Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/5PcQqXXBlGo5kzT4HSatwmsvbG8.roa
File: 5PcQqXXBlGo5kzT4HSatwmsvbG8.roa (raw, json)
Hash identifier: TbXtBITIkssH+SHpNgwwSTBcpsuguSskSt+v8jFMlUI=
Subject key identifier: E4:F7:10:A9:75:C1:94:6A:39:93:34:F8:1D:26:AD:C2:6B:2F:6C:6F
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01850CEACF6233F7C5F912FF5532D4779105
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/5PcQqXXBlGo5kzT4HSatwmsvbG8.roa
Signing time: Tue 13 Dec 2022 19:16:33 +0000
ROA not before: Tue 13 Dec 2022 19:16:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197444
IP address blocks: 91.217.52.0/23 maxlen: 23
91.221.148.0/23 maxlen: 23
2001:67c:2038::/48 maxlen: 48
2a13:50c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:ea:cf:62:33:f7:c5:f9:12:ff:55:32:d4:77:91:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Dec 13 19:16:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4f710a975c1946a399334f81d26adc26b2f6c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:05:9d:89:73:af:81:d1:c6:0b:e0:33:f4:
ec:ad:06:34:7f:06:89:8c:d1:7f:30:b9:58:5c:0e:
3e:77:c7:1f:4d:17:09:ac:52:b6:72:91:75:a2:b0:
de:ee:2e:6b:d9:98:0c:5d:4f:eb:22:91:bf:e1:c6:
ad:5b:46:aa:83:97:4a:de:72:de:d4:98:db:00:15:
d6:5d:90:20:f0:3f:a4:d3:42:63:9a:32:b0:3d:49:
a8:60:1a:42:d6:a6:50:64:52:bd:65:a6:4a:0d:ed:
20:00:66:13:0f:3b:9d:5b:42:4b:9d:b4:35:aa:a4:
dc:1c:c5:89:2e:c1:4b:8a:63:55:c4:3d:f6:d8:80:
be:c4:cd:d5:15:6d:1c:7b:9b:3d:54:6b:93:98:b0:
c2:22:a3:7c:78:ab:87:8f:06:e9:7b:b2:54:1b:77:
c4:24:85:bf:70:63:83:3c:29:79:de:13:03:a3:77:
5f:0d:6a:31:ef:43:46:10:95:0c:52:4d:e5:e4:62:
cb:5a:22:fd:d3:41:b4:23:b2:26:f9:a6:22:09:8e:
c4:2b:fc:8f:d9:f7:c4:f6:a8:82:72:87:bf:c2:39:
15:40:11:39:34:4a:e4:07:37:e1:fa:07:3a:12:d7:
42:63:51:c8:d3:59:c2:ec:14:28:bd:e4:13:18:23:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:10:A9:75:C1:94:6A:39:93:34:F8:1D:26:AD:C2:6B:2F:6C:6F
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/5PcQqXXBlGo5kzT4HSatwmsvbG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.52.0/23
91.221.148.0/23
IPv6:
2001:67c:2038::/48
2a13:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:25:a8:53:0b:ba:36:1e:e6:48:96:6c:32:2d:e8:bf:83:30:
d8:1f:36:fe:76:cb:63:27:56:e1:e9:7c:18:fb:27:b1:5d:a6:
64:f8:0c:a9:6d:d7:81:c6:3c:46:69:92:b6:4e:4b:c6:88:63:
12:87:ae:41:89:9e:65:ef:88:6c:8c:59:14:ae:00:09:45:0a:
92:8a:b8:25:a6:f9:11:46:38:20:e7:d3:69:c3:84:ef:27:b6:
f8:bd:72:be:97:0a:ca:1c:a2:85:35:6c:52:04:64:1f:c2:1b:
05:8d:f5:f4:ef:47:51:83:80:07:eb:7f:7f:9d:2c:21:7d:9b:
bc:4c:b6:46:72:0b:9d:f9:dc:ac:d5:31:de:5d:63:3f:c5:f9:
d5:2f:91:41:12:22:fd:30:97:fa:92:6b:51:90:93:0f:87:a7:
f8:92:09:89:68:7c:9c:9e:c8:13:9d:07:78:d3:fa:fa:6f:a9:
d5:fb:f2:7b:39:a9:05:d7:2a:94:fa:ab:f6:1a:93:5b:54:c3:
44:20:43:07:c5:0d:8b:58:ab:ce:ab:51:1b:08:f8:61:c6:e4:
3b:ff:7b:5d:f0:c5:77:07:55:2e:ac:1c:a3:85:3d:bc:5f:09:
86:2a:bb:4c:8a:31:17:70:ff:a8:31:4a:c1:31:1e:2b:0e:8f:
8c:71:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:58 2025 by rpki-client