Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ufE4sI2Ie-nr8H4Q_VDHNTniVXc.roa
File: ufE4sI2Ie-nr8H4Q_VDHNTniVXc.roa (raw, json)
Hash identifier: Ux3JznfvDqcmTlfMtW8PO+hqK4kE+yc+3lLDW3pRNUw=
Subject key identifier: B9:F1:38:B0:8D:88:7B:E9:EB:F0:7E:10:FD:50:C7:35:39:E2:55:77
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01857271310B12E53A8CADCAFA7E01FD1534
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ufE4sI2Ie-nr8H4Q_VDHNTniVXc.roa
Signing time: Mon 02 Jan 2023 12:24:58 +0000
ROA not before: Mon 02 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 91.247.36.0/23 maxlen: 23
91.215.152.0/24 maxlen: 24
91.215.153.0/24 maxlen: 24
91.215.154.0/24 maxlen: 24
91.215.155.0/24 maxlen: 24
91.210.166.0/23 maxlen: 23
2001:67c:2f4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:31:0b:12:e5:3a:8c:ad:ca:fa:7e:01:fd:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 2 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9f138b08d887be9ebf07e10fd50c73539e25577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:63:83:ca:a0:1c:fa:f0:ed:f6:87:f0:e7:
ca:20:f6:88:a4:8e:9f:ef:9c:64:67:06:fd:5f:12:
8a:b2:f9:d3:1f:15:03:1f:0b:15:db:74:3b:6f:5d:
17:d5:69:ca:da:37:ca:69:80:d0:3e:c1:02:74:53:
9e:cf:46:cc:bc:62:9e:a8:6e:3b:76:97:2d:49:12:
27:96:f8:f1:be:ba:a2:0d:bf:c3:c5:f1:e9:08:2e:
7d:de:df:03:82:8b:be:64:97:be:77:b8:0c:96:1d:
2e:82:75:3b:af:a5:3c:64:b6:5e:f0:a3:1c:f2:9e:
88:d7:81:da:cb:4d:fb:81:e8:8a:73:73:15:0f:c0:
7a:2d:39:09:6b:9d:9b:86:ba:79:dc:6f:a2:83:71:
e6:98:ac:f8:92:7f:d6:c5:85:75:eb:4f:46:54:13:
87:5f:0e:95:08:9e:b6:10:bd:52:46:f6:3f:27:76:
4a:95:35:79:94:57:6d:7a:83:84:e0:d4:e8:bc:11:
2c:64:c5:ec:c6:35:1f:19:fa:fe:09:68:36:89:fc:
13:74:ea:ef:75:5c:1f:21:29:1d:0d:04:50:c0:22:
e6:0f:96:f3:a9:08:75:6f:0a:c8:01:8d:72:02:6f:
13:21:29:4f:86:79:b2:de:4c:88:21:19:65:89:70:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:38:B0:8D:88:7B:E9:EB:F0:7E:10:FD:50:C7:35:39:E2:55:77
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ufE4sI2Ie-nr8H4Q_VDHNTniVXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.166.0/23
91.215.152.0/22
91.247.36.0/23
IPv6:
2001:67c:2f4c::/48
Signature Algorithm: sha256WithRSAEncryption
9c:14:08:ad:48:86:8b:a3:38:2f:64:82:95:de:40:48:0b:a5:
a1:4b:13:d0:bb:7d:58:36:54:6e:96:65:c5:25:99:b5:b0:59:
60:db:e6:39:1d:3e:43:98:8d:8d:6f:c1:b0:a1:65:2e:7c:b2:
e3:7e:23:85:8e:6c:e8:d9:5f:2f:d8:03:26:5d:6a:de:28:f0:
9e:f9:af:a8:73:e8:83:5f:d0:7f:57:b1:59:ad:bf:b0:5b:0b:
cf:8f:c3:18:13:3d:04:cd:ae:26:ee:ff:e2:26:9f:45:e2:ee:
06:50:3e:8d:be:fa:d8:10:db:3d:a2:47:4c:b9:45:b5:ab:9f:
a6:35:d2:24:a4:0a:96:88:67:58:6f:ec:12:1d:57:be:ce:1c:
c6:05:1e:b6:ee:fb:05:e4:bf:e3:62:52:e5:62:e3:56:59:69:
14:38:e2:ee:97:8a:20:b9:12:90:8a:75:e2:1c:f6:4f:3f:07:
e3:49:ab:12:6c:fc:55:d1:28:1d:1b:0a:97:9a:07:e9:5c:0a:
e5:f8:09:68:45:94:4b:53:d2:25:75:66:14:a0:1e:ed:77:a3:
94:7d:d8:a8:9b:81:04:46:6c:7c:1c:6c:6f:a5:93:0f:92:e8:
1c:a2:8d:92:43:db:d3:d6:13:91:da:c3:c8:5c:82:7e:3c:7f:
8c:00:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:22 2025 by rpki-client