Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/kE2A9JUO3lsWTOqK-igmwQBDSds.roa
File: kE2A9JUO3lsWTOqK-igmwQBDSds.roa (raw, json)
Hash identifier: 7ffMiZTSAUtw2IAl1zTNCgmcPtJTEZCXNizhroYL5fA=
Subject key identifier: 90:4D:80:F4:95:0E:DE:5B:16:4C:EA:8A:FA:28:26:C1:00:43:49:DB
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 0184D24705DFC85481A9747BA6DE92898127
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/kE2A9JUO3lsWTOqK-igmwQBDSds.roa
Signing time: Fri 02 Dec 2022 09:59:40 +0000
ROA not before: Fri 02 Dec 2022 09:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200966
IP address blocks: 91.215.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:47:05:df:c8:54:81:a9:74:7b:a6:de:92:89:81:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Dec 2 09:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=904d80f4950ede5b164cea8afa2826c1004349db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:90:4a:56:d9:90:5b:de:97:c6:98:2e:8b:
03:c0:d9:b5:76:e8:6e:79:0c:94:64:89:52:31:a2:
9b:06:09:be:00:82:d4:3f:32:ed:4a:8a:2f:79:7d:
c5:ac:78:f1:dd:81:c5:1e:c3:43:eb:e5:a8:f4:f5:
6a:9a:47:57:5d:31:d2:3e:a7:85:0c:1e:56:32:1d:
4d:55:ad:c0:16:52:09:9b:92:88:89:5a:dc:64:68:
4f:4b:59:da:4c:44:1b:c4:23:de:18:d5:91:d1:a9:
38:81:0e:4d:60:17:8f:9e:e8:0a:8d:1f:2c:6f:f6:
e4:5e:f6:58:f2:cb:49:4e:5b:f7:51:fe:65:46:8b:
77:59:78:8a:48:d3:3d:33:01:7c:a9:4c:f1:06:1d:
f8:18:63:f6:39:b2:8c:02:ab:0f:92:ab:6d:c1:73:
d4:c8:4a:f4:0b:2b:32:b5:1b:d1:b2:46:5d:59:0f:
a9:c1:e4:fc:f8:54:a5:51:84:15:0b:a6:4a:82:25:
c4:d4:a3:f4:96:40:b1:d6:27:19:b4:0c:20:b2:0b:
e7:41:94:08:7e:73:a1:de:96:e6:96:87:55:30:89:
c6:30:d2:1c:28:55:fa:23:d8:a1:87:0f:30:a3:c0:
34:80:89:66:ce:f4:4b:dc:03:cb:17:45:60:1d:25:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:80:F4:95:0E:DE:5B:16:4C:EA:8A:FA:28:26:C1:00:43:49:DB
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/kE2A9JUO3lsWTOqK-igmwQBDSds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.87.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ec:fb:45:46:90:95:a1:d9:af:f4:39:f5:89:ae:97:c1:ff:
66:f1:a4:8d:34:03:ab:ca:20:db:f9:80:c1:69:e0:dd:97:c2:
96:a8:a7:fb:20:42:04:d4:b1:d6:df:69:2a:4a:eb:08:1b:8f:
13:4e:3e:6c:f3:7a:78:d3:b0:39:7b:85:a8:ed:c8:5b:87:7e:
66:bc:f4:56:60:8c:9b:49:89:d5:c9:c4:1b:66:9c:05:c6:3b:
15:fd:1b:dd:6a:b5:02:f2:08:98:32:0f:f1:ea:da:15:7d:72:
ef:f4:47:ce:5e:31:e5:75:f5:5f:f4:cc:45:01:2e:70:4d:ab:
f2:ce:6b:82:e1:e9:c2:9b:18:12:e1:2c:27:49:21:8a:b2:48:
00:b7:07:ce:9a:fd:cf:4e:3a:af:2c:e5:9a:2e:ad:df:0e:02:
e0:15:5e:2b:7e:63:b3:97:93:6e:26:7a:d4:03:fb:44:ec:b6:
ed:3c:10:cc:bb:ef:21:89:34:cc:27:bb:d0:9b:a2:36:40:68:
77:42:bd:84:df:b6:4c:7b:ec:0b:19:a5:2a:fb:ab:18:7d:a9:
ff:b6:20:f3:81:14:af:e7:38:0c:2c:39:45:f8:c9:13:4b:8d:
1d:4d:fd:b6:7f:b7:b0:66:35:1f:a9:2f:7d:ff:14:13:c2:24:
58:66:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:23 2025 by rpki-client