Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pP7emdM2-5fFjZD3oqU7xApmTmM.roa
File: pP7emdM2-5fFjZD3oqU7xApmTmM.roa (raw, json)
Hash identifier: 38Q3ZTahPndbfgYovri3yaBRDwQ1NizPjhIF7c/quwU=
Subject key identifier: A4:FE:DE:99:D3:36:FB:97:C5:8D:90:F7:A2:A5:3B:C4:0A:66:4E:63
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0186F911EDF5165A822AC89BBCC1D5C3EA7E
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pP7emdM2-5fFjZD3oqU7xApmTmM.roa
Signing time: Sun 19 Mar 2023 08:52:27 +0000
ROA not before: Sun 19 Mar 2023 08:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.207.0.0/24 maxlen: 24
91.206.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:11:ed:f5:16:5a:82:2a:c8:9b:bc:c1:d5:c3:ea:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Mar 19 08:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4fede99d336fb97c58d90f7a2a53bc40a664e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:69:2a:c3:e8:28:bb:8c:c7:56:55:0c:7f:
12:0f:a6:3c:95:59:69:c9:a3:d0:62:71:3c:d0:e4:
99:a5:68:76:00:fd:11:fb:cd:9a:c9:f9:ef:97:c0:
47:06:06:55:41:f2:4a:b4:80:de:89:5a:0e:f5:93:
89:96:af:f0:69:bf:b7:f9:31:b4:a1:91:32:c4:6d:
8a:33:a0:65:cb:82:2b:a7:66:20:63:82:9f:a8:b0:
53:ad:52:c1:cb:17:44:e8:98:fb:2b:86:03:cc:59:
36:9b:46:73:a5:2d:a9:71:f9:49:cd:93:9d:69:fd:
e2:90:17:76:cc:13:36:98:37:01:30:f7:aa:99:31:
bf:58:4d:d8:c9:41:34:11:ec:17:22:2f:94:2e:90:
78:51:a6:ad:73:f9:b3:88:11:c0:78:c6:2a:70:8d:
41:2f:ee:df:da:c3:35:c1:1b:19:7b:a2:e8:bc:7f:
b3:cd:ee:a7:46:2d:e5:b4:cc:07:09:37:53:5a:94:
e2:33:44:86:4f:f3:c0:f3:a5:d3:6e:7a:f6:b7:d5:
e0:18:4f:a3:c8:5c:80:9b:6d:de:4f:24:7e:cc:4a:
c6:0d:73:7f:eb:76:d3:44:8c:b1:8b:9c:97:32:d5:
6d:71:b6:53:3f:22:a3:65:59:58:25:bb:e7:47:2a:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:DE:99:D3:36:FB:97:C5:8D:90:F7:A2:A5:3B:C4:0A:66:4E:63
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/pP7emdM2-5fFjZD3oqU7xApmTmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.209.0/24
91.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ba:74:7e:7e:a1:78:a4:fd:a1:7e:1d:67:09:30:31:65:16:
b2:c8:fe:dc:5d:07:a1:4d:cf:ab:92:51:df:aa:08:9b:a1:22:
1e:b3:fc:8a:3a:a9:37:c6:ef:2c:58:a7:b5:3c:c4:83:bc:2d:
d0:3b:a4:e4:95:08:b0:d6:e6:ef:4a:2c:43:a2:25:ff:cd:43:
97:ef:f1:fb:8a:be:37:64:76:6d:c2:9f:b4:fe:9c:d3:58:56:
f6:33:2d:60:31:8a:10:76:e5:96:4d:74:c3:ff:2c:86:fd:18:
5a:e7:91:7b:32:08:bd:f6:f2:3a:f3:f6:ea:89:a8:d9:5c:89:
b3:e5:71:f9:27:4b:f6:62:31:4b:2c:38:b5:a5:a9:e2:81:3e:
8e:5a:91:6e:bb:8e:e7:d0:83:24:c7:11:d7:17:69:6d:7e:b8:
0f:7f:fa:16:cf:51:a0:f7:7b:b3:2d:62:41:35:e4:47:51:3b:
f6:07:af:2d:64:03:c1:33:6b:af:b3:a5:aa:13:ed:c5:27:49:
66:12:e9:ab:d9:08:51:0d:e0:79:ff:7a:6c:d0:2b:7f:7b:39:
1c:c4:4e:ef:36:e1:5a:48:f4:78:30:7f:e5:1d:28:31:84:42:
7d:2c:63:c8:fe:f1:51:68:92:10:46:de:09:63:9e:1f:32:33:
b1:32:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:21 2025 by rpki-client