Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/swmLsybdLbcs5tuDmS7uReNL0cc.roa
File: swmLsybdLbcs5tuDmS7uReNL0cc.roa (raw, json)
Hash identifier: o6pXSuvzAeVfbHwJtZP3yrmd9kI/8QZakL9tCwJfQHo=
Subject key identifier: B3:09:8B:B3:26:DD:2D:B7:2C:E6:DB:83:99:2E:EE:45:E3:4B:D1:C7
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 059F60C9
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/swmLsybdLbcs5tuDmS7uReNL0cc.roa
Signing time: Sat 01 Jan 2022 08:02:06 +0000
ROA not before: Sat 01 Jan 2022 08:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196716
IP address blocks: 91.213.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94331081 (0x59f60c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 1 08:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3098bb326dd2db72ce6db83992eee45e34bd1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:6f:e0:55:73:5a:c5:15:df:a3:8e:b8:6d:
5a:56:7e:12:64:51:2d:7e:59:13:b3:1f:5d:4b:55:
72:1e:4a:03:2d:6d:02:3b:c1:a7:75:16:f9:b0:d8:
79:ce:21:1f:11:2a:67:29:12:80:a3:75:25:e7:0c:
7f:33:8a:1e:15:39:af:6e:4d:c4:d9:09:f9:cd:cc:
8a:c0:93:3c:6b:27:13:33:30:bc:82:8c:f6:24:c2:
31:f4:1f:e9:ae:7a:52:19:f6:80:59:2d:a8:0f:7b:
24:88:89:9a:08:6c:03:fa:e8:a0:89:2b:eb:40:9e:
d4:80:09:6f:9b:ab:f4:86:c0:33:b5:e2:bc:0d:20:
c8:54:62:c0:5c:1a:a6:e7:59:80:3d:14:e4:3d:d1:
f6:12:5c:76:8c:ef:e0:06:98:67:5c:b1:fd:06:ef:
90:cb:3c:5d:2f:4f:7d:e3:2e:d0:6b:61:f4:d9:f4:
ba:e3:2a:47:24:9c:71:3c:87:33:b9:c7:0d:75:de:
30:b8:79:e8:d7:3b:a2:7b:16:7a:e0:d2:02:7a:02:
27:c4:7e:9b:31:35:11:35:1a:63:39:82:6a:1a:7d:
ed:e6:1d:2f:1e:b7:a8:45:a5:99:8c:e9:ca:19:9d:
81:bf:c1:46:21:d3:44:21:e8:02:db:00:f4:5d:d3:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:8B:B3:26:DD:2D:B7:2C:E6:DB:83:99:2E:EE:45:E3:4B:D1:C7
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/swmLsybdLbcs5tuDmS7uReNL0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.125.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9d:de:02:d6:39:7f:63:34:0a:44:b7:ca:2c:39:f4:22:70:
ee:58:2d:fc:76:05:a1:c4:ab:db:2e:b6:34:be:3a:2f:96:d1:
23:87:47:59:d5:b7:05:81:2a:7e:0f:33:93:d1:cd:d4:4f:33:
73:97:be:1f:9c:59:98:75:11:00:3a:fa:54:a1:df:45:a9:be:
87:b1:89:cb:11:bd:7e:6c:b8:c4:53:fc:fd:a1:39:5b:f7:40:
f8:09:a6:14:62:2f:35:af:30:a7:71:6c:9c:c8:98:f6:70:c9:
90:f3:64:39:66:25:11:0d:64:d8:41:80:67:4b:57:8c:74:a5:
9b:aa:2e:ff:16:74:dc:e2:2c:61:75:47:c7:0c:ca:0f:d6:38:
9b:7c:af:3d:59:fb:2c:8f:5a:18:fb:8c:1a:66:41:67:1a:52:
84:8d:17:ad:e8:7b:d4:50:41:a2:04:d9:eb:09:8b:80:b7:e0:
c9:4d:5e:6d:70:42:fe:47:3f:23:b7:c7:f5:29:28:2d:9e:4d:
52:d5:82:8c:13:5a:fc:7e:cc:e4:1e:2c:22:50:25:ca:a7:7c:
fe:d7:53:d8:a2:ec:ca:34:e6:3f:b2:2e:21:72:95:eb:e1:6d:
a4:fe:c5:92:0b:52:c8:65:07:6b:b8:20:f5:e4:63:e4:43:d6:
d0:7d:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:05 2025 by rpki-client