Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/gPLBhjLnIeaudBT5j0on-Y6oAfE.roa
File: gPLBhjLnIeaudBT5j0on-Y6oAfE.roa (raw, json)
Hash identifier: 4PhPP69+gupkVKgsYRmki8gn+Y7DftJCATdNOuJU6sE=
Subject key identifier: 80:F2:C1:86:32:E7:21:E6:AE:74:14:F9:8F:4A:27:F9:8E:A8:01:F1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 018570E74A9796B354E750D3DF187F47E763
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/gPLBhjLnIeaudBT5j0on-Y6oAfE.roa
Signing time: Mon 02 Jan 2023 05:14:44 +0000
ROA not before: Mon 02 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44105
IP address blocks: 91.201.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4a:97:96:b3:54:e7:50:d3:df:18:7f:47:e7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jan 2 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f2c18632e721e6ae7414f98f4a27f98ea801f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:11:e7:45:70:21:25:98:d0:7a:57:61:89:
58:0e:db:12:d9:c2:50:cf:41:45:25:0c:19:f0:53:
a4:35:80:e0:b6:84:3c:f3:f0:2e:ea:8a:74:27:58:
b6:92:85:db:2c:87:48:10:2d:aa:21:70:ee:cd:a7:
44:bb:a1:65:05:1d:55:78:df:ed:d0:35:60:e0:16:
42:9e:87:4a:22:5c:66:f5:58:f0:ae:f6:ac:68:3d:
38:c3:21:65:7f:0e:8c:21:40:b2:2a:b3:7d:ee:b6:
82:0f:17:a4:f0:de:6b:82:0b:5f:4c:eb:e2:38:a8:
9e:47:5c:15:02:83:12:e0:95:fd:56:66:d9:aa:26:
20:7d:63:23:41:62:ca:f3:d7:fd:65:5a:b0:0b:bc:
71:ae:a2:6d:9a:ec:4e:a5:ae:86:80:29:46:d5:bc:
2d:f3:57:72:9d:6b:20:88:41:1c:3b:89:b8:d5:77:
21:a4:60:ae:e0:5b:70:3b:1f:a7:dc:a3:51:85:e7:
29:b8:62:89:70:ce:fc:08:68:a4:0b:b2:56:2d:74:
e2:c5:f1:5d:62:93:f1:1f:a5:74:df:d8:62:84:1d:
66:5d:19:58:51:c8:82:03:9a:de:b7:76:ca:4e:b4:
4a:49:de:42:70:33:c8:a2:2e:a0:f6:07:38:62:74:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:C1:86:32:E7:21:E6:AE:74:14:F9:8F:4A:27:F9:8E:A8:01:F1
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/gPLBhjLnIeaudBT5j0on-Y6oAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
30:be:e1:1f:b1:25:b7:24:94:c5:45:d3:31:29:eb:27:30:76:
23:0a:8b:1c:0e:1c:61:e9:98:0e:e1:6a:8b:46:64:95:db:6a:
ef:88:7b:a4:6a:f9:f3:81:32:0d:c0:99:29:3d:9a:9f:0d:a7:
db:c4:76:5b:ed:41:50:4b:3e:fb:49:22:4b:a5:b5:13:ef:c5:
a6:3d:6c:b8:c1:86:0a:13:8e:4f:99:36:f8:3a:fb:9b:26:3c:
93:d9:09:a5:4c:f2:b2:f2:4a:88:f2:46:8c:5b:2b:f9:15:ca:
2f:a0:fd:6a:be:ac:a8:be:5a:21:07:71:6f:6d:74:1f:1f:63:
84:ad:f3:c9:20:63:46:9d:9e:61:c1:c5:44:c3:3d:40:42:6a:
44:da:73:a0:69:d6:de:3a:17:24:e6:75:c1:7d:7f:15:75:6a:
5c:91:43:db:a0:54:48:11:89:7a:c2:88:0c:48:4b:7f:c0:2a:
23:73:05:40:63:bb:11:0d:6b:d6:bf:8d:dd:74:23:fe:f8:69:
bb:bf:f3:d6:11:4a:3c:76:5e:f5:1c:2b:95:86:c5:ee:9e:0e:
19:23:94:69:24:ac:e7:bc:4e:61:c9:f8:ea:14:e3:77:c2:b7:
bf:7c:5a:58:4e:d4:39:ef:b4:65:4e:56:f7:9b:8d:3b:f2:8a:
8c:c7:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:12:29 2025 by rpki-client