Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/263MYidsMH6XsvNM9CNjVdje9rc.roa
File: 263MYidsMH6XsvNM9CNjVdje9rc.roa (raw, json)
Hash identifier: fz2DoSkDjq3EEsBUvcj8rPDXZNQHf+Zk3uYm5YVNkd4=
Subject key identifier: DB:AD:CC:62:27:6C:30:7E:97:B2:F3:4C:F4:23:63:55:D8:DE:F6:B7
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 0185715E94654903EA5C7A5263C0998B2E68
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/263MYidsMH6XsvNM9CNjVdje9rc.roa
Signing time: Mon 02 Jan 2023 07:25:01 +0000
ROA not before: Mon 02 Jan 2023 07:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212631
IP address blocks: 91.220.243.0/24 maxlen: 24
2a0d:2380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:94:65:49:03:ea:5c:7a:52:63:c0:99:8b:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Jan 2 07:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbadcc62276c307e97b2f34cf4236355d8def6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:00:89:4a:f7:85:d7:48:b4:81:ec:7d:03:
51:e3:4c:b4:0b:5e:f8:41:6b:43:7e:dd:7a:72:30:
25:c7:cc:21:d0:a1:07:40:db:28:6f:f2:16:b5:7d:
98:85:4c:b5:c4:00:6c:e3:93:68:25:7e:9b:67:fb:
e7:35:f5:6e:25:4f:72:f9:42:7b:c0:50:51:33:7b:
13:7b:c1:cc:87:15:f8:e5:44:b8:05:e6:cd:5f:df:
3e:24:2e:fa:93:26:f2:c0:53:3e:3a:9d:d7:7a:ac:
7c:74:bc:23:db:b5:8e:73:24:37:34:a2:8a:44:1e:
38:9b:f9:60:cd:92:cf:3c:83:06:34:cf:38:07:5d:
85:74:00:46:ee:67:ef:7e:fa:70:fe:8e:29:81:9f:
38:08:ff:65:29:11:bb:b1:36:fd:43:ee:c1:69:5f:
a3:3c:e6:c8:48:2f:d0:29:0a:3c:e1:c5:5f:73:a8:
d0:20:99:40:2f:1e:a6:e7:bf:8a:b1:9d:a7:4d:ae:
be:8e:dd:68:55:fa:2f:28:39:e0:09:0d:e2:ab:cb:
ca:25:6f:f3:f6:f3:58:3f:2a:34:52:a8:b1:0f:80:
52:9c:8b:39:3d:72:d6:fe:e9:33:30:d6:ae:1b:d3:
f3:a0:55:60:61:bb:a6:67:bb:6e:c1:15:c6:0b:25:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:CC:62:27:6C:30:7E:97:B2:F3:4C:F4:23:63:55:D8:DE:F6:B7
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/263MYidsMH6XsvNM9CNjVdje9rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.243.0/24
IPv6:
2a0d:2380::/29
Signature Algorithm: sha256WithRSAEncryption
20:41:1d:0d:d8:6e:75:99:42:8a:8c:57:f1:2c:61:38:a1:ab:
69:fd:76:57:77:91:06:00:25:0e:21:b6:32:cc:7f:35:74:6c:
71:84:59:ee:ce:1b:c6:77:23:a1:b5:d5:4e:45:e8:d6:ea:1b:
89:83:03:cf:2e:80:4a:ba:e9:89:5d:82:39:a4:be:98:13:19:
08:bd:0d:4c:8b:7d:f9:ae:c6:92:c2:be:33:d5:c8:5e:b9:bb:
c2:00:70:12:b4:b6:83:53:80:33:f9:a1:84:6c:4c:d6:28:26:
8b:af:3d:f3:4a:a7:8b:80:7a:5b:d0:0a:32:0d:18:11:88:ee:
18:4d:2b:11:1d:ad:94:b5:82:0f:64:93:4f:3d:21:0c:b7:ef:
68:c8:2e:5f:2b:d6:3b:05:76:30:82:e6:d3:14:00:34:fc:c8:
9e:b5:a6:f1:03:81:96:e1:ff:7b:1f:1e:e2:df:c7:ee:90:bd:
fd:6b:fc:d0:d4:62:2b:bc:fe:dd:60:9f:05:ab:9e:80:1b:2a:
78:78:d8:1f:1c:f1:fe:7c:75:2a:56:23:d4:ba:f0:ca:a4:39:
fe:3a:58:28:4b:c5:d0:cb:07:71:17:81:9a:2f:98:61:eb:c9:
1a:1a:fc:61:7c:86:e3:e7:13:b8:d1:03:32:e2:10:d1:a4:61:
59:ca:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:00 2025 by rpki-client