Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/OMv7fii550bWOo15Nx-M8Scof88.roa
File: OMv7fii550bWOo15Nx-M8Scof88.roa (raw, json)
Hash identifier: JH55Cm3W5lhXsLlIcegXal9vnSl8JrxoIs/lxgVa9II=
Subject key identifier: 38:CB:FB:7E:28:B9:E7:46:D6:3A:8D:79:37:1F:8C:F1:27:28:7F:CF
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 01865B0A75A375AC8B12CD9277E2CD97C995
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/OMv7fii550bWOo15Nx-M8Scof88.roa
Signing time: Thu 16 Feb 2023 16:24:17 +0000
ROA not before: Thu 16 Feb 2023 16:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56644
IP address blocks: 91.226.24.0/24 maxlen: 24
91.226.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:0a:75:a3:75:ac:8b:12:cd:92:77:e2:cd:97:c9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Feb 16 16:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38cbfb7e28b9e746d63a8d79371f8cf127287fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:8c:fa:30:af:d1:a6:c6:a9:ec:42:56:d3:
b9:67:75:a3:c2:ca:ef:15:4d:26:c1:79:93:9d:b9:
1c:0a:b2:cb:0c:08:c0:bf:28:cd:8c:14:b1:08:63:
68:8b:ed:3e:6f:14:5e:84:a4:4d:49:8c:44:d0:c6:
24:44:18:f3:30:c3:9e:2c:dc:2f:db:4e:d0:3b:68:
ee:cd:f0:ec:21:fc:4c:dc:4f:03:00:9e:12:87:b2:
91:99:a9:ff:c3:b4:6b:6e:f1:dc:dd:64:93:6e:23:
23:13:cf:8f:e8:93:d5:2c:5b:eb:cc:d5:ff:ab:52:
b9:b0:30:20:1a:6a:23:60:d6:2e:7f:0a:ed:09:c6:
a1:3e:a0:8e:c0:bb:f2:06:89:70:b6:33:88:ad:54:
0b:c6:ee:28:b2:75:11:e7:d7:d8:a7:46:c5:f6:32:
e6:c1:34:49:4a:36:dd:e5:98:ca:66:d3:01:3c:b3:
7a:08:51:11:f6:ea:c8:26:3d:8e:a5:a8:80:f9:a6:
d1:4b:c9:0c:3f:d6:19:f1:a4:1c:be:46:26:4e:03:
07:d3:61:56:1c:5f:fd:cb:3c:95:72:4d:34:6f:d6:
78:cc:f8:3e:2c:7f:7f:5e:1e:ff:5a:21:83:41:9e:
23:c8:ae:f7:0c:77:17:ef:58:de:6f:a9:05:38:74:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:FB:7E:28:B9:E7:46:D6:3A:8D:79:37:1F:8C:F1:27:28:7F:CF
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/OMv7fii550bWOo15Nx-M8Scof88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.24.0/23
Signature Algorithm: sha256WithRSAEncryption
77:31:0b:3e:db:96:18:86:5c:f0:e1:d5:d7:3b:09:71:97:3d:
e9:da:9d:c1:dd:3c:f2:6b:8d:de:7f:4f:34:88:6b:28:52:51:
ea:cb:f7:e9:8c:3e:7e:92:be:0b:65:59:9b:1f:74:a4:66:c3:
3b:55:f7:9c:87:05:8c:03:b8:5f:6d:a1:b1:d2:57:b4:c1:99:
73:8b:f1:ce:bb:d1:9d:12:f8:b5:42:8e:be:54:6d:2d:67:13:
38:f7:8d:8d:2a:24:6a:79:a1:eb:29:f1:d0:3a:9a:9c:2f:08:
f9:c7:6e:7b:b3:dc:d2:f9:92:b9:ef:bb:49:fd:32:91:f2:a8:
cd:00:d8:bd:65:18:f9:0e:35:40:7d:c8:1a:9f:5b:1f:0f:88:
cd:64:19:66:06:13:48:85:35:f2:84:6d:5c:2c:39:fd:fd:a0:
6b:72:b0:c5:ac:4c:6d:2a:f3:69:8b:e7:b6:93:1b:1f:14:9d:
31:31:fa:d2:87:0c:96:18:d1:7a:5a:02:37:3a:70:b1:81:79:
a7:0c:2d:41:5c:13:b4:1e:2b:4d:7b:7e:08:b3:bb:c7:9a:17:
11:08:f7:23:74:24:40:58:56:9f:4f:04:8b:7e:fa:22:77:f4:
70:30:5e:36:1f:da:a7:d0:d7:4d:e0:ac:3a:58:5f:0b:d4:b5:
68:32:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:13 2025 by rpki-client