/YtThx/L0=
Subject key identifier: D9:43:6F:52:B6:84:2D:07:9B:9E:48:37:24:A2:7D:27:23:DC:A6:2A
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01856C53A759A376E9FD0C7F4BABE9B83A59
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/2UNvUraELQebnkg3JKJ9JyPcpio.roa
Signing time: Sun 01 Jan 2023 07:54:59 +0000
ROA not before: Sun 01 Jan 2023 07:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44157
IP address blocks: 91.201.80.0/24 maxlen: 24
91.201.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a7:59:a3:76:e9:fd:0c:7f:4b:ab:e9:b8:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jan 1 07:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9436f52b6842d079b9e483724a27d2723dca62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:49:33:bb:c6:17:8c:fd:54:cd:36:5b:9b:
29:d1:7c:b0:84:d7:52:94:71:ae:f3:e7:bc:f3:71:
52:a2:49:99:54:c9:e5:3b:b1:6c:6d:93:25:87:1f:
01:c4:ff:7e:67:5b:8c:4a:ad:e9:43:59:9c:2c:74:
2b:90:5e:15:bd:8f:ef:1f:0e:8a:07:0c:06:1b:f4:
fd:30:32:ed:dd:ae:83:0f:36:00:76:60:fb:8e:65:
d5:bd:88:b1:95:99:f2:b5:b6:6d:d7:9c:d8:d9:29:
11:d4:99:ce:94:f6:c5:a6:c3:ee:16:e8:75:cf:cf:
e8:77:c4:be:12:e7:9d:37:4d:c4:2d:6f:7e:76:82:
7d:8b:ec:ea:fb:e8:df:b5:8b:f0:64:88:e0:36:46:
4e:18:74:5f:b2:6a:58:e0:6a:c3:5d:b1:7b:b0:f4:
f8:1b:11:1b:47:8c:f8:6a:70:e2:11:33:dc:ff:a9:
04:1f:a2:a1:86:37:3e:c3:50:cf:95:4c:f1:7b:dd:
f2:b0:be:b1:ca:91:f9:ad:66:93:27:e4:13:3c:51:
e5:7c:ed:62:9d:f9:e5:77:04:87:40:ae:dd:36:82:
1a:27:26:23:c3:c2:85:59:70:86:f5:ba:93:a8:7e:
45:2a:fb:c6:23:5d:72:04:03:67:59:f3:e1:1a:ea:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:43:6F:52:B6:84:2D:07:9B:9E:48:37:24:A2:7D:27:23:DC:A6:2A
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/2UNvUraELQebnkg3JKJ9JyPcpio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.80.0/23
Signature Algorithm: sha256WithRSAEncryption
50:85:80:68:ae:20:81:3e:be:c8:9d:62:59:35:b7:bc:d0:91:
50:5c:d1:15:91:a9:8d:51:dc:62:84:f5:1a:ad:c1:b9:83:4b:
de:ca:49:c5:e2:ef:09:7f:3f:0b:c6:9d:52:ff:9f:80:35:88:
79:fa:d6:e3:89:da:58:65:e8:85:f0:c9:33:2c:e1:09:50:0f:
76:da:65:87:32:04:44:6a:0d:8d:85:b5:39:d4:98:d5:7b:3f:
bc:8e:bb:6f:74:55:7a:85:2a:da:99:9c:eb:de:bd:94:40:4f:
4c:b9:02:5f:1b:18:89:96:9d:82:55:c3:46:07:77:69:99:03:
0e:fd:6a:61:b5:e9:0f:5a:4f:6e:e3:b5:c4:12:50:af:23:fa:
13:03:07:a0:10:35:90:4d:fd:e7:bb:e5:61:a4:88:c7:b2:9a:
fd:93:5e:93:a6:34:1d:69:92:9a:b5:1b:38:4e:0d:da:42:81:
ad:bd:92:9e:6b:60:93:d3:ff:95:54:66:83:fa:6b:5e:72:d9:
51:c6:dd:34:2a:0b:65:bf:88:4b:0c:31:e0:97:c6:eb:0b:46:
f7:f1:2e:27:5c:64:5d:01:12:d0:87:a1:6d:e1:ce:7c:dd:86:
31:f4:ba:43:45:a7:43:20:d5:0c:92:3e:7c:5a:b4:eb:54:c4:
05:43:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:23 2025 by rpki-client