Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/kPcAiOVZEkUzp8vl2u9RUCkxwYM.roa
File: kPcAiOVZEkUzp8vl2u9RUCkxwYM.roa (raw, json)
Hash identifier: 7l9dMFaVgxm+/6c6biCf4EJqBxRYK+NGFH6qM8vO3DE=
Subject key identifier: 90:F7:00:88:E5:59:12:45:33:A7:CB:E5:DA:EF:51:50:29:31:C1:83
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 06AF7DDC
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/kPcAiOVZEkUzp8vl2u9RUCkxwYM.roa
Signing time: Fri 29 Apr 2022 14:09:26 +0000
ROA not before: Fri 29 Apr 2022 14:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204717
IP address blocks: 91.132.7.0/24 maxlen: 24
91.132.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112164316 (0x6af7ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Apr 29 14:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90f70088e559124533a7cbe5daef51502931c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:86:f7:7a:04:0b:e9:d2:23:04:8a:26:fc:
9e:f9:ec:8b:1e:da:6a:36:61:a7:38:06:ee:fb:21:
5d:95:c5:29:80:ab:d2:08:5b:96:dc:f1:88:dc:4d:
25:67:03:f3:95:cb:d5:46:2a:96:ed:de:22:5e:82:
22:cf:23:ed:0b:bb:83:fe:c6:e7:61:aa:80:ca:76:
c7:6d:a1:e4:36:2c:59:3d:43:ef:37:80:9a:5e:6a:
5e:9f:85:da:1b:fa:64:1e:32:45:d1:27:d5:19:cf:
ab:f9:18:7d:12:92:12:b5:ad:ed:4d:10:74:f5:b8:
4b:b7:56:b0:77:1e:01:f9:75:2e:24:68:df:49:9b:
38:ea:b8:11:f3:5c:70:40:50:07:21:4c:c9:2d:4d:
b5:f0:97:0f:d3:c8:af:b7:0c:b6:a8:ea:cb:e5:16:
0f:dd:ec:2c:5b:6d:3f:6d:bd:5a:b1:86:f5:71:d5:
28:43:00:47:55:5a:c8:2c:b9:60:c9:1b:7c:53:8c:
d6:22:72:6b:c7:26:bf:90:a6:a5:a4:6f:1f:df:fc:
60:cd:ea:31:7f:f6:04:c8:8f:83:65:7e:18:3e:3e:
82:5a:28:a2:ea:42:f0:f7:52:17:f8:f1:64:eb:bf:
2e:42:4d:13:6a:a7:0e:0f:00:a2:73:86:4f:1f:c3:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:00:88:E5:59:12:45:33:A7:CB:E5:DA:EF:51:50:29:31:C1:83
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/kPcAiOVZEkUzp8vl2u9RUCkxwYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:f0:c1:5b:d0:a4:c3:87:6f:c4:1f:5a:d4:8b:66:ec:2c:2a:
2b:2f:18:74:db:9b:ca:cb:48:0a:2a:e5:11:e0:05:8e:61:f7:
69:17:3c:4f:24:46:a7:2a:d8:d2:d1:01:2c:f3:57:66:3a:7d:
ff:42:30:41:56:05:3c:89:19:9b:54:34:28:b7:d0:e6:e9:04:
58:a0:3b:ba:6f:e3:12:29:f7:09:08:eb:b0:82:49:7b:b5:96:
6e:88:df:36:f9:b7:67:9f:cf:37:e2:53:c7:10:d9:f8:ff:ff:
37:c5:e8:36:5f:fd:cd:35:dd:b8:4c:21:c3:ad:72:a8:9b:1e:
a9:1c:6a:35:7d:6f:37:d9:b5:64:cc:62:74:93:98:f1:cb:54:
4a:7c:26:66:d1:cd:e4:89:10:b0:09:57:a5:c0:83:7b:ec:07:
90:7e:7b:d8:81:57:c7:b3:e3:e2:f6:cc:1b:95:84:54:47:16:
9d:3b:c3:56:ca:7c:1e:99:94:93:a1:4b:87:1b:d0:b0:3f:f8:
a5:22:cb:e5:71:ed:de:df:20:82:78:e8:35:de:d7:43:62:9f:
56:be:ac:41:be:0b:fd:1b:3a:2e:0e:40:fe:b8:16:73:3b:80:
04:d1:cc:db:25:66:4c:79:20:63:55:b9:9f:5b:34:1f:2e:fe:
93:ad:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:52 2025 by rpki-client