Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/k2aAOJXBA87ftGIlYcQPSRAiWD0.roa
File: k2aAOJXBA87ftGIlYcQPSRAiWD0.roa (raw, json)
Hash identifier: u5KbaZgYKIZKlMpJeuOPbEOdouM+gm0I2xvfgiLPIvE=
Subject key identifier: 93:66:80:38:95:C1:03:CE:DF:B4:62:25:61:C4:0F:49:10:22:58:3D
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0186B7C0559429EF6CBAE556D1F1867931A6
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/k2aAOJXBA87ftGIlYcQPSRAiWD0.roa
Signing time: Mon 06 Mar 2023 16:28:00 +0000
ROA not before: Mon 06 Mar 2023 16:28:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50716
IP address blocks: 87.76.0.0/20 maxlen: 20
87.76.8.0/22 maxlen: 22
109.197.192.0/21 maxlen: 21
176.116.136.0/21 maxlen: 21
91.239.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:c0:55:94:29:ef:6c:ba:e5:56:d1:f1:86:79:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Mar 6 16:28:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9366803895c103cedfb4622561c40f491022583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:6c:fd:28:8e:6b:f6:bc:d4:bc:27:51:78:
02:e2:62:e1:a4:e5:50:53:e1:cf:ca:6c:bc:1e:94:
ca:f7:07:de:b4:f2:4f:7a:a2:a3:4a:c9:50:68:f5:
fc:f9:5f:53:cd:c1:84:d9:e2:8c:90:83:4c:55:98:
67:20:f2:26:e8:ab:5a:bc:51:0c:1a:57:d9:0e:3a:
7d:22:a7:26:6c:e1:a4:ed:10:f6:d2:f7:c9:14:e8:
b7:81:cc:29:32:b3:37:c7:e8:93:6f:ae:bc:73:e7:
dd:69:b2:f0:28:20:2d:aa:77:1c:77:fc:d3:39:1d:
d2:31:55:0e:13:00:8e:89:0e:13:2f:16:18:14:52:
3e:7a:3f:6b:a3:64:9d:af:58:0e:2a:83:23:91:a5:
4a:c4:10:99:d4:7a:d8:37:a7:04:2c:18:1d:bb:08:
e8:1a:05:88:e8:39:ea:fa:07:14:d3:08:f8:bb:a2:
8d:48:9f:46:8c:39:d4:04:f7:2c:0a:49:90:33:ca:
11:71:f6:6e:9c:0e:05:6e:53:ec:bb:77:1c:26:0e:
a9:56:a2:4c:d8:1b:e9:60:11:57:8c:e5:4a:44:5a:
1e:b9:16:08:30:3f:52:19:39:f4:02:b6:7c:79:01:
40:2f:9c:8e:18:d4:0b:29:2a:3b:7f:33:38:db:a6:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:80:38:95:C1:03:CE:DF:B4:62:25:61:C4:0F:49:10:22:58:3D
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/k2aAOJXBA87ftGIlYcQPSRAiWD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.0.0/20
91.239.16.0/22
109.197.192.0/21
176.116.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:6f:36:76:37:fb:d1:74:f6:05:ef:1c:0e:bc:84:23:4d:a1:
d4:dc:bf:83:b8:62:09:4d:15:38:1e:cc:e9:4e:7d:1c:ec:60:
68:98:5e:0d:88:19:b7:35:4f:64:06:ec:85:de:20:74:61:81:
0c:20:bb:6e:0e:ce:4b:d9:a2:d1:18:5c:b3:27:49:48:0f:82:
31:d1:32:f7:72:4d:fe:64:b3:08:1a:cf:63:c5:05:64:31:d6:
f1:0a:3c:c6:b1:be:a5:03:e9:ba:a7:16:65:e7:44:e7:3b:15:
01:60:13:6b:a0:6b:ee:76:00:e6:95:c6:6e:0b:5f:36:8d:37:
e0:67:1e:ad:10:9e:43:ef:79:b4:13:10:38:0d:40:bd:a5:1d:
31:31:33:fe:df:a5:95:ed:a0:68:69:ba:1b:ff:c3:b4:f5:32:
6b:38:07:48:4c:8a:f8:b8:26:15:7d:2c:7d:65:6e:87:d2:02:
dd:94:de:2b:65:fb:0f:8e:e3:24:29:c2:b9:89:b0:ab:cd:33:
7e:f6:0f:19:d6:64:b0:b9:24:f8:74:1c:a7:a7:27:f9:66:d9:
6b:87:84:b4:85:cd:88:8f:3c:0c:60:71:24:a4:35:79:94:25:
e3:e4:01:99:23:b1:cd:e6:72:5f:c4:8c:44:4b:12:65:4a:14:
62:82:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:47 2025 by rpki-client