Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/cPJ3axHz32QsW52w9VmGRT7991E.roa
File: cPJ3axHz32QsW52w9VmGRT7991E.roa (raw, json)
Hash identifier: 4flFiz73j/PCIcB2fXhIgoRmEzR5ANzlLniAY4Iv/gs=
Subject key identifier: 70:F2:77:6B:11:F3:DF:64:2C:5B:9D:B0:F5:59:86:45:3E:FD:F7:51
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 01853600F49B5A9B62010BD5753E3517C4EA
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/cPJ3axHz32QsW52w9VmGRT7991E.roa
Signing time: Wed 21 Dec 2022 18:45:10 +0000
ROA not before: Wed 21 Dec 2022 18:45:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35213
IP address blocks: 91.229.101.0/24 maxlen: 24
91.239.139.0/24 maxlen: 24
91.239.138.0/24 maxlen: 24
91.239.137.0/24 maxlen: 24
91.239.136.0/22 maxlen: 22
91.239.136.0/24 maxlen: 24
91.201.168.0/24 maxlen: 24
176.111.51.0/24 maxlen: 24
193.0.247.0/24 maxlen: 24
91.205.67.0/24 maxlen: 24
91.205.66.0/24 maxlen: 24
91.205.65.0/24 maxlen: 24
91.205.64.0/22 maxlen: 22
91.205.64.0/24 maxlen: 24
2a13:61c0::/29 maxlen: 29
2001:678:31c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:00:f4:9b:5a:9b:62:01:0b:d5:75:3e:35:17:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Dec 21 18:45:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70f2776b11f3df642c5b9db0f55986453efdf751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:d8:c3:4b:75:e5:ae:1c:08:f2:e4:28:32:
af:6e:4c:67:2e:0b:f0:3e:6e:f8:03:dd:48:21:09:
99:3c:78:b2:be:0b:58:9d:e5:9b:74:df:4e:b0:0d:
dc:cc:52:0b:48:9b:0c:d4:d8:ee:c2:df:63:13:93:
57:3f:03:47:03:2e:a5:f0:d5:e5:6a:52:2f:1a:00:
84:3e:38:3c:61:49:97:a7:fb:b8:78:92:c3:78:e6:
d7:be:b2:9e:68:e1:dd:a3:9e:72:3d:ee:7e:56:62:
0e:7c:0a:b9:96:f3:3b:b0:fe:e7:db:17:3e:fd:36:
db:32:d5:0d:82:b2:fe:a2:e9:0d:c8:aa:c9:4e:51:
4b:25:3e:6d:85:2c:dd:28:f5:10:40:eb:c8:99:44:
b7:93:dc:38:d2:a5:10:47:02:d3:29:9a:f9:6a:a8:
fb:26:3c:6a:96:19:fc:e9:0d:50:ed:2a:68:03:1e:
e8:91:3f:ba:49:5f:1e:b5:5c:88:6a:56:78:70:ab:
58:6d:0d:fd:19:ae:3a:d5:95:4c:13:c6:63:03:43:
5c:fb:e8:39:65:c7:82:df:78:ff:8e:db:ef:62:b3:
76:c7:85:e5:d6:8b:02:ff:b0:90:ff:eb:7f:86:b5:
50:c7:bb:7d:38:d4:d9:9e:92:cc:2d:3a:96:98:db:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:77:6B:11:F3:DF:64:2C:5B:9D:B0:F5:59:86:45:3E:FD:F7:51
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/cPJ3axHz32QsW52w9VmGRT7991E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.229.101.0/24
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
2a13:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:bb:bb:83:5c:2d:b3:02:ad:20:27:ae:8d:c7:99:3c:50:10:
62:3d:3e:23:d8:e2:04:a4:9d:9b:d7:c1:51:64:3c:fc:d5:99:
63:59:66:fd:b9:72:ce:a6:f3:c9:cc:09:a5:d3:fb:eb:d6:d6:
11:d2:8c:55:95:d3:18:69:0b:9e:97:78:8c:25:0f:62:26:85:
c0:b1:52:2e:2f:2f:44:0c:cf:d5:fc:c5:3f:6a:c9:23:ca:02:
cb:e2:f3:54:b2:ec:4a:45:46:ba:a7:d3:4a:27:f1:a6:1c:94:
7e:7e:23:5d:05:c0:a8:f4:d4:d1:e9:49:5c:c3:59:83:24:64:
ae:a3:73:77:9e:45:a7:2b:39:d0:44:75:a2:b8:ce:86:f0:de:
b8:ad:1c:37:de:23:c0:ea:55:42:f4:fb:d4:c6:81:62:a2:4d:
1a:17:b4:45:d3:be:cb:37:42:38:cd:23:09:bf:f3:b9:2e:6d:
11:c4:33:3a:0a:a7:3e:ed:c6:47:c7:70:1c:be:21:57:c3:a0:
9c:83:43:f0:5a:d6:cf:1e:84:3f:5e:8a:09:e7:fa:72:54:0a:
05:58:1f:a8:89:de:b0:c6:bf:95:57:b7:6d:98:f9:29:13:5d:
7f:ed:e5:d9:13:e9:29:14:95:8d:c0:ae:bf:c6:25:80:c0:21:
a2:3d:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:10:53 2025 by rpki-client