Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/5QIKGFBtwgQRagsh4aNRhGvHZmo.roa
File: 5QIKGFBtwgQRagsh4aNRhGvHZmo.roa (raw, json)
Hash identifier: scHgN2i/kvBkY1+hJCAuWEuoXcU1giRefZ4jMNrmbGU=
Subject key identifier: E5:02:0A:18:50:6D:C2:04:11:6A:0B:21:E1:A3:51:84:6B:C7:66:6A
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01857094EAD7ABBBB398395337C5A6B73960
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/5QIKGFBtwgQRagsh4aNRhGvHZmo.roa
Signing time: Mon 02 Jan 2023 03:44:45 +0000
ROA not before: Mon 02 Jan 2023 03:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48981
IP address blocks: 91.198.28.0/24 maxlen: 24
91.193.74.0/24 maxlen: 24
2a0f:5c40::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:ea:d7:ab:bb:b3:98:39:53:37:c5:a6:b7:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Jan 2 03:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5020a18506dc204116a0b21e1a351846bc7666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:bb:dc:86:e6:70:10:ed:1d:36:8a:ca:07:
a4:55:2a:76:2a:5d:9d:f7:53:6b:f9:4a:98:11:fe:
79:06:ff:45:cd:22:50:3b:c1:6e:e4:94:87:75:2b:
a7:51:29:d7:05:2a:2d:57:f0:ce:d4:bb:9b:42:c3:
a2:37:bf:d4:69:eb:ed:9e:df:e3:b0:40:1a:90:aa:
36:bc:67:e0:a6:29:a6:db:29:ad:77:94:94:51:f8:
12:04:d8:f3:e5:5e:8b:78:0c:9c:b8:eb:fc:7d:b2:
2e:2d:8e:ac:d5:72:34:29:bf:cb:a5:e6:0c:f2:c2:
84:90:d4:c9:b9:77:cc:77:d6:90:67:3b:c6:9a:b0:
e0:09:90:7a:d9:0a:34:d9:d4:16:23:62:58:43:30:
8f:75:eb:47:b8:2c:25:8d:96:98:b0:91:fc:af:59:
f9:85:5d:a0:a4:d5:65:c9:5a:77:e2:10:5f:bc:8f:
16:32:a8:e3:59:19:49:ae:db:5c:fa:2b:23:26:f1:
6c:eb:51:27:87:ca:22:8e:2c:d5:05:5d:c3:bf:83:
22:38:73:d2:42:36:c5:32:c3:2c:0e:68:56:b7:ef:
93:4c:2f:b9:ef:6f:c1:fa:ec:c1:de:ae:01:8a:80:
d1:3e:a5:a6:bf:ef:b4:22:eb:91:38:4a:77:41:ea:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:0A:18:50:6D:C2:04:11:6A:0B:21:E1:A3:51:84:6B:C7:66:6A
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/5QIKGFBtwgQRagsh4aNRhGvHZmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.74.0/24
91.198.28.0/24
IPv6:
2a0f:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:0d:e7:67:c2:ad:4d:4a:bc:8f:d5:46:09:d3:c1:73:37:d8:
a3:f2:3d:9d:cb:18:29:57:de:44:66:68:f4:d0:dc:e2:b9:00:
7c:7c:34:83:03:cd:08:82:28:7d:0c:77:13:d1:77:da:87:16:
51:45:bc:f4:53:61:66:48:a9:f8:d1:6c:b9:cf:d5:5c:02:d1:
ab:76:3c:1c:95:2f:73:a7:fb:59:0c:2b:cf:84:1e:5e:2e:61:
5b:78:d2:2d:be:86:89:6b:49:12:5d:3a:d5:c1:3b:8d:52:3c:
14:a7:63:98:a9:22:4b:ac:20:bb:bc:15:91:42:2d:8a:4e:0a:
78:ea:76:61:36:9e:b8:81:94:4a:ae:f2:8e:a9:12:d9:43:26:
44:1c:b3:d7:d8:3b:d7:fc:08:d6:7e:b0:97:68:15:65:fc:3b:
57:41:e0:98:8d:ca:66:b1:1c:57:34:0e:c3:58:63:2d:86:bc:
4b:f1:bc:bf:e7:26:1c:6d:c9:c0:39:5e:df:8a:09:5f:63:41:
c1:c7:af:c5:22:0a:84:57:c9:0b:02:80:a8:f2:16:8f:b2:9f:
7c:ea:76:89:31:88:b9:b4:69:a4:c2:6d:47:82:fc:6c:e3:2d:
e4:ea:8d:c7:bb:f9:e7:07:98:9c:25:d9:b9:7a:c0:de:f0:c2:
58:62:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:56 2025 by rpki-client