Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/02vKYD1eyfXNrj7lCvVmPIl0YGA.roa
File: 02vKYD1eyfXNrj7lCvVmPIl0YGA.roa (raw, json)
Hash identifier: x27aYy3xizV38l2mE2rGiqZB9n2yjDifWO+0jrS6uaQ=
Subject key identifier: D3:6B:CA:60:3D:5E:C9:F5:CD:AE:3E:E5:0A:F5:66:3C:89:74:60:60
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 8D1B
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/02vKYD1eyfXNrj7lCvVmPIl0YGA.roa
Signing time: Tue 26 Apr 2022 07:38:19 +0000
ROA not before: Tue 26 Apr 2022 07:38:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48754
IP address blocks: 91.212.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36123 (0x8d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Apr 26 07:38:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d36bca603d5ec9f5cdae3ee50af5663c89746060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:1b:d0:3d:f7:63:78:47:c7:c9:15:c3:bb:
ab:98:c2:63:14:ef:73:60:19:75:9d:d4:2c:d4:b5:
35:e5:01:ad:2c:6e:b0:50:5e:7a:e8:d8:81:c7:7a:
fe:f2:65:95:71:5c:7d:d3:53:37:41:f7:97:97:97:
09:c8:eb:74:05:1c:a4:8c:35:2f:fe:6d:71:93:a6:
af:cf:f3:27:e1:5d:12:9b:8c:b7:57:d0:09:3e:19:
23:cc:63:6a:5d:d0:97:57:a6:4a:68:55:24:bd:91:
a5:5a:e4:82:f2:0f:4f:77:c2:f5:53:e6:6f:e6:c5:
1e:46:aa:ff:4f:de:00:75:80:47:5e:5c:0d:24:66:
70:43:fd:e3:df:0c:77:d2:ae:2f:4e:f0:e7:5c:70:
cb:da:b6:4c:90:6c:bc:20:80:e4:de:8f:5e:69:17:
67:af:5d:23:21:d8:70:cf:ee:83:1a:f6:2d:e6:68:
41:01:ac:e4:b2:61:3b:24:6c:0e:c7:68:90:c2:b7:
c3:10:5e:bb:46:bf:00:36:df:6c:bb:3d:2b:2c:c4:
6c:41:f6:8c:60:28:da:0b:fe:62:9b:3c:6d:52:a0:
d6:52:90:6d:17:9d:ee:0e:92:9d:8c:22:4e:c4:e0:
f9:df:ed:69:f9:28:68:7e:92:a7:0f:58:47:db:ea:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:CA:60:3D:5E:C9:F5:CD:AE:3E:E5:0A:F5:66:3C:89:74:60:60
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/02vKYD1eyfXNrj7lCvVmPIl0YGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.23.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b3:1f:73:0c:a6:8f:b1:6e:25:7f:ab:ae:9b:fd:45:4a:b9:
a3:5e:b7:fb:30:b9:67:a4:5a:51:50:8c:fc:f6:60:21:cb:ab:
91:39:ac:e1:cd:30:fd:9c:0a:84:07:6a:30:80:d9:44:60:3a:
a8:09:b2:07:92:3f:7f:c0:78:94:78:cd:e4:78:91:e2:59:45:
e1:df:a4:c4:b9:7f:23:7a:1e:73:bf:a6:d2:60:97:0c:1d:0b:
84:ee:50:02:22:7f:79:81:32:e4:4e:87:81:20:3e:a0:d2:45:
32:9b:c8:96:a4:82:73:e2:32:68:4a:96:b5:89:77:95:ff:c2:
61:31:06:0a:2d:4d:57:06:c8:71:92:74:c6:18:e2:c0:05:45:
6b:51:a9:a1:ff:2e:e1:30:7c:b8:80:88:18:79:e2:f3:10:0a:
b6:ab:f8:04:7d:91:29:18:da:27:01:33:78:25:2c:df:c4:a3:
ca:37:3c:6c:9b:c7:03:c5:8c:6c:7d:73:0d:56:b6:f8:0c:0a:
1e:c0:13:02:2d:bc:af:b2:8b:2c:ff:4a:2f:a2:ba:bd:aa:f4:
c6:97:d1:22:b4:f4:1d:4c:1e:ac:b9:b4:04:42:bb:e8:5e:76:
f3:f3:53:a6:b7:60:5f:89:a8:fe:0c:0d:90:5d:86:00:3e:36:
cc:c1:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:39 2025 by rpki-client