Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/e9XRF4_TVONpxgpKQI__XkkHa5Q.roa
File: e9XRF4_TVONpxgpKQI__XkkHa5Q.roa (raw, json)
Hash identifier: 4kKHSx8NE6l3++9MS58/T6qByC0vg//+uDv2Yb96zJo=
Subject key identifier: 7B:D5:D1:17:8F:D3:54:E3:69:C6:0A:4A:40:8F:FF:5E:49:07:6B:94
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0B9B3A6C
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/e9XRF4_TVONpxgpKQI__XkkHa5Q.roa
Signing time: Sat 01 Jan 2022 16:11:15 +0000
ROA not before: Sat 01 Jan 2022 16:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50321
IP address blocks: 91.238.104.0/23 maxlen: 23
91.238.105.0/24 maxlen: 24
2001:67c:1528::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194722412 (0xb9b3a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jan 1 16:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd5d1178fd354e369c60a4a408fff5e49076b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:dd:e6:01:45:af:7a:d3:80:ee:a0:a8:ab:
78:c9:58:5a:44:b4:b7:bd:26:88:b7:10:8a:a2:bf:
dc:98:7d:7b:3d:e8:45:31:a9:f8:ae:8b:27:5d:67:
92:a2:e1:78:f0:2f:d6:5e:9f:94:6f:21:18:ed:85:
bf:f3:52:f2:71:84:6b:7d:c1:05:1b:6f:05:cb:5e:
ae:e8:22:5b:69:68:95:4c:48:79:68:cf:cd:f1:a4:
3d:52:c9:73:a3:fd:5a:61:9e:ab:1d:5f:ec:68:7b:
17:d2:77:71:eb:47:7d:49:21:8c:c8:55:f1:79:b7:
56:9f:0f:2c:84:67:15:6f:1c:5a:23:e9:99:78:73:
09:61:fc:4c:f2:52:95:45:97:e0:5a:eb:3a:f6:e4:
12:84:53:68:3a:2a:1f:c1:5c:26:3c:b1:cc:9a:88:
3d:5b:11:6d:e6:59:9e:70:ec:b0:b5:1b:10:71:45:
44:65:64:cc:85:27:26:94:57:06:d3:e5:d2:9d:ab:
55:85:fe:4f:92:49:43:6a:18:ee:f8:ff:48:64:fb:
be:cd:bd:94:e8:4e:4f:f5:30:b5:47:38:10:21:d0:
05:65:0e:4e:94:39:ec:8c:e2:51:f6:cb:97:af:76:
96:13:4f:79:52:8a:b3:8e:ac:5c:b5:69:fd:17:50:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:D1:17:8F:D3:54:E3:69:C6:0A:4A:40:8F:FF:5E:49:07:6B:94
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/e9XRF4_TVONpxgpKQI__XkkHa5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.104.0/23
IPv6:
2001:67c:1528::/48
Signature Algorithm: sha256WithRSAEncryption
97:31:0c:84:ae:e6:01:4a:3e:8d:9d:28:5f:12:c3:6d:48:60:
e5:5b:5f:93:e7:84:58:5b:19:7b:14:5f:dd:04:1a:c0:37:06:
11:02:6d:eb:fa:86:c5:92:9a:45:85:65:24:de:70:25:ab:49:
85:55:75:66:6b:aa:90:50:5b:3d:ed:dd:1c:65:86:a1:d5:f2:
9a:a8:6a:a4:ca:ff:e6:b1:fb:c1:24:b6:ff:af:fe:ea:de:0a:
8f:06:6a:3e:1b:c1:fc:04:2a:9a:69:8c:13:57:a7:f7:b6:2c:
ca:21:fc:f5:e0:10:8a:5a:56:e3:d9:9d:c3:14:81:ba:23:45:
d2:24:89:fa:fb:8b:39:c6:0d:dd:5e:21:14:5b:c4:70:b1:df:
17:45:fe:fd:05:51:64:3b:16:c8:de:d1:02:a3:77:d7:86:ce:
23:ad:ce:e2:b8:0a:45:65:74:71:fa:58:7f:81:96:ca:1b:71:
88:33:6c:b8:22:8c:92:7b:c5:ba:42:5f:71:e7:0c:a6:e9:ea:
32:8e:69:4e:b4:cf:44:ff:e8:5e:28:34:ae:6c:69:04:80:05:
ee:45:f4:68:14:93:e7:b1:54:39:7a:6a:f7:ba:8c:b7:ad:df:
4c:8b:aa:0e:8b:cb:5a:cf:93:3f:04:1f:c3:07:df:ac:a0:10:
17:ee:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:09:15 2025 by rpki-client