Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/RaDppMjXWXZ9_8j8FwZYOACugQQ.roa
File: RaDppMjXWXZ9_8j8FwZYOACugQQ.roa (raw, json)
Hash identifier: qb/CXkBfjVIENPfEnpg3AMk+JQuj3ZYsgnQ38joD0i4=
Subject key identifier: 45:A0:E9:A4:C8:D7:59:76:7D:FF:C8:FC:17:06:58:38:00:AE:81:04
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 01856F948E411C0E28884E30347D95D2F9D1
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/RaDppMjXWXZ9_8j8FwZYOACugQQ.roa
Signing time: Sun 01 Jan 2023 23:04:44 +0000
ROA not before: Sun 01 Jan 2023 23:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43947
IP address blocks: 91.198.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:8e:41:1c:0e:28:88:4e:30:34:7d:95:d2:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Jan 1 23:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a0e9a4c8d759767dffc8fc1706583800ae8104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:84:fe:99:5a:9e:63:9f:35:cf:3a:19:0a:
58:e4:43:bc:60:f3:49:f2:1e:0b:01:4c:c8:36:70:
d4:db:4c:d4:66:99:05:f0:3b:d6:48:13:15:ed:0e:
c9:91:a8:88:8d:4e:47:50:47:81:3c:8d:58:a9:fd:
b2:73:5e:21:ab:df:1d:23:88:d5:7c:65:a0:f0:a9:
e5:cb:31:19:27:0d:09:46:3f:e4:e0:2e:2a:a7:d5:
e1:77:be:5f:05:64:07:2d:e9:dd:c5:11:74:b3:91:
09:5c:9d:95:2f:0d:80:da:af:4b:20:e4:c9:48:32:
87:5a:83:59:39:f9:f3:b9:23:08:4b:87:02:12:52:
46:47:e4:3d:97:10:45:ff:01:35:bb:43:7a:7f:04:
2d:73:59:56:29:34:88:9c:8d:60:25:88:5c:e7:90:
36:3b:0d:e4:49:01:4e:08:14:25:84:2f:ca:f9:18:
2f:95:d5:11:38:8c:1f:ae:49:ab:92:62:ea:58:39:
e2:93:2e:10:22:bc:21:08:55:1b:b7:03:84:b9:a4:
32:c5:a2:87:9b:af:e2:11:23:2f:21:67:44:9f:9b:
ef:88:f3:a8:b0:56:8b:61:ba:33:1e:45:c1:6a:d5:
3f:9f:6b:3d:02:81:14:33:8a:9f:b0:00:2a:31:83:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:E9:A4:C8:D7:59:76:7D:FF:C8:FC:17:06:58:38:00:AE:81:04
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/RaDppMjXWXZ9_8j8FwZYOACugQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:60:da:02:b8:f2:f1:5f:3d:4e:f6:e1:a1:96:84:35:3a:7b:
0d:06:ff:17:fc:01:a8:8c:c0:39:d5:da:66:e4:f5:db:4e:45:
fb:ba:ce:62:89:51:d8:4e:32:38:6a:11:e9:5c:b9:61:b2:99:
76:51:1e:25:ab:78:57:88:9b:02:af:2a:ce:68:9f:ca:6a:90:
8e:ee:69:75:35:c5:1b:80:99:72:3d:37:92:14:74:33:1e:4c:
4d:fa:06:3d:82:16:83:30:d6:58:ab:d5:b8:d2:40:c5:e6:48:
56:73:c6:54:88:f6:2f:a7:2e:9f:9b:6c:27:03:03:a3:65:a4:
ab:b8:8d:d4:e0:c4:fe:8d:3a:12:3f:80:4b:3d:1c:54:a9:37:
58:fe:30:30:aa:2e:10:32:70:87:02:da:16:2a:cf:9c:83:9d:
5a:df:0f:73:c9:e5:bc:04:08:c8:f7:d3:0a:7f:e3:6c:48:33:
2f:77:c0:ba:5b:c9:75:db:ec:8a:92:f7:3a:14:a3:60:08:c5:
5d:cf:bb:4c:8e:c5:cc:c1:b2:90:41:63:92:a2:af:00:2b:51:
2f:c3:7e:7c:1b:a9:32:af:13:d3:6b:73:e8:91:24:fa:4f:67:
29:80:06:f2:34:81:9e:9e:8b:8b:f4:4b:ad:cf:a8:53:21:db:
0c:6f:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:46 2025 by rpki-client