Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/I-yXjayCS7AYT74tf7sL3woDMcI.roa
File: I-yXjayCS7AYT74tf7sL3woDMcI.roa (raw, json)
Hash identifier: Dzjd9JQgBuP6TF6VqTGhKZuNNH95w+ICA+LTVckcqkc=
Subject key identifier: 23:EC:97:8D:AC:82:4B:B0:18:4F:BE:2D:7F:BB:0B:DF:0A:03:31:C2
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 01877041774B9409A041D6851EC391C572CF
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/I-yXjayCS7AYT74tf7sL3woDMcI.roa
Signing time: Tue 11 Apr 2023 12:19:11 +0000
ROA not before: Tue 11 Apr 2023 12:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212151
IP address blocks: 91.213.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:41:77:4b:94:09:a0:41:d6:85:1e:c3:91:c5:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Apr 11 12:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23ec978dac824bb0184fbe2d7fbb0bdf0a0331c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:0c:79:e6:db:18:8d:1c:34:b9:8b:14:33:
ae:9b:33:77:fe:1d:8c:00:71:81:8f:34:03:6a:cd:
36:72:13:1a:36:70:a0:3e:da:5b:1b:7c:3f:79:a4:
3f:ff:d7:88:b2:6c:67:8b:b2:ed:5b:51:f1:61:91:
9d:22:9d:d4:68:06:23:75:7b:04:4b:b1:dc:e6:0a:
55:7d:2b:14:ae:fc:b4:0e:9f:88:07:c4:35:6d:d6:
7a:d1:54:c1:47:b0:73:84:dc:c2:08:48:16:2d:71:
3d:90:c2:22:4e:71:a6:d6:ae:bd:e6:2d:f2:31:37:
1e:80:fc:ab:c4:c8:27:4a:7c:49:76:d2:a2:11:f9:
16:65:34:4a:03:9a:b7:ae:ce:83:bb:c6:7f:71:ad:
9b:bd:b3:65:ca:9b:11:2f:a7:22:46:5e:ce:57:50:
30:23:dd:ca:66:1f:24:6f:b4:a4:1e:91:fe:83:f6:
25:a9:9b:d9:5e:af:7b:d8:61:7e:3d:62:b1:32:33:
ac:ad:29:c4:32:d9:e2:a5:f4:4a:e1:f4:2a:ca:ab:
84:d0:87:09:24:0e:a2:eb:3d:d0:2d:bd:a9:e1:dc:
84:df:6a:5f:c6:d8:d5:f1:42:ab:a1:bb:29:c8:2e:
a5:89:46:9e:ba:1d:9f:7c:66:17:3d:b4:60:5e:a1:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:97:8D:AC:82:4B:B0:18:4F:BE:2D:7F:BB:0B:DF:0A:03:31:C2
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/I-yXjayCS7AYT74tf7sL3woDMcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.53.0/24
Signature Algorithm: sha256WithRSAEncryption
60:40:f6:35:5e:01:7f:b9:e0:45:a6:b2:5f:81:65:f6:22:e9:
61:ce:c7:14:ed:a4:3f:2f:4a:64:d8:32:e2:cb:f9:58:41:6b:
b8:89:bd:7a:c4:e3:99:78:1d:a5:3b:9f:d5:59:6f:d9:cd:59:
64:ae:4b:27:96:2d:80:a0:ba:dd:9f:26:61:f2:9b:21:93:4b:
22:6b:e2:ce:03:db:7c:c9:d3:84:2a:8c:1d:bc:b8:da:10:5e:
23:b4:33:71:b5:28:0b:5f:c3:ba:fb:9a:5c:88:ec:1b:3d:8e:
e9:72:4e:c9:4d:30:21:f0:05:35:b8:18:f4:1e:9d:63:b6:64:
40:ed:53:22:fa:a9:d8:f4:aa:33:10:0d:85:df:05:d4:3a:bc:
bb:44:72:29:20:23:e3:47:5c:96:70:e2:16:1e:c9:a6:ef:42:
ab:37:68:2b:13:ba:16:f7:fe:a2:d3:67:b2:67:39:d8:ca:8d:
b4:99:48:59:06:27:06:2c:41:c1:6c:a3:cd:58:65:09:07:18:
f8:5a:2d:80:4c:04:07:53:12:75:4d:fd:f2:79:bf:51:a6:81:
f9:45:b0:af:1f:1d:2a:d8:9f:82:cb:ce:ac:d8:b5:f7:d6:ca:
1a:92:3b:3e:33:fc:79:da:7b:e7:31:b8:01:50:84:36:73:13:
db:9d:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:26 2025 by rpki-client