Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/IsvKe2DfcsAaXVIvFJE_5FECzZs.roa
File: IsvKe2DfcsAaXVIvFJE_5FECzZs.roa (raw, json)
Hash identifier: wDkAV8pnO499G+JPIi1j07hisrf9xFCr8xEjvDo3v98=
Subject key identifier: 22:CB:CA:7B:60:DF:72:C0:1A:5D:52:2F:14:91:3F:E4:51:02:CD:9B
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 01856D8AB31596066690D347DAB5DC977F44
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/IsvKe2DfcsAaXVIvFJE_5FECzZs.roa
Signing time: Sun 01 Jan 2023 13:34:44 +0000
ROA not before: Sun 01 Jan 2023 13:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56440
IP address blocks: 91.224.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b3:15:96:06:66:90:d3:47:da:b5:dc:97:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 13:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22cbca7b60df72c01a5d522f14913fe45102cd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:34:7c:1f:46:b2:2b:93:fc:84:1e:48:d8:
88:04:a5:76:49:cf:0a:7d:24:2c:6f:d9:32:02:76:
eb:65:c5:29:e0:88:5d:e3:48:cc:26:9c:bd:35:c8:
49:6a:2f:03:90:53:20:ba:b8:dc:79:1a:2a:3b:29:
0c:36:6e:f9:11:60:df:7d:c2:d8:d5:67:3c:6a:c4:
2b:93:1e:4e:ba:8d:ed:81:c4:d9:f8:a1:14:ac:43:
ff:22:25:9a:9b:36:b1:fa:18:ef:fd:18:a5:b8:94:
8d:00:3f:64:14:20:ff:f6:8a:c2:59:8d:7b:71:c0:
4b:40:69:f9:9a:f2:5b:ca:69:07:35:22:f6:e9:d6:
18:02:4f:6e:93:24:c4:ba:b7:17:40:94:f5:6f:8a:
2f:9e:7b:bf:5d:3f:ec:51:49:ad:0f:0a:ae:d1:c0:
71:c3:fc:6f:35:ea:49:bb:dd:d3:0c:c1:ad:50:0b:
c6:fb:e0:ad:4f:06:16:81:c2:1d:be:de:78:bd:cf:
16:2c:2e:49:5b:86:2f:1b:5f:ed:80:81:fd:f9:e2:
5f:7e:f2:2b:68:5c:b9:b1:3d:ad:31:30:19:b7:55:
9f:e5:a4:43:ba:8a:c9:15:22:1a:fb:70:4d:57:dc:
f5:c9:ad:b4:d6:ae:88:52:1f:e7:df:6f:0b:45:29:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:CA:7B:60:DF:72:C0:1A:5D:52:2F:14:91:3F:E4:51:02:CD:9B
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/IsvKe2DfcsAaXVIvFJE_5FECzZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.158.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f8:b1:c7:ed:0e:76:33:15:05:ca:1b:67:01:18:0c:6c:55:
c2:d6:fa:2c:e6:bc:85:b2:d2:b2:29:35:32:4f:f9:12:99:4f:
77:c2:59:66:77:00:2d:c4:96:2a:c8:a0:25:ea:c9:b2:9b:da:
56:36:00:a7:03:34:9a:d8:6a:ca:f0:96:6c:26:5c:74:19:96:
66:72:76:62:47:5e:6c:ef:a0:06:6c:94:1c:02:36:0b:c9:fc:
6d:60:7d:06:f7:3c:92:1a:c8:cb:b8:4d:80:df:53:c1:8b:86:
14:92:43:7a:b6:b8:ec:87:e9:bd:8c:c6:c6:68:ba:fe:9b:cc:
51:4a:b6:bf:b9:7c:6f:d3:ac:38:34:16:8b:f5:89:8f:66:15:
16:76:db:10:58:0a:4d:46:4d:f9:ac:c4:65:a4:2b:13:99:bd:
92:fd:07:82:71:b8:b6:92:ba:10:01:d1:e8:5e:04:0d:d4:85:
b7:11:2c:69:bc:c8:2d:23:c3:95:e9:ea:e1:fe:64:9e:d9:de:
c2:8f:27:0e:dd:1a:45:45:6a:e4:26:5e:14:86:90:82:d4:ef:
77:42:4d:81:30:d5:c3:fa:5a:a8:2f:6b:7a:03:a1:ca:8f:1d:
bf:44:e6:13:0b:9d:ff:16:e8:8b:7b:94:a4:1c:25:ba:cb:a9:
28:8f:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:22 2025 by rpki-client