Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/C5_JnWZDZIUOaxLxFWoQcOMpasU.roa
File: C5_JnWZDZIUOaxLxFWoQcOMpasU.roa (raw, json)
Hash identifier: 0saYuj61Ox3aoIxA35zH8dkXkGjob1K1chYQEZNISvo=
Subject key identifier: 0B:9F:C9:9D:66:43:64:85:0E:6B:12:F1:15:6A:10:70:E3:29:6A:C5
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA082EA2167AA1F36A8DFBB0F74395
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/C5_JnWZDZIUOaxLxFWoQcOMpasU.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51478
IP address blocks: 91.219.15.0/24 maxlen: 24
91.219.12.0/24 maxlen: 24
91.219.12.0/22 maxlen: 22
91.219.14.0/24 maxlen: 24
91.219.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:08:2e:a2:16:7a:a1:f3:6a:8d:fb:b0:f7:43:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b9fc99d664364850e6b12f1156a1070e3296ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:46:75:c0:2a:a1:94:77:43:7e:2f:ee:b4:
c3:5c:5e:c3:3d:cd:46:40:fb:43:9f:bc:fe:df:21:
6a:0d:5e:62:62:37:06:1b:a0:3b:08:e4:ee:b2:14:
42:33:88:5d:1d:16:ac:ae:7a:77:6a:69:33:95:41:
15:b6:78:5c:8b:03:26:f3:af:62:41:f2:6a:1b:51:
0d:bb:cf:fe:3a:e4:28:c2:fd:78:68:fb:f1:82:78:
8f:5a:2e:01:28:fe:92:93:13:c4:22:d2:7c:dc:94:
39:52:0f:ab:a5:98:b3:5e:76:05:a7:56:49:3f:bf:
89:79:fc:45:37:ff:31:81:59:77:26:05:0b:9e:0d:
fc:96:b1:4b:bf:03:f5:7f:e6:4d:68:42:56:32:bc:
4b:b1:78:af:9b:0b:d4:e9:2c:47:24:55:67:19:24:
a3:f9:b8:37:c8:bf:01:55:aa:77:50:4d:0f:16:47:
02:54:71:2b:da:c5:da:8d:73:d8:b4:b3:63:42:0b:
4d:10:c0:7d:2c:ee:7f:9f:77:2d:35:8f:05:56:07:
32:28:62:0f:97:77:e0:55:6c:4f:6b:f3:89:78:63:
a4:e2:83:82:93:4b:08:07:97:a0:c2:4e:13:a2:14:
bb:de:65:b6:ca:8d:5a:67:80:be:8b:93:ee:de:9f:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:C9:9D:66:43:64:85:0E:6B:12:F1:15:6A:10:70:E3:29:6A:C5
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/C5_JnWZDZIUOaxLxFWoQcOMpasU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.12.0/22
Signature Algorithm: sha256WithRSAEncryption
75:43:db:b5:0b:d3:ec:16:3d:e2:cf:7f:30:e1:10:ef:c1:b6:
b3:a0:bf:83:5a:f7:f3:7d:30:f0:09:ba:27:74:f6:05:db:e3:
f3:47:01:04:59:f2:f5:4b:66:0b:f6:02:d9:8d:5f:b6:ce:4a:
f1:44:cc:92:dc:18:62:02:d8:22:a3:15:8d:73:26:91:14:31:
3e:99:e6:d2:a4:ae:23:be:a4:60:3d:01:7d:50:28:c2:7d:19:
7b:31:e2:4d:11:7e:ab:a8:97:9a:3a:a6:d0:2f:82:3d:26:83:
57:18:ab:6f:ed:c6:75:5f:83:50:6d:0f:d1:97:fc:52:93:f7:
1d:8d:7c:71:9b:8e:95:49:78:40:dc:47:e0:8f:0c:d3:b9:04:
29:38:e1:97:66:31:33:ab:77:c3:27:73:7c:cd:59:69:09:f6:
f2:a3:b2:dd:4c:54:94:c8:e5:46:bc:50:41:cb:06:f0:53:c9:
12:02:1e:4e:e0:2d:22:3c:3f:7c:8c:98:2f:7b:fb:37:7a:e9:
be:f9:dc:9e:c8:b1:ad:49:a0:e6:cd:13:3e:96:90:ce:a8:5c:
50:3d:f0:05:a0:7d:2f:75:b0:f1:eb:74:a7:b4:2a:df:ba:d1:
75:e0:e5:18:4b:d7:a4:67:90:63:70:d1:16:dd:c7:ca:d3:7a:
49:08:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:55 2025 by rpki-client