Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/nvXFPNUDe9gazd3AV_vMoX_Lb_o.roa
File: nvXFPNUDe9gazd3AV_vMoX_Lb_o.roa (raw, json)
Hash identifier: TsRpI5uqGSNfViADBf+kKtQkcVt8vCljCalfQwq3k2A=
Subject key identifier: 9E:F5:C5:3C:D5:03:7B:D8:1A:CD:DD:C0:57:FB:CC:A1:7F:CB:6F:FA
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 01856C9393D35C305BE1B3CA1583F1150C96
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/nvXFPNUDe9gazd3AV_vMoX_Lb_o.roa
Signing time: Sun 01 Jan 2023 09:04:49 +0000
ROA not before: Sun 01 Jan 2023 09:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56624
IP address blocks: 91.237.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:93:d3:5c:30:5b:e1:b3:ca:15:83:f1:15:0c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jan 1 09:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef5c53cd5037bd81acdddc057fbcca17fcb6ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:5f:a1:6f:19:36:e6:56:85:fe:11:5f:10:
74:23:7b:ae:e1:99:06:02:3a:00:39:42:19:4c:c1:
27:35:b9:85:df:02:0b:e2:6a:10:8c:2c:dc:d5:e7:
44:6c:fe:81:b8:d0:e9:72:71:f8:fc:9c:dc:ba:bc:
de:17:e3:a2:55:62:72:44:20:06:51:6e:4c:6d:53:
40:57:5a:63:cf:30:aa:53:6a:7d:1b:ab:28:03:10:
c8:ba:cd:0b:87:cd:ca:34:bd:fd:b9:b2:d3:b6:48:
bf:7e:5f:40:23:2b:f3:b5:1d:33:a5:d5:d4:fe:dd:
88:e4:8d:ae:4a:d0:fb:84:cd:17:db:15:c3:53:c4:
02:36:2f:cd:2c:be:ae:c8:37:14:97:86:32:a8:31:
b3:9e:6f:1d:20:91:9a:25:2c:2c:57:7b:dd:16:b5:
28:4d:0d:b5:3d:aa:31:b4:72:5a:d7:5c:3e:07:2a:
4e:b5:39:62:2d:c0:d0:00:b8:e1:85:e1:7f:1e:cc:
b0:94:a5:b8:a1:47:35:7d:d0:08:cd:11:39:e8:4f:
c7:4f:01:a9:78:09:92:dc:8b:56:09:86:76:5e:33:
ad:ab:59:c9:63:17:5b:a2:be:8d:34:c3:9e:c7:f6:
b8:fc:d9:d0:eb:c4:45:cc:4f:31:f3:56:24:ee:1a:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:C5:3C:D5:03:7B:D8:1A:CD:DD:C0:57:FB:CC:A1:7F:CB:6F:FA
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/nvXFPNUDe9gazd3AV_vMoX_Lb_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:3f:be:b3:83:0e:9c:42:14:af:60:39:92:41:e7:2a:43:83:
7c:60:e6:27:aa:15:55:f4:ba:c1:fc:e4:a3:d8:ea:8a:d0:9b:
ee:44:e3:2c:7c:66:fc:4c:22:b3:c1:56:7b:5a:bf:26:b1:15:
af:b9:ae:eb:c3:da:d1:50:57:a8:3f:26:07:cc:2f:98:a0:26:
d9:b5:6b:59:7c:8f:db:7b:83:a4:50:63:1b:32:fb:48:46:4e:
8f:66:a3:7e:df:b7:3b:77:6e:04:52:74:20:2d:24:e3:4d:dd:
c7:ec:96:bf:ca:7f:fc:61:af:fd:f2:df:82:73:f4:da:e4:b3:
9d:38:3e:9c:22:f8:9a:48:8c:ff:bd:cc:bc:13:0d:76:84:89:
41:08:02:aa:c0:fa:f8:17:4e:2c:83:0c:27:84:cf:60:04:84:
36:50:d8:4f:9e:29:37:d3:c8:e6:1a:7f:76:9e:de:b1:d3:ea:
6b:d1:0b:88:2b:ca:75:3a:64:7b:a5:59:fb:91:b1:52:eb:88:
3a:d1:45:3d:e2:e2:77:78:7a:03:b4:55:6b:b7:91:f3:b7:b9:
a5:f0:19:1a:38:5e:d1:8d:58:f3:f1:3d:f6:1f:b3:75:ca:d3:
e6:fc:59:c4:5b:43:cc:67:68:88:62:39:ab:f0:fe:a2:5c:f5:
6e:80:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:15 2025 by rpki-client