Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/_udbtRCHUIH22KCUx7fAK851FDE.roa
File: _udbtRCHUIH22KCUx7fAK851FDE.roa (raw, json)
Hash identifier: 3xNvSEMg6JczYTpE/B+3XkHfBFKh64s045pGledRaM0=
Subject key identifier: FE:E7:5B:B5:10:87:50:81:F6:D8:A0:94:C7:B7:C0:2B:CE:75:14:31
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 01856C013DD11D109A7E4E13FD0CD1A591FC
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/_udbtRCHUIH22KCUx7fAK851FDE.roa
Signing time: Sun 01 Jan 2023 06:24:58 +0000
ROA not before: Sun 01 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44049
IP address blocks: 91.199.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:3d:d1:1d:10:9a:7e:4e:13:fd:0c:d1:a5:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jan 1 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee75bb510875081f6d8a094c7b7c02bce751431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:5e:ad:47:13:88:db:bf:2f:ad:36:f5:5f:
8e:94:c8:04:ba:c8:37:3b:b9:be:8e:76:1f:4f:48:
a8:09:f5:2f:ac:f3:43:74:9c:54:e9:5d:fb:c2:ea:
cd:fd:6e:bb:84:54:9b:0c:73:25:e3:9f:b6:e5:3a:
7c:08:39:74:ae:b2:7e:ee:df:4d:7f:2f:a1:b6:1b:
0f:87:e7:39:7f:3d:43:93:f6:46:3c:d6:96:da:4c:
26:8a:9e:9f:1c:e1:17:75:4c:84:cb:49:37:7a:1e:
69:d0:88:5e:fa:71:82:aa:39:da:cf:28:e8:4f:bd:
11:8a:f2:cf:74:7f:73:64:42:40:be:32:26:16:85:
d4:b6:81:6c:cc:90:86:7d:c6:e8:d4:9b:9a:38:de:
71:64:4a:44:1e:19:f3:2f:56:87:e4:db:8d:2b:77:
52:9b:6d:4c:3f:0c:41:84:a9:31:42:e3:f4:3c:32:
d3:a0:dd:70:f0:37:1e:f4:e4:3e:e1:bf:75:0b:38:
8f:64:2d:a5:fe:be:86:ca:57:1b:39:e1:ed:ad:e6:
16:1c:66:b6:2a:fc:5a:92:85:5e:49:ef:76:29:4a:
82:eb:c9:3e:0c:7a:69:28:89:34:5b:70:8f:cc:42:
b4:62:73:33:86:12:e0:a2:f5:f2:e1:4b:16:60:de:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:5B:B5:10:87:50:81:F6:D8:A0:94:C7:B7:C0:2B:CE:75:14:31
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/_udbtRCHUIH22KCUx7fAK851FDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:96:2b:57:39:d7:9d:6c:3c:f9:f8:e9:8f:3a:ee:db:72:8b:
9f:e2:de:9d:a1:99:3b:27:f6:17:5f:9b:15:fa:68:cd:9a:ca:
4a:73:36:01:3c:ca:87:1f:d4:82:28:13:87:a0:45:af:65:c0:
6a:3d:1f:f8:2f:57:de:58:26:48:a5:1e:d1:fc:c6:e4:35:f7:
57:b7:b0:02:a4:d9:b1:3d:d6:64:ed:fa:07:ac:27:b7:5c:39:
9d:e7:0a:9c:fe:9d:c6:25:86:cf:2c:c1:32:c6:ca:9d:49:8e:
c8:a9:a2:06:75:c1:7f:3f:1f:c5:91:a1:7b:b8:1e:38:7a:d1:
47:71:e4:e6:f6:41:d3:1f:71:cb:b4:48:79:1e:65:7d:84:3c:
ff:59:60:cc:c7:ec:62:53:74:4d:e0:19:9a:ea:ee:7e:3d:1b:
c9:51:b9:27:ac:e1:69:fa:a7:3b:d2:ae:ab:a9:df:2d:98:23:
f0:a1:4e:30:74:13:d8:b4:e1:66:c4:05:71:99:66:07:42:83:
ec:be:15:2b:f9:0a:fb:51:40:6e:e3:98:10:25:80:c3:d1:2d:
1b:c2:cb:39:ce:71:aa:d5:c4:1c:46:07:2c:05:86:af:1c:14:
08:48:b3:f1:d7:4f:c9:82:13:0c:cb:a5:f4:4d:41:0a:da:59:
ff:51:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:31 2025 by rpki-client