Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/O0SvxZAWsu-_7K9esMyzX4hVIKg.roa
File: O0SvxZAWsu-_7K9esMyzX4hVIKg.roa (raw, json)
Hash identifier: iTAJfo/ivMGGtjWMLGoQMj8qzCM8NFbTHEd6f4XmU2U=
Subject key identifier: 3B:44:AF:C5:90:16:B2:EF:BF:EC:AF:5E:B0:CC:B3:5F:88:55:20:A8
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 01856C65D8ACA8FF120C6E5719936924739B
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/O0SvxZAWsu-_7K9esMyzX4hVIKg.roa
Signing time: Sun 01 Jan 2023 08:14:51 +0000
ROA not before: Sun 01 Jan 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47904
IP address blocks: 91.216.54.0/24 maxlen: 24
91.223.115.0/24 maxlen: 24
2001:67c:2324::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:d8:ac:a8:ff:12:0c:6e:57:19:93:69:24:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jan 1 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b44afc59016b2efbfecaf5eb0ccb35f885520a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:8d:26:b8:f3:0d:d3:87:ee:b6:95:82:05:
d1:4e:f5:2f:e0:51:5b:a4:46:d7:b4:ae:f1:c3:b3:
41:42:75:be:6f:a0:d7:cb:cd:35:ab:83:8a:72:2a:
b4:69:dc:bf:bf:17:59:22:a0:6d:37:13:b9:6e:18:
7a:18:a8:b4:3f:d9:db:32:f2:7b:5d:20:8a:ba:17:
db:41:2e:b4:35:16:f4:1b:bb:8c:a6:45:b9:c1:fd:
2a:93:0b:c8:d9:45:cc:c2:cf:b6:37:6d:80:85:e7:
b4:20:ab:b9:74:8a:aa:89:cf:6c:29:a6:e9:c7:75:
85:fa:d7:a9:b0:2b:0c:06:af:44:82:98:a5:4d:89:
42:8f:f7:2c:51:20:34:85:9d:39:ed:eb:72:62:b6:
54:4a:bd:b6:56:55:fb:5f:a6:b5:42:17:5b:3b:91:
f9:f4:d7:42:de:99:d3:65:29:d9:b3:d0:2d:5b:37:
e7:33:72:0c:a7:55:c0:99:26:67:0f:a4:b2:ae:f2:
bb:bb:d8:c3:cd:3a:ad:f7:14:ac:8f:c8:23:99:10:
86:70:64:1a:2d:de:ca:ef:88:8d:9f:2b:91:05:b2:
15:25:c6:bc:9f:f0:d9:99:25:4f:29:ff:1c:46:a0:
59:20:86:49:6e:31:5f:15:dc:e5:27:e2:b5:25:77:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:AF:C5:90:16:B2:EF:BF:EC:AF:5E:B0:CC:B3:5F:88:55:20:A8
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/O0SvxZAWsu-_7K9esMyzX4hVIKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.54.0/24
91.223.115.0/24
IPv6:
2001:67c:2324::/48
Signature Algorithm: sha256WithRSAEncryption
62:80:16:aa:38:63:0e:18:10:a5:b4:e4:bf:7f:10:84:b3:dc:
2b:03:b8:26:c8:6a:75:c9:3c:11:e9:7c:11:7d:0c:98:98:d8:
cb:55:56:1c:8a:1f:98:4b:c8:e3:8a:68:6c:10:49:1b:a0:9a:
4a:86:ef:0d:c5:47:5d:47:00:a4:d9:c4:69:6e:88:11:97:bf:
e6:eb:51:de:24:73:25:6a:69:50:3d:37:a6:e1:31:3c:0a:9e:
f8:d7:59:77:a6:cd:5a:4d:96:b3:6f:13:1d:33:c3:c3:74:f7:
c6:ce:48:69:4d:31:3b:b1:7d:2b:c3:c1:0c:cb:7b:ff:0d:7d:
c4:64:47:6a:03:c7:d0:85:5d:6a:13:ac:35:b3:ac:34:67:3e:
c5:45:38:40:b0:ce:88:5c:e7:b5:99:3f:3d:ce:26:47:ed:4e:
67:f0:a4:81:65:66:ae:33:94:ae:9c:e9:31:69:19:fb:1f:db:
db:34:ea:90:e4:6f:65:1e:9a:ee:db:2e:94:5d:96:25:2c:5b:
0a:a2:b6:1d:55:46:bb:52:a1:bd:49:eb:6d:f5:14:0a:aa:92:
ed:f3:26:28:52:02:93:b2:d9:cf:72:50:22:83:1d:24:b3:cf:
a4:d3:9f:49:9e:be:b3:45:53:d1:4b:af:44:76:43:c5:0a:f2:
83:68:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:20 2025 by rpki-client