Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Rs1FYL-YFaEZqN0sgM9C9ZJrIiM.roa
File: Rs1FYL-YFaEZqN0sgM9C9ZJrIiM.roa (raw, json)
Hash identifier: uJyMX2o1hmDQQRcDNOt/t47656eb95Sfx0jAIWIu/Io=
Subject key identifier: 46:CD:45:60:BF:98:15:A1:19:A8:DD:2C:80:CF:42:F5:92:6B:22:23
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 018572E81D4AE7E29D33B48A9DD4723A5B8B
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Rs1FYL-YFaEZqN0sgM9C9ZJrIiM.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59990
IP address blocks: 91.246.76.0/24 maxlen: 24
91.246.78.0/24 maxlen: 24
91.246.77.0/24 maxlen: 24
91.246.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1d:4a:e7:e2:9d:33:b4:8a:9d:d4:72:3a:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46cd4560bf9815a119a8dd2c80cf42f5926b2223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:43:2e:ba:19:a6:ff:68:c0:44:82:e1:da:
1f:3d:bb:c1:9a:59:dd:44:c9:cc:fd:61:32:14:14:
d4:16:d7:23:b0:49:71:6f:69:fe:27:30:e0:93:44:
46:07:c9:56:4d:41:f7:a8:f4:c8:4f:f6:88:9d:8f:
e7:bb:7d:07:54:8f:b2:7e:bb:6f:81:cb:73:07:ee:
47:01:c4:d9:4b:6a:39:2c:08:76:e1:fc:11:29:b8:
da:21:4e:df:6e:6e:b0:47:0f:79:dc:35:05:88:be:
d5:d9:ad:85:58:db:39:f3:62:44:98:5e:80:74:92:
71:37:22:62:d7:c4:f4:cb:59:d5:f7:c5:05:f3:ed:
2e:c6:4f:a5:1c:c1:78:d5:d2:16:f7:97:09:09:3d:
26:e9:bb:08:30:a5:c4:78:ec:04:49:02:07:9a:8a:
c2:01:0e:20:d6:bf:b4:c2:c0:ce:81:ca:f4:b3:51:
5f:c4:aa:8b:9c:5e:70:61:13:a3:0b:76:4a:f8:6b:
d2:52:dd:ce:a0:c1:f6:fc:2f:18:56:e3:b9:1f:d7:
18:6b:b4:cd:36:c0:35:a0:e9:18:62:ae:0b:9d:fc:
17:bd:01:dc:9d:56:71:62:20:e3:a5:6a:1d:b8:47:
e1:88:c5:22:e7:97:92:e8:02:5d:6b:bc:20:4f:29:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:45:60:BF:98:15:A1:19:A8:DD:2C:80:CF:42:F5:92:6B:22:23
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/Rs1FYL-YFaEZqN0sgM9C9ZJrIiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:03:17:81:f8:1b:76:d1:10:e1:c6:2d:94:2b:cb:6a:f6:e9:
cf:dd:71:73:7c:6d:03:e6:2c:14:19:54:97:0f:e8:65:d0:36:
94:02:9b:32:8b:ce:8b:ec:eb:73:a3:14:fb:06:a9:0c:25:91:
37:c0:6c:9f:23:6b:1a:99:6e:0a:52:23:2f:4e:d8:02:d7:3d:
fb:d1:28:1c:9e:1a:58:03:46:a2:98:d8:1c:c3:32:9a:c9:22:
f8:ad:4e:6c:dc:3a:62:29:25:94:29:b3:c1:98:8c:7d:5a:78:
53:f6:1d:bc:e3:78:c8:78:ea:2b:d1:76:c3:1e:f6:89:8f:14:
02:cc:7b:e8:2c:dc:42:ad:4e:71:27:d8:fe:54:79:99:cb:ef:
3d:d3:3d:82:69:ba:d6:a9:70:21:fd:4f:de:3a:4f:4e:d9:70:
09:1e:83:5f:89:3b:71:64:d9:25:62:7d:e9:7d:4a:b9:6d:7e:
42:ff:4b:71:11:8f:7a:ab:25:84:9b:02:16:61:bb:43:d1:ad:
b5:0d:36:0c:0a:2d:43:01:49:3f:4d:c6:c0:85:22:2d:8c:f9:
38:01:0e:dd:75:d7:7c:c9:c1:bd:92:f7:d0:e5:b5:64:42:5b:
f5:8b:c9:10:b9:62:e4:2a:8d:9c:fd:3f:80:80:73:06:b5:ef:
f4:a4:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:00 2025 by rpki-client