Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vy_xPv4AyfpH3u1Y0aMmLzIORBU.roa
File: vy_xPv4AyfpH3u1Y0aMmLzIORBU.roa (raw, json)
Hash identifier: 2xBN1qjGHAIiS3RvNZ4DZQHhuswpQoyFfMP3hmGKdII=
Subject key identifier: BF:2F:F1:3E:FE:00:C9:FA:47:DE:ED:58:D1:A3:26:2F:32:0E:44:15
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 01857082CE0786F4DD99B83091C1400E515C
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vy_xPv4AyfpH3u1Y0aMmLzIORBU.roa
Signing time: Mon 02 Jan 2023 03:24:58 +0000
ROA not before: Mon 02 Jan 2023 03:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210078
IP address blocks: 91.247.125.0/24 maxlen: 24
91.247.122.0/24 maxlen: 24
91.247.120.0/23 maxlen: 23
109.200.136.0/22 maxlen: 22
109.200.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ce:07:86:f4:dd:99:b8:30:91:c1:40:0e:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 03:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf2ff13efe00c9fa47deed58d1a3262f320e4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:73:13:e5:fb:fb:69:68:1f:9e:3f:c5:ad:
f8:47:69:ad:aa:8d:a3:0d:2c:24:2f:8b:b0:a2:18:
d1:fa:20:af:11:bb:3e:41:3d:95:82:e5:fc:13:54:
a7:75:5a:c2:7a:13:49:66:6d:30:3b:73:4d:23:23:
14:8b:33:7b:21:2c:fd:52:ce:3c:81:c2:73:67:dd:
e2:be:ae:53:8c:4f:b9:0a:0a:f6:a9:74:d6:22:bb:
32:8b:a3:7b:a1:37:1a:d4:5a:53:9b:ef:72:04:16:
40:e2:a4:5e:d7:aa:9b:d6:dc:27:a9:e0:7f:1d:f4:
92:1a:cb:96:78:8b:c8:43:20:dc:0e:fb:15:c2:20:
b2:f7:77:29:a6:1a:c0:45:5b:84:62:20:a9:a3:f2:
1e:ad:35:a8:ef:9a:d0:1c:2b:b1:96:b8:97:fd:11:
3f:0e:ef:d6:10:1b:12:3a:8b:f9:75:04:0f:24:24:
b0:78:1e:07:c1:6c:fd:99:32:9c:b9:30:23:35:7c:
df:2d:c4:07:84:a4:fc:14:7c:70:ef:ae:6b:f8:dd:
67:6b:3a:d6:a9:2c:e3:31:b6:07:d3:14:30:35:62:
64:42:00:3b:9d:f2:9d:ed:42:41:34:ec:33:e6:a9:
9c:c1:b9:63:e3:93:e9:b0:e2:ee:96:9a:eb:cf:ce:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:F1:3E:FE:00:C9:FA:47:DE:ED:58:D1:A3:26:2F:32:0E:44:15
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/vy_xPv4AyfpH3u1Y0aMmLzIORBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.120.0-91.247.122.255
91.247.125.0/24
109.200.136.0-109.200.141.255
Signature Algorithm: sha256WithRSAEncryption
37:ee:55:60:c2:56:c9:46:7c:76:4b:3e:d9:15:90:84:59:5a:
15:31:5e:2f:a9:91:a9:81:c7:2e:14:9d:bf:1c:f8:3c:58:e7:
4e:c4:3e:aa:30:2e:64:1a:41:30:30:b5:4f:e1:a3:49:00:0a:
0a:66:fd:d7:ba:1b:2d:0c:68:0e:77:5a:68:fb:19:78:1d:18:
0c:78:77:d6:22:bc:20:dd:f0:4d:f2:5a:47:ee:c1:40:07:45:
21:5a:c5:7d:24:ea:70:28:ee:ba:47:8e:32:81:fe:d3:c8:f3:
07:ac:50:66:34:10:55:50:fb:16:b7:07:84:33:75:73:73:8d:
00:f7:c9:27:c2:58:64:67:03:07:c1:02:72:22:98:2e:b1:21:
44:94:e9:0c:03:57:61:08:b2:74:84:6c:33:e4:d4:71:53:c5:
14:bf:e1:9a:2b:a6:2c:a9:b9:61:4c:a7:63:c9:0b:41:8b:c5:
6c:2e:39:a5:c4:9f:aa:96:ce:bc:a6:ac:c1:78:72:b0:a7:71:
57:77:85:19:cf:0d:1a:d8:f5:e3:d5:36:e0:26:10:9b:cc:f8:
de:2b:fb:13:29:90:cc:66:dd:60:c3:5e:a7:d1:85:11:2c:91:
d1:ad:18:45:2a:7b:3d:29:32:64:08:c2:7e:c4:5d:1e:83:b2:
60:40:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:21 2025 by rpki-client