Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/BDb-u9jY-Hfpw1SItVLLXH7XXXw.roa
File: BDb-u9jY-Hfpw1SItVLLXH7XXXw.roa (raw, json)
Hash identifier: ntGbHvAV7O0JG9IOclgMd4FizqrGmn05hpgAOoc4EiE=
Subject key identifier: 04:36:FE:BB:D8:D8:F8:77:E9:C3:54:88:B5:52:CB:5C:7E:D7:5D:7C
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 03CD20A2
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/BDb-u9jY-Hfpw1SItVLLXH7XXXw.roa
Signing time: Sat 01 Jan 2022 12:02:46 +0000
ROA not before: Sat 01 Jan 2022 12:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12732
IP address blocks: 91.199.214.0/24 maxlen: 24
2001:67c:27fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63774882 (0x3cd20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jan 1 12:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0436febbd8d8f877e9c35488b552cb5c7ed75d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:dd:92:6c:d9:a6:61:55:4a:23:6d:28:48:
e9:8c:f9:71:44:3a:11:0b:39:de:e6:2e:bf:1c:c6:
88:75:b4:cf:c2:31:c2:7b:6f:4d:b6:dc:71:22:6d:
1b:d8:78:f8:de:84:32:6a:44:25:ab:d8:1f:c4:ff:
3f:34:ec:66:45:c8:49:3f:5c:9a:9b:8f:ba:d9:2d:
c8:3f:f5:b8:58:13:f9:83:1c:9e:66:ad:15:42:68:
2b:c0:a4:25:7c:06:36:f8:10:6f:5a:79:50:dc:d3:
ca:fa:e5:0f:c2:2f:68:3a:bb:a0:01:84:27:29:f7:
92:17:4d:ce:46:9b:79:84:46:9e:c1:59:61:d9:38:
d7:9f:85:ea:b8:d2:47:9d:1d:b8:e0:5c:08:6f:f8:
c1:41:52:81:89:bb:d0:ef:94:db:33:3d:c4:e8:9b:
b3:5d:de:34:db:6e:e6:c0:ea:f9:e3:b2:72:3f:ca:
e6:38:d0:ad:5b:6f:4e:a4:3b:77:32:1e:b2:80:11:
d4:ad:62:79:13:63:5e:2a:2e:78:eb:ee:8d:02:7f:
5d:f4:91:18:02:87:d3:90:0a:d6:d8:80:58:2c:b5:
d0:e7:fc:86:a9:ec:bd:97:e4:5e:b3:d8:5c:ad:a7:
5f:8b:c5:26:9d:ac:b9:a1:db:d2:8d:d6:b1:58:17:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:FE:BB:D8:D8:F8:77:E9:C3:54:88:B5:52:CB:5C:7E:D7:5D:7C
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/BDb-u9jY-Hfpw1SItVLLXH7XXXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.214.0/24
IPv6:
2001:67c:27fc::/48
Signature Algorithm: sha256WithRSAEncryption
30:cf:2c:45:cb:d3:04:49:09:e7:c3:78:1d:70:26:c6:2a:d1:
f7:35:13:de:90:98:ff:50:11:8f:a1:8b:74:25:c7:b4:5e:92:
c4:04:b0:68:e8:42:7b:26:00:16:73:50:92:a2:e0:bb:c4:48:
82:dc:6e:8e:63:71:28:09:9f:12:05:32:ca:5d:b9:0f:9a:1c:
fa:36:14:cc:0d:2d:88:a3:b8:1a:8a:27:d6:96:15:d7:50:21:
a7:52:10:a2:ca:7a:60:03:b4:1b:e7:20:ed:a4:f1:50:69:91:
ba:b3:03:98:1e:45:3c:ab:68:94:da:e0:66:81:ff:04:77:e2:
2b:c2:22:25:d4:88:c1:85:4d:52:10:eb:87:d3:72:ca:b8:27:
cb:4f:0d:6f:bb:21:e6:2b:94:92:9d:0f:06:fb:d9:84:6d:4a:
e0:99:6a:97:02:6f:86:a9:ff:2b:64:11:bd:d4:c8:9e:1e:b1:
29:c5:b2:10:20:b7:eb:46:7e:ef:c6:5e:5b:6c:57:5d:dc:26:
00:51:69:4c:6e:48:d4:3a:77:9f:9f:40:2c:a8:59:c2:b4:c2:
0b:0e:96:ac:1e:d9:4d:5a:0a:a4:60:52:62:b9:82:77:49:d9:
f9:7a:59:6e:2d:dd:a6:14:e8:af:e0:ed:5c:f1:85:38:0f:e3:
fe:3b:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:45 2025 by rpki-client