Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/kIk3YO8-umiTsWyAFgyXx9u8ULA.roa
File: kIk3YO8-umiTsWyAFgyXx9u8ULA.roa (raw, json)
Hash identifier: vKcepZ2/b7wzbn93Uyi1DcpG7zvIXiH5FwHtyrDrY1Q=
Subject key identifier: 90:89:37:60:EF:3E:BA:68:93:B1:6C:80:16:0C:97:C7:DB:BC:50:B0
Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial: 01857227E26B56708204243212471E47ECB6
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/kIk3YO8-umiTsWyAFgyXx9u8ULA.roa
Signing time: Mon 02 Jan 2023 11:04:54 +0000
ROA not before: Mon 02 Jan 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198670
IP address blocks: 91.237.252.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e2:6b:56:70:82:04:24:32:12:47:1e:47:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
Validity
Not Before: Jan 2 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90893760ef3eba6893b16c80160c97c7dbbc50b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:d7:7a:06:4a:2b:94:98:93:ac:e4:35:52:
74:b3:c7:16:46:ca:53:7b:b3:c6:b9:51:82:5c:61:
ae:4b:7a:45:8d:f0:21:8d:77:4d:c1:69:d8:95:1b:
06:3f:b3:2d:8f:34:6e:c6:63:c0:40:f5:57:d2:87:
92:c0:35:ab:77:75:f3:00:d8:6f:49:73:d3:c5:82:
7d:b6:03:3a:06:ac:8e:e2:10:c6:1c:a5:09:70:6a:
8b:e6:59:02:8a:59:b1:c8:49:78:fd:21:fb:f3:7c:
0c:47:44:97:0d:72:c7:2c:9d:6f:5b:07:5b:8d:12:
af:92:73:2b:8c:ff:dc:94:1a:a3:9a:9d:42:e4:13:
51:3e:06:16:c2:91:77:32:3f:18:ee:e1:a6:b7:23:
b7:88:27:3b:77:a6:aa:a1:0b:57:3f:82:ba:d7:31:
5a:f0:39:04:ea:9f:29:79:30:14:30:52:d9:ea:46:
02:6d:f7:c7:08:b6:96:02:7e:a7:6d:65:cc:73:f6:
1b:14:e7:6d:ed:39:ef:8b:98:df:f2:55:6b:09:8a:
47:d0:18:58:3c:e0:6d:71:4a:ea:3f:c0:96:05:45:
a3:ba:79:a7:be:ee:ac:e5:8b:11:11:8a:0c:a2:d3:
f5:46:59:8c:31:41:69:46:08:a1:28:56:c6:4d:f5:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:37:60:EF:3E:BA:68:93:B1:6C:80:16:0C:97:C7:DB:BC:50:B0
X509v3 Authority Key Identifier:
keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/kIk3YO8-umiTsWyAFgyXx9u8ULA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.252.0/23
Signature Algorithm: sha256WithRSAEncryption
01:86:e3:69:4f:8d:48:41:86:94:71:66:1b:b5:fb:62:e4:a1:
fd:c0:1c:6e:82:1e:15:f9:8e:cd:98:51:1e:f3:cc:c5:91:6a:
51:18:2d:ee:ba:21:de:5b:c8:85:41:e3:f9:64:5d:03:bf:69:
db:f8:4a:fd:05:86:0f:a8:d2:0d:a6:64:b5:f7:ed:2b:d2:df:
90:cc:74:ba:1f:3c:50:4f:1c:e5:9d:18:73:6d:6f:22:85:a3:
83:ba:e7:2e:a5:12:73:12:5a:63:09:bb:04:29:54:93:c9:2e:
4b:27:20:7d:38:0f:91:35:51:c3:2f:b9:31:5b:f6:65:2e:81:
74:fe:26:57:7e:ff:50:24:6a:65:6b:31:e1:5a:80:49:f6:c9:
d0:9c:37:43:32:bb:a9:2e:60:aa:46:c9:f0:a5:1e:d2:28:e3:
3d:e9:bb:49:b7:e4:f6:c4:a1:2e:90:6a:b0:5c:66:c9:4c:61:
d3:b8:2a:7a:40:fd:26:43:93:f7:57:e1:c6:fc:1c:c6:fe:c8:
ae:e8:24:80:9e:3a:6d:76:01:c6:94:7b:0d:c8:11:1f:63:df:
5b:62:17:b6:f1:38:61:81:ef:21:fc:2a:28:7c:96:4c:4d:ec:
d1:ce:4e:0f:fd:b9:29:56:9b:cc:58:c3:3b:58:51:99:07:3f:
73:eb:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:17 2025 by rpki-client