Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/68qQXg3vicLVxSNGS7m_dExKsxU.roa
File: 68qQXg3vicLVxSNGS7m_dExKsxU.roa (raw, json)
Hash identifier: A+CJaJYWBJEOrVG0fzho9km1E93Gkl++Qj+MZPuB2a4=
Subject key identifier: EB:CA:90:5E:0D:EF:89:C2:D5:C5:23:46:4B:B9:BF:74:4C:4A:B3:15
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 018573560382542C7F1128AE8A55BAAF7C4B
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/68qQXg3vicLVxSNGS7m_dExKsxU.roa
Signing time: Mon 02 Jan 2023 16:34:54 +0000
ROA not before: Mon 02 Jan 2023 16:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59747
IP address blocks: 91.207.230.0/24 maxlen: 24
91.207.231.0/24 maxlen: 24
2a02:38:1111::/48 maxlen: 48
2a02:39::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:03:82:54:2c:7f:11:28:ae:8a:55:ba:af:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Jan 2 16:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebca905e0def89c2d5c523464bb9bf744c4ab315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:3a:11:77:0b:0c:05:68:c7:d4:38:9b:da:
2f:82:f3:15:ac:e7:30:2c:97:52:d7:df:94:7f:8f:
67:74:57:74:a4:ff:01:99:e7:56:17:b0:3e:1d:37:
33:1f:86:d0:8a:09:08:47:d4:6f:0f:17:af:fe:fb:
4c:74:27:56:fb:05:67:3b:3f:53:cd:48:8b:d6:10:
74:e3:d2:28:77:28:4d:b3:9e:fb:9b:8d:9b:7d:35:
90:6a:7c:26:87:dc:4b:5f:ae:22:1c:71:1e:fe:f7:
92:69:55:d5:ae:d6:2b:68:77:e2:7b:51:fe:06:27:
26:36:fa:8b:11:92:7b:e1:34:5e:95:2a:ae:33:05:
4c:5f:63:68:21:13:d6:dc:66:a0:44:f0:22:61:04:
40:0a:74:b5:a8:d2:3f:e1:7f:9b:b2:08:b7:72:f2:
26:9b:fb:bd:ad:dc:d4:6f:7b:fa:1f:2b:a4:b9:13:
b7:59:cd:89:b8:e8:7c:0b:37:cb:20:40:9e:75:c6:
7b:d6:c7:35:c9:a3:aa:0e:4d:32:3d:08:94:43:c5:
03:32:0d:10:26:5c:e2:3e:18:57:15:47:c2:62:86:
66:26:2e:55:b0:88:c9:66:67:14:e8:7f:2b:4d:d6:
0e:52:dd:b6:61:14:95:5d:44:39:1a:54:7c:93:34:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CA:90:5E:0D:EF:89:C2:D5:C5:23:46:4B:B9:BF:74:4C:4A:B3:15
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/68qQXg3vicLVxSNGS7m_dExKsxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.230.0/23
IPv6:
2a02:38:1111::/48
2a02:39::/32
Signature Algorithm: sha256WithRSAEncryption
35:6a:eb:3e:b6:14:c9:b7:6d:b3:05:10:8d:d9:99:68:ef:78:
0c:a7:a1:45:dc:c7:70:f8:67:14:fe:41:fc:b4:4f:96:48:ae:
0e:4b:53:95:4a:41:f4:07:44:04:8e:2a:bc:5e:4c:78:7f:64:
9a:d0:48:03:4c:17:3d:d9:84:0d:e9:d6:f3:52:bd:4e:87:59:
30:5d:ac:1c:13:63:58:23:26:d8:5f:b1:1c:69:c2:50:ef:de:
89:4f:77:24:46:ae:07:3e:7f:d2:60:a3:ed:79:b2:cd:4d:49:
a4:a8:97:3f:88:6a:1e:1f:ce:07:02:09:fb:28:39:f9:83:a0:
6f:e4:99:78:2e:ed:9b:85:a1:9c:77:bf:a3:3d:74:ca:75:3c:
03:53:e0:0f:06:f3:19:65:9e:96:10:70:e6:fd:17:7d:b5:9c:
6d:48:ac:06:73:14:70:bb:00:a6:c5:7e:68:13:2b:f1:f1:c4:
08:e7:81:c5:02:85:0f:a7:5a:99:f9:74:c1:6d:cf:78:49:11:
ff:cd:21:63:51:eb:6e:2c:b8:c8:47:96:2e:e0:61:dd:42:a1:
8a:a8:28:8b:4d:7d:65:f8:c5:6d:b7:85:eb:91:a1:a4:b3:bc:
33:32:ab:c1:d2:13:a0:57:09:00:83:91:e1:c9:ef:f3:51:5d:
07:28:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:24:59 2025 by rpki-client