Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/c4HZz2W3lABwIPZ1OUWFNs5kz1c.roa
File: c4HZz2W3lABwIPZ1OUWFNs5kz1c.roa (raw, json)
Hash identifier: 8JBEp8NY8w9Jt9AzYGylDbas4eDzO2R8CA9c+qrWq1Q=
Subject key identifier: 73:81:D9:CF:65:B7:94:00:70:20:F6:75:39:45:85:36:CE:64:CF:57
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 018BB9E865DCD83CC1805466966E61C12B68
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/c4HZz2W3lABwIPZ1OUWFNs5kz1c.roa
Signing time: Fri 10 Nov 2023 15:44:57 +0000
ROA not before: Fri 10 Nov 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 91.242.224.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:e8:65:dc:d8:3c:c1:80:54:66:96:6e:61:c1:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Nov 10 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7381d9cf65b794007020f67539458536ce64cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:83:32:17:e6:44:73:88:7f:2e:4e:00:e1:
a9:07:98:b9:19:bc:94:e6:cf:12:5b:dc:9f:f5:dc:
33:22:41:12:5a:d2:ab:fd:2a:c5:16:1d:e5:fa:68:
d3:b1:64:ad:36:4f:8c:bf:a8:26:f5:a4:46:eb:12:
d9:ec:7d:55:ae:5c:4f:da:11:8e:3c:bd:d0:3c:ef:
a1:fd:58:68:02:27:a6:31:35:52:06:4e:5c:63:ce:
10:f4:83:d4:b4:81:53:ce:87:14:6d:80:43:65:b0:
dc:c8:91:05:f4:06:c1:b5:f7:fb:38:f3:bd:d8:ac:
ee:70:be:60:46:d2:d6:51:ce:9a:83:12:e6:dc:a7:
8d:ab:c1:97:de:16:d6:75:34:7d:a5:d5:51:07:25:
89:84:67:4d:66:eb:7d:bf:d8:eb:32:d4:90:09:ab:
da:94:20:3f:9c:f6:98:37:10:56:53:4a:0c:cd:72:
4f:db:7a:b3:b9:0d:83:2f:a2:56:46:d1:97:7d:05:
ca:6f:97:03:69:9e:6d:5c:e3:a0:bd:98:bb:70:da:
f7:73:71:0b:c9:86:55:cc:54:11:a5:0c:3a:15:d7:
4a:80:ad:d4:f2:94:98:e0:2a:d3:bf:ee:ff:d9:50:
16:de:f6:3a:92:49:a4:64:79:19:ec:d9:91:10:86:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:D9:CF:65:B7:94:00:70:20:F6:75:39:45:85:36:CE:64:CF:57
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/c4HZz2W3lABwIPZ1OUWFNs5kz1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f1:a1:32:07:b3:29:ed:a8:bc:79:0f:39:f2:3a:a4:48:f2:
f1:91:dc:af:d0:22:cd:79:d7:9a:ae:74:12:04:19:90:02:04:
79:3c:6d:d8:be:55:bd:46:52:9d:17:1c:4a:6b:19:d0:47:96:
35:a5:20:0a:5e:72:1e:2a:de:77:4a:d9:c6:6d:1f:7b:a4:44:
ac:09:01:6d:9c:17:ed:14:93:d4:a0:51:24:36:27:0e:27:ac:
03:59:dc:c3:50:85:49:a8:c6:4c:38:09:fc:4f:85:40:15:69:
34:fe:71:71:ab:20:4b:64:8b:51:1e:9f:e7:50:fc:81:2e:8b:
ac:af:08:72:65:cd:93:f8:32:20:85:a2:f9:58:be:95:73:0d:
96:b5:85:33:02:5f:bc:f4:e4:9c:d7:78:4a:12:f0:8a:24:5a:
df:2d:45:a7:24:5b:9d:01:7f:7a:bf:3f:c5:92:5e:a9:6f:e4:
cc:01:dc:1d:d1:5d:59:1f:3f:ce:97:f4:89:d1:77:1a:58:41:
6f:d9:b7:a0:64:12:fa:86:98:c4:c3:9d:77:26:44:71:72:f9:
9b:ba:bb:43:3a:57:4a:12:d8:cb:d9:bc:74:dc:07:0f:d7:31:
f1:14:86:73:a9:59:58:dd:f0:93:79:81:a2:c6:98:ea:9c:a8:
ac:10:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:55 2025 by rpki-client