Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/AD_mqOWroyWpkd6oprCIlaVSoWM.roa
File: AD_mqOWroyWpkd6oprCIlaVSoWM.roa (raw, json)
Hash identifier: RkX0ALJSvOuvZqgAdaER1Vo5zdvbf/7jPy4BWt4psA0=
Subject key identifier: 00:3F:E6:A8:E5:AB:A3:25:A9:91:DE:A8:A6:B0:88:95:A5:52:A1:63
Certificate issuer: /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial: 018C48E202E192584BC12B29F792A4148607
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/AD_mqOWroyWpkd6oprCIlaVSoWM.roa
Signing time: Fri 08 Dec 2023 10:03:40 +0000
ROA not before: Fri 08 Dec 2023 10:03:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49685
IP address blocks: 91.238.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:e2:02:e1:92:58:4b:c1:2b:29:f7:92:a4:14:86:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Validity
Not Before: Dec 8 10:03:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=003fe6a8e5aba325a991dea8a6b08895a552a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:5f:61:f4:1a:eb:c1:26:92:a8:57:d6:10:
dd:9c:87:30:17:56:2e:6d:22:63:0c:71:0b:60:85:
1e:e3:ab:19:5d:ce:38:1b:d3:3c:6e:3e:a8:62:d7:
4f:91:9f:92:70:c7:b3:b1:08:33:0d:ee:9c:8a:e5:
4c:4e:1c:86:ee:fe:96:55:06:02:bd:ed:b3:15:d1:
b7:a1:f0:bb:cb:5e:6e:ff:ab:3c:1e:c1:81:af:17:
ba:2e:11:14:ec:b3:ff:61:ad:06:f0:c2:e5:ec:4e:
ed:be:73:af:25:81:ef:24:88:ba:b9:ce:96:93:2c:
2f:8e:30:97:2d:15:30:42:d8:0d:11:ab:27:f4:34:
54:22:b9:71:f5:14:d0:10:1f:4f:f8:87:4b:cd:5f:
86:55:aa:08:3e:62:90:a2:cb:61:9c:9e:ad:a8:3d:
2e:e5:b3:3a:7c:d3:ac:23:a1:5a:84:76:a9:84:d6:
b2:66:e5:0b:14:34:d0:83:18:51:c2:83:69:4f:16:
b0:07:d2:df:03:fd:8c:25:2c:49:cb:f9:da:5c:a5:
32:70:9c:e3:2a:93:0c:58:51:bf:34:9f:b1:7a:6f:
a5:79:50:0c:ac:52:b3:1e:82:6b:ab:f3:a6:1c:86:
32:2d:15:a8:b5:17:50:e6:d0:48:76:d8:17:ef:39:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:E6:A8:E5:AB:A3:25:A9:91:DE:A8:A6:B0:88:95:A5:52:A1:63
X509v3 Authority Key Identifier:
keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/AD_mqOWroyWpkd6oprCIlaVSoWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fa:87:23:8d:47:f0:ba:77:9d:90:fa:a2:37:49:c1:03:78:
66:a1:f2:a9:02:79:f0:93:65:d0:58:60:0d:44:00:4d:bb:1f:
64:7d:0a:5c:f5:da:00:a3:e8:56:54:2c:19:79:a7:5e:e3:0f:
cb:61:c8:af:29:98:d5:03:f9:a6:8c:20:58:97:69:9c:81:c5:
fb:da:04:22:c0:56:c7:4c:44:fb:75:37:4e:c5:26:7b:d2:c8:
e6:11:d2:20:26:11:16:ba:a2:fc:3d:58:b3:b5:6f:b7:d0:41:
ec:48:5c:d9:ce:92:c5:72:19:c4:e7:47:4b:ab:96:b0:4e:81:
c7:0e:84:74:cc:16:d2:2e:e6:9f:7d:26:98:e0:36:ef:92:9e:
73:bf:85:c6:da:df:df:b6:f4:27:4c:60:94:7d:76:ca:c2:21:
c6:be:16:8e:c3:d3:7e:2e:ab:1b:0b:22:3d:ed:01:7b:5e:4f:
24:f5:56:69:fa:2e:27:78:6c:6b:36:73:7e:e4:b2:08:50:b9:
6b:9c:e4:1e:bb:a1:47:55:51:a3:c4:47:d1:6c:c9:37:c7:64:
ed:38:08:93:2f:a8:0f:48:f9:bd:7e:bf:dd:86:04:5c:c8:32:
95:f0:57:ef:62:e4:b9:3c:ed:12:dc:e4:92:2e:ff:47:9e:6f:
6f:fd:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:34 2025 by rpki-client