Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/9vRa475g0a1Twj4InNQgMHcHlXg.roa
File: 9vRa475g0a1Twj4InNQgMHcHlXg.roa (raw, json)
Hash identifier: dkxp2WhfV+zOMitzmwGwQ45Ynf4dAB4Z8Wq5uBw4Y/I=
Subject key identifier: F6:F4:5A:E3:BE:60:D1:AD:53:C2:3E:08:9C:D4:20:30:77:07:95:78
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 018832A1F21987D39453C7459D933C13D947
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/9vRa475g0a1Twj4InNQgMHcHlXg.roa
Signing time: Fri 19 May 2023 06:10:54 +0000
ROA not before: Fri 19 May 2023 06:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43668
IP address blocks: 91.197.184.0/22 maxlen: 22
185.225.196.0/24 maxlen: 24
2001:67c:15d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:a1:f2:19:87:d3:94:53:c7:45:9d:93:3c:13:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: May 19 06:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f45ae3be60d1ad53c23e089cd4203077079578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:f6:b7:46:44:dd:1b:4c:7b:7e:f7:0f:4b:
c0:30:25:ca:03:e9:53:0a:5a:78:58:6a:01:8e:81:
82:0a:7e:a4:00:4d:04:d6:0f:f3:45:7b:5e:e6:8c:
39:5a:25:8d:09:09:7d:e4:54:e5:6d:20:b3:7e:ab:
a1:59:0d:72:e9:d7:74:be:d9:a3:ff:dd:09:c1:20:
53:be:39:25:55:f0:ac:ad:d6:36:c3:f9:61:0f:93:
0e:3d:14:e1:a5:80:39:4c:5a:4b:bf:a5:4d:f6:0a:
21:30:39:db:28:9e:72:89:ca:5a:8f:5e:13:27:7f:
fb:60:4e:56:2e:21:a6:c5:0b:c4:23:9a:57:0f:73:
2e:5f:1a:b1:05:0e:4b:38:66:c8:19:b6:ef:b7:70:
55:21:42:56:43:1d:ca:fb:62:cd:a9:4b:a7:13:3b:
67:d2:f8:37:20:92:a3:91:ca:c4:4e:4f:9e:c2:f8:
ca:7e:6b:fa:31:90:5e:aa:b0:34:04:05:5a:0b:7d:
08:e6:6b:d3:12:e9:4e:a4:3d:3d:17:92:0b:be:df:
3b:34:cc:1c:72:8a:9f:6e:41:c1:7b:84:aa:07:31:
18:68:ab:2d:68:92:71:1b:4a:4d:26:90:ab:9f:6e:
09:3d:e8:06:6b:72:a3:67:7e:d1:96:a6:64:f6:53:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:5A:E3:BE:60:D1:AD:53:C2:3E:08:9C:D4:20:30:77:07:95:78
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/9vRa475g0a1Twj4InNQgMHcHlXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.184.0/22
185.225.196.0/24
IPv6:
2001:67c:15d8::/48
Signature Algorithm: sha256WithRSAEncryption
a4:02:d9:73:c0:98:3a:3b:53:c1:44:dd:b4:5e:2a:b1:0d:82:
a8:ac:c3:ee:be:61:43:68:fc:c6:ad:c9:3f:ac:7a:a3:38:0a:
9d:e5:1b:c2:0c:5d:9b:ab:14:36:93:9c:20:a8:64:52:3b:84:
f8:fe:c6:23:62:8c:30:81:0e:de:4b:de:cc:a3:86:c8:17:10:
73:8c:33:1c:a3:54:02:2d:50:07:8f:a4:fd:ec:ab:a2:43:10:
2d:ae:1e:85:7c:9a:12:4f:38:3c:6a:b5:88:ea:ca:b1:d9:8d:
23:4d:4a:79:85:40:a4:37:81:18:cf:89:43:fc:8c:29:bf:9c:
ab:49:89:6c:15:03:a7:7c:2e:39:e7:df:42:1d:0b:e8:06:42:
71:db:12:14:13:22:2d:35:20:b5:83:9a:c5:22:42:d9:02:57:
7a:46:59:7b:ab:2b:b6:80:11:7c:0e:3d:e0:c6:84:05:24:2b:
a5:ec:56:04:73:9d:59:e5:cd:eb:83:34:61:1c:85:30:bf:2d:
55:b4:dd:a3:95:b1:69:fa:e8:2b:b9:0d:b3:e8:29:1b:69:eb:
82:7b:6e:ce:61:cd:8d:0b:31:fa:57:51:2a:11:7e:99:79:b6:
dd:2d:0d:fe:7a:c5:a2:96:35:10:2d:c9:7e:73:fe:59:35:8e:
d9:29:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:44 2025 by rpki-client