Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/6oJkNQYfHbo9jaW7eiOk39jU_c4.roa
File: 6oJkNQYfHbo9jaW7eiOk39jU_c4.roa (raw, json)
Hash identifier: oH9vYXfSxd+HLy9kOILT4PCRFs+zcSWGKHKqCZ0wXjw=
Subject key identifier: EA:82:64:35:06:1F:1D:BA:3D:8D:A5:BB:7A:23:A4:DF:D8:D4:FD:CE
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 018359D059F6ABD1C5B6EDA8ED64FCAE6515
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/6oJkNQYfHbo9jaW7eiOk39jU_c4.roa
Signing time: Tue 20 Sep 2022 07:32:50 +0000
ROA not before: Tue 20 Sep 2022 07:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47760
IP address blocks: 91.208.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:d0:59:f6:ab:d1:c5:b6:ed:a8:ed:64:fc:ae:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Sep 20 07:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea826435061f1dba3d8da5bb7a23a4dfd8d4fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:90:3a:c8:b8:77:06:24:48:3a:ea:3b:24:
88:72:d3:a4:2b:f7:42:94:04:4f:56:ab:c1:20:be:
b6:78:6a:93:77:4b:b0:65:3e:b7:5c:bd:c4:bb:6e:
a6:c7:86:c9:1a:3b:5e:cc:c8:18:23:fa:fc:99:4f:
7b:df:75:b6:0f:4b:74:c9:8c:9a:5d:63:40:b3:0a:
36:b4:c3:7e:e2:e2:ca:e0:35:3a:36:4d:cc:b0:81:
ee:03:39:23:25:29:a4:d2:1e:3d:5b:04:40:a9:70:
a3:d9:f3:c5:5a:cd:ec:d4:86:ac:3a:f8:32:44:64:
c1:bc:59:cb:f1:92:38:90:9f:33:1b:59:82:d4:2c:
76:3c:33:75:0d:cf:82:b4:51:89:19:c7:24:a2:2b:
be:0e:45:82:ce:a3:2a:f0:c3:e7:e5:0c:43:6a:0a:
53:20:b6:7f:e8:81:40:f2:d2:00:92:f1:4a:56:eb:
ba:8d:43:2e:20:31:33:16:09:3e:6d:9b:bf:48:5c:
19:06:8c:62:a6:3d:e5:7e:4f:76:00:27:5f:49:fd:
f5:e4:a7:38:45:c1:bf:06:54:e5:fd:ea:65:82:23:
ec:28:54:52:d7:2b:79:0c:89:77:2f:a0:bb:14:7c:
92:18:60:65:31:2f:e4:b6:6e:5c:7b:b7:3d:2f:93:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:64:35:06:1F:1D:BA:3D:8D:A5:BB:7A:23:A4:DF:D8:D4:FD:CE
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/6oJkNQYfHbo9jaW7eiOk39jU_c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.96.0/24
Signature Algorithm: sha256WithRSAEncryption
22:92:49:e3:7e:8a:65:93:ae:7a:66:1c:40:79:a1:da:6f:3a:
e6:be:0c:68:05:ed:d1:96:9f:c1:82:26:84:f9:87:4f:fe:fa:
f6:e6:ec:9d:da:9d:1b:32:60:db:8a:f1:7d:20:44:4d:ca:30:
f2:28:4b:a6:0a:62:66:10:f7:8b:2c:bc:4b:fb:7e:5d:b4:e6:
f8:23:4d:14:26:09:70:7d:5b:4a:86:77:27:98:4c:38:5a:ee:
1a:4a:d1:72:dc:a8:02:f6:0b:06:d8:89:68:50:1d:59:e4:3a:
1c:c2:de:e2:a1:8e:24:f1:f4:78:97:61:ea:bf:ff:1c:3d:c8:
6b:db:16:0b:98:61:67:59:ea:bf:f1:7c:e0:2f:77:ae:2f:70:
1c:47:32:62:7d:23:e8:cd:06:09:41:4f:fd:9c:86:08:a7:ff:
56:bd:e0:9f:62:f4:11:4c:4f:51:a1:f7:6a:88:ec:6b:c7:11:
ad:7f:ee:88:d8:00:9d:88:66:0a:a3:ff:ac:a5:91:fd:af:04:
5e:e9:11:1d:a3:f0:e5:9d:a5:55:d2:1c:12:16:a3:b9:d6:da:
0f:88:71:99:e1:c5:d8:09:9f:4b:06:54:19:1a:0c:05:fb:b7:
1b:64:89:d7:c1:5b:20:e6:09:1b:f4:dc:d8:a2:64:24:cc:21:
ea:8e:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:16:25 2025 by rpki-client