Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/94aky9JA9QZHAgHje566rXM5TZA.roa
File: 94aky9JA9QZHAgHje566rXM5TZA.roa (raw, json)
Hash identifier: HXVkl5eyvnZMKkdBZ6ltlDw0stiRZa/3kFeF55rybHo=
Subject key identifier: F7:86:A4:CB:D2:40:F5:06:47:02:01:E3:7B:9E:BA:AD:73:39:4D:90
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 063A8F49
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/94aky9JA9QZHAgHje566rXM5TZA.roa
Signing time: Mon 23 May 2022 17:26:30 +0000
ROA not before: Mon 23 May 2022 17:26:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213095
IP address blocks: 91.239.56.0/24 maxlen: 24
163.114.159.0/24 maxlen: 24
2a07:fb40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104501065 (0x63a8f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: May 23 17:26:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f786a4cbd240f506470201e37b9ebaad73394d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:74:89:af:e9:74:6d:29:ff:f9:55:f3:2d:
45:4e:21:b8:33:98:01:32:d1:c8:69:85:38:e1:bc:
a9:14:96:4a:26:eb:f8:5c:3c:bc:01:2f:ad:8d:26:
27:e6:83:fa:37:10:a4:b0:9c:9d:50:47:d3:b7:12:
5a:f7:b4:9b:a5:ad:7a:6b:22:99:91:0c:6e:80:66:
4b:71:69:dd:73:22:b6:ac:b1:5c:ce:22:66:f4:6b:
fa:a2:38:9a:47:7c:e7:99:a4:c3:12:c6:be:bd:8f:
98:aa:db:58:47:63:49:dc:96:66:1c:8a:21:67:38:
10:4a:5a:55:b2:89:66:4e:61:20:10:0e:42:4d:d4:
06:44:5a:bf:3b:c1:65:99:02:c1:17:c7:c2:f1:fa:
f4:12:1d:21:7d:a2:4a:bc:94:b6:7b:f0:5e:b9:a3:
17:76:9d:9f:1a:2e:9e:cf:e7:a2:7e:03:e9:fa:03:
21:9f:c3:ae:45:85:fc:a8:c3:6f:e2:55:e9:a4:b1:
96:90:61:4f:cb:3c:d6:ad:8c:d0:54:6b:bf:d1:81:
56:63:c7:74:1a:01:f8:38:e1:bd:5f:25:0b:c4:7f:
40:16:8f:96:35:82:3e:d5:3c:9b:ed:55:84:cc:86:
d5:03:6b:70:3c:f7:85:d9:27:f9:b5:2c:0a:ab:58:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:A4:CB:D2:40:F5:06:47:02:01:E3:7B:9E:BA:AD:73:39:4D:90
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/94aky9JA9QZHAgHje566rXM5TZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.56.0/24
163.114.159.0/24
IPv6:
2a07:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
08:5d:37:f3:53:c3:13:3a:d7:fd:c6:59:e4:48:6e:82:bf:b1:
08:54:f3:cb:76:91:2a:87:ed:f9:d4:19:1c:a5:58:2b:4b:7c:
5b:c7:2d:8f:ff:7e:60:5f:67:87:bb:9e:10:00:47:4a:4a:ad:
dc:39:74:35:de:58:89:cd:45:34:e0:a9:54:de:ce:ff:ca:97:
3a:7b:81:a1:c3:76:75:a1:00:10:a2:ac:5f:de:e5:f3:b1:58:
b0:66:ab:ec:78:df:1e:88:c6:46:b1:3d:fa:ef:4a:49:6a:15:
8e:7d:e4:aa:8d:de:4d:5e:85:3b:22:7e:21:9a:0d:0b:6a:44:
23:df:e1:d2:7e:81:bb:df:29:d3:8f:03:3a:32:a6:f7:a3:96:
a7:c3:87:7f:9e:d5:9e:e7:74:04:f4:2b:c7:61:d4:47:ab:9c:
5d:3e:a9:46:65:b2:4e:37:79:ab:72:ab:af:7e:7b:b1:7d:19:
7f:70:aa:7c:4a:a9:d8:40:70:be:84:3e:06:db:1e:c6:74:ac:
66:bf:51:11:ea:1d:f7:62:24:56:96:ae:b0:ac:be:6f:d8:24:
27:4c:63:be:1d:6a:6f:bc:61:87:d2:9d:e4:aa:68:db:ca:9f:
84:65:80:5e:df:c2:17:e2:f9:61:30:a9:5c:73:bd:55:82:e5:
d8:97:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:35:47 2025 by rpki-client