Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/W_tepmKWtL8U-U5yKOm6ggTcVE0.roa
File: W_tepmKWtL8U-U5yKOm6ggTcVE0.roa (raw, json)
Hash identifier: aIPlUZuWLUtojtCJOUHP5GrMQbIlcMJlhGoIV0BOnxQ=
Subject key identifier: 5B:FB:5E:A6:62:96:B4:BF:14:F9:4E:72:28:E9:BA:82:04:DC:54:4D
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0D7807B2
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/W_tepmKWtL8U-U5yKOm6ggTcVE0.roa
Signing time: Sat 01 Jan 2022 10:57:26 +0000
ROA not before: Sat 01 Jan 2022 10:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15879
IP address blocks: 195.191.1.0/24 maxlen: 24
91.206.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225970098 (0xd7807b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 1 10:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bfb5ea66296b4bf14f94e7228e9ba8204dc544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:d8:62:bf:08:b3:2f:e2:98:e8:95:64:2e:
c8:b8:a5:a4:c7:e9:fc:db:52:52:61:27:8f:6e:a7:
c3:1c:14:0f:c9:fc:fd:86:e5:9f:a7:ff:9e:c2:53:
33:3b:62:08:09:c9:0b:93:d7:8a:8e:93:9a:bb:f1:
26:38:81:b5:3f:d1:f9:0c:25:d8:78:05:53:45:cc:
18:59:e0:cd:f9:41:63:9f:b4:0b:4a:2a:e2:72:c5:
15:0d:40:58:37:53:cf:98:50:f6:28:8b:7b:be:58:
e7:ee:a3:90:1d:3c:be:24:69:38:df:33:a8:ba:bd:
b4:14:93:ec:9d:b6:3c:84:f9:f8:73:30:4a:2c:ee:
d0:ea:7d:75:40:48:8c:ac:68:a6:7a:88:23:42:54:
35:e8:56:2b:42:1c:5a:87:6b:7f:88:1d:3a:2b:b4:
50:12:bf:6a:0b:f9:0d:50:1d:68:f3:30:9a:bc:36:
67:6d:7c:60:d4:b1:1f:4b:01:67:ff:13:21:f5:8c:
2a:04:7e:f4:95:70:28:6a:77:61:df:85:b3:3c:65:
81:69:88:5c:b8:d9:62:bc:e7:3d:d3:2d:9d:b8:b3:
d6:02:c6:d7:1d:f1:8a:f3:75:97:91:32:38:e5:df:
99:d2:34:44:b3:12:31:b9:42:4c:78:77:d0:68:5b:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:5E:A6:62:96:B4:BF:14:F9:4E:72:28:E9:BA:82:04:DC:54:4D
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/W_tepmKWtL8U-U5yKOm6ggTcVE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.80.0/23
195.191.1.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f9:15:0a:2b:a0:94:51:2d:5e:3d:3d:0c:ec:1e:d2:37:63:
12:96:09:19:a1:2e:b3:6a:11:b1:54:a6:51:af:22:17:69:cf:
4c:37:9b:b6:53:5c:eb:00:51:45:6d:1a:c1:00:06:be:d2:ed:
e7:1f:7d:63:fd:04:b7:8a:77:30:39:70:d2:50:73:7b:91:a8:
e4:14:ca:de:62:f5:ad:13:0a:f8:b1:74:9c:8f:a3:1d:71:93:
43:1d:4e:8f:6b:34:45:f7:87:de:c9:3a:f4:8e:bf:8c:21:b9:
a6:c7:1e:96:f3:c3:e7:78:63:e0:38:b0:73:ff:04:c4:b6:26:
f1:fa:78:2e:8c:c3:b0:b4:05:34:0f:85:54:7a:4d:00:4b:c8:
7b:6a:16:1e:ac:b6:a1:cb:66:14:5e:c5:27:28:cb:55:6c:4f:
f7:bd:d2:c5:35:c2:6d:8e:8a:d7:6f:5a:fc:b4:02:55:05:ae:
96:2a:a8:b0:54:dd:2f:68:10:69:72:07:49:be:2b:2c:a1:e9:
8b:b7:38:33:3a:2d:77:e6:e8:70:82:5c:e3:01:ef:74:7e:5c:
f0:35:eb:7f:73:ef:05:e1:17:b5:93:b0:a7:25:86:04:ae:ee:
25:dc:1a:da:14:66:7e:30:1b:c7:95:86:c5:f2:35:e4:31:bd:
27:c2:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:47 2025 by rpki-client