Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/1-gX3Rd5WrXNXSqVv_cuYzcw_WC0.roa
File: 1-gX3Rd5WrXNXSqVv_cuYzcw_WC0.roa (raw, json)
Hash identifier: P2Ui5ypgtOdN1saX5Ge2CGCtYnKQ/ySJhAPQ6HhWpHo=
Subject key identifier: FA:05:F7:45:DE:56:AD:73:57:4A:A5:6F:FD:CB:98:CD:CC:3F:58:2D
Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial: 02F0152D
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/1-gX3Rd5WrXNXSqVv_cuYzcw_WC0.roa
Signing time: Tue 28 Jun 2022 11:12:02 +0000
ROA not before: Tue 28 Jun 2022 11:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56565
IP address blocks: 91.230.251.0/24 maxlen: 24
194.0.209.0/24 maxlen: 24
91.208.238.0/24 maxlen: 24
91.236.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49288493 (0x2f0152d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
Validity
Not Before: Jun 28 11:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa05f745de56ad73574aa56ffdcb98cdcc3f582d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:85:73:ac:ff:05:80:27:06:eb:47:2f:8a:
4b:17:00:2b:75:39:34:ad:01:71:15:27:63:a8:5d:
4f:b8:85:43:d8:ab:4b:5d:53:6d:c8:39:31:ba:a8:
92:b7:48:d8:9f:1a:be:1d:94:69:75:f2:ba:57:d8:
47:79:ea:11:5d:98:10:38:f6:ed:ad:f6:65:b3:b4:
a1:f7:ff:e2:0f:03:40:70:82:a8:3a:50:a8:83:79:
db:0e:e5:19:3d:1d:48:03:66:6e:97:bd:53:eb:29:
31:67:1c:22:6c:44:64:93:45:04:80:61:37:03:ca:
47:c1:76:34:c8:74:ee:b8:96:a1:ac:4c:2d:68:70:
c4:ba:a7:e2:37:3d:86:f2:5e:bc:9f:b4:1c:98:bb:
b0:42:98:51:87:5f:27:0a:f4:48:c8:d7:60:fc:63:
d5:81:f5:82:fc:ae:13:e7:fe:22:de:d0:85:02:4d:
b2:21:98:32:45:7d:81:62:4a:94:07:2b:c1:4a:64:
65:9b:d5:bb:06:4d:f4:b9:77:f9:47:0e:75:ee:02:
5a:cb:1c:b5:a9:ff:e1:db:f4:28:7b:4d:94:99:d9:
ba:0c:b6:72:03:a6:cf:cf:89:46:2d:3e:90:f9:4e:
9c:06:cd:7b:f0:b3:75:ff:ee:7c:84:49:a1:9b:e4:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:F7:45:DE:56:AD:73:57:4A:A5:6F:FD:CB:98:CD:CC:3F:58:2D
X509v3 Authority Key Identifier:
keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/1-gX3Rd5WrXNXSqVv_cuYzcw_WC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.238.0/24
91.230.251.0/24
91.236.205.0/24
194.0.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5b:43:74:e6:f2:bb:e5:b4:85:b5:30:35:73:23:5c:75:ad:
5f:95:11:13:d3:8c:21:12:98:45:4d:c6:61:b9:40:9c:9e:54:
c4:29:a3:93:0f:cc:a0:c6:84:ca:d4:39:ce:7b:87:fd:b4:a7:
75:6a:67:d8:4e:27:ab:c7:4b:fa:d0:f4:8a:b0:54:6b:d6:e8:
69:23:8f:79:2f:f1:af:06:05:26:dc:ab:3b:54:2f:99:92:1b:
f4:b2:9a:50:b0:25:62:6b:f5:1b:b4:4d:19:f9:29:32:cd:59:
b4:ed:0a:7f:7a:8b:f8:a8:df:38:c1:15:a6:ac:e5:4a:fc:80:
3d:b4:59:74:c9:07:b3:aa:8e:38:ec:42:ce:ca:82:2f:d4:e7:
17:b8:9c:c2:7a:78:fd:85:0f:35:97:00:49:35:5f:30:4d:23:
c9:b3:8f:4b:f7:3b:4a:9b:1e:d5:29:47:04:18:37:8b:fa:5f:
bd:03:cb:c8:bc:7d:ed:d2:12:9e:4c:a0:75:57:56:47:df:76:
2a:d1:49:6e:f9:24:2a:eb:d0:c9:f1:e5:48:6d:96:cd:19:3c:
46:2f:8c:f0:d9:21:56:5d:5c:83:5f:75:a1:51:68:ef:bd:3d:
0a:00:e1:26:90:96:c0:1d:e2:3b:c4:c5:59:42:95:d3:36:10:
a4:61:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:07:20 2025 by rpki-client