Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/2XTOnjhxSiGZNbjT8bM20xha4kY.roa
File: 2XTOnjhxSiGZNbjT8bM20xha4kY.roa (raw, json)
Hash identifier: 1NL6waVjram96RAF8pdn7uzI0xrfLpTQzjP2R4CXmcI=
Subject key identifier: D9:74:CE:9E:38:71:4A:21:99:35:B8:D3:F1:B3:36:D3:18:5A:E2:46
Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial: 01856B533564DD1C9CD1C28FA62898814171
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/2XTOnjhxSiGZNbjT8bM20xha4kY.roa
Signing time: Sun 01 Jan 2023 03:14:53 +0000
ROA not before: Sun 01 Jan 2023 03:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50883
IP address blocks: 91.216.6.0/24 maxlen: 24
178.216.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:35:64:dd:1c:9c:d1:c2:8f:a6:28:98:81:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Validity
Not Before: Jan 1 03:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d974ce9e38714a219935b8d3f1b336d3185ae246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:21:72:ec:d8:45:29:b8:9d:c1:d0:7f:e5:
7e:8f:9f:6c:34:36:d9:5c:e1:a2:cc:ce:f3:51:26:
f9:42:9f:5e:1f:ff:32:31:59:4b:86:f4:fd:23:c9:
ad:fa:ed:5c:f8:70:5b:52:14:a7:96:d0:9e:c1:f5:
78:70:06:1c:cd:98:4a:3e:75:6e:4c:08:f7:16:2c:
3d:c2:ed:31:d5:9d:24:db:ba:76:3d:ea:75:e4:3b:
82:96:26:d5:20:c9:35:d1:09:2f:37:d9:e6:ce:b1:
04:15:72:63:80:53:74:bd:a9:f1:c7:c4:ec:b2:bb:
d4:cd:cb:14:8e:98:99:ca:82:2e:b9:1b:3d:65:56:
9c:6f:a1:c6:14:2f:bb:77:aa:a9:c6:1d:91:31:c5:
1b:40:3f:d6:3f:44:08:67:3a:80:fe:95:f9:24:ab:
6c:11:b4:90:9d:08:e9:a4:de:30:39:55:7b:b8:02:
1c:18:9b:2b:e1:7c:a2:ab:cf:45:a7:04:df:4c:d4:
94:31:f2:9f:36:3d:e1:2f:22:63:bd:90:15:5d:98:
66:c2:2d:f5:65:61:a1:9b:53:65:ac:e5:7a:33:55:
20:d1:eb:e9:59:61:e6:d8:66:e6:44:a6:a8:85:65:
b6:d8:39:3f:9f:6d:83:94:b8:69:21:98:6c:66:8e:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:CE:9E:38:71:4A:21:99:35:B8:D3:F1:B3:36:D3:18:5A:E2:46
X509v3 Authority Key Identifier:
keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/2XTOnjhxSiGZNbjT8bM20xha4kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.6.0/24
178.216.112.0/21
Signature Algorithm: sha256WithRSAEncryption
59:04:82:71:37:c5:0b:98:3a:ef:cb:d9:7d:7f:10:ce:d9:f8:
6b:44:e5:3c:73:1e:b7:69:12:cf:d0:23:71:7c:a7:ec:da:90:
2f:8c:dd:ff:70:73:d8:f4:09:3f:b6:4d:71:a4:c6:d8:32:d9:
da:72:8f:7f:8d:af:ab:6c:c9:df:90:88:4e:84:f8:e8:4d:09:
f8:92:3f:90:96:3c:86:98:15:99:50:26:f6:14:89:42:0f:06:
b8:01:e0:ce:5c:42:a8:ce:1c:da:48:5e:0f:ff:e4:99:d8:13:
05:cd:aa:6d:ec:f4:8e:04:96:cf:68:df:fe:17:96:13:ef:17:
de:08:65:b6:e7:2e:aa:d4:ff:8a:d4:e0:97:fc:6c:d1:6f:40:
c5:c2:92:6b:eb:00:e0:d8:d6:24:c5:43:f5:40:6a:f8:55:08:
97:53:97:63:95:bc:25:f2:46:14:57:be:03:13:8d:cd:dd:02:
c8:53:3e:a9:10:65:fd:ce:dd:64:b9:4e:5d:5f:3f:7b:c0:1a:
34:20:45:63:aa:a7:be:a0:c6:18:60:8d:bc:27:26:8a:61:d6:
e2:09:31:f4:9e:2b:94:38:6f:35:d9:f9:23:9b:c9:31:0c:fb:
d9:a1:f6:4e:25:a3:37:ea:f9:e3:4e:9f:bc:23:1b:23:3a:58:
a6:50:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:41 2025 by rpki-client