Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/itVyD_36ipye2VsSB1kKSHcWUug.roa
File: itVyD_36ipye2VsSB1kKSHcWUug.roa (raw, json)
Hash identifier: YZnk28FFfzhRauyzkR3uGhMWSD0hhLS1O0cgSB6qe1E=
Subject key identifier: 8A:D5:72:0F:FD:FA:8A:9C:9E:D9:5B:12:07:59:0A:48:77:16:52:E8
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 0185723A1CD92DEA34AB4E30BF8E1D140ACF
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/itVyD_36ipye2VsSB1kKSHcWUug.roa
Signing time: Mon 02 Jan 2023 11:24:48 +0000
ROA not before: Mon 02 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21217
IP address blocks: 91.199.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1c:d9:2d:ea:34:ab:4e:30:bf:8e:1d:14:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Jan 2 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ad5720ffdfa8a9c9ed95b1207590a48771652e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:18:9c:d0:1a:22:2a:85:fc:a1:90:fb:79:
16:22:c4:b6:34:cd:6f:e0:9d:70:94:2b:33:e2:aa:
aa:f7:ff:f5:92:7f:9f:1d:75:25:05:1b:b9:8e:f7:
f8:07:ea:2d:8c:81:8e:e1:9e:41:3f:04:8c:63:0e:
fd:97:bb:f5:b0:45:76:2c:fe:d8:4a:31:33:c9:74:
35:9b:1a:01:36:32:44:4d:64:a2:fa:e6:c7:b4:2d:
44:2c:5e:b5:d9:2d:bc:2d:31:52:19:ef:8f:a5:eb:
aa:11:b6:a8:0d:dc:ee:51:ef:87:b8:37:27:70:ce:
87:f6:3e:52:78:6a:d8:e8:9b:24:93:36:58:76:bc:
e0:04:c9:9f:07:22:9a:f3:6e:b5:b1:09:18:57:9c:
9d:99:bf:fd:5e:fa:2e:5c:7f:d9:2d:8a:a4:72:a2:
a1:98:eb:cd:ac:18:ad:5f:25:bf:8a:96:84:9a:69:
ab:35:43:f4:3e:06:aa:c0:b0:11:fa:aa:16:b0:f8:
dc:f8:66:ea:58:af:9b:9f:85:2e:c3:cf:b9:86:48:
b6:57:ae:f1:55:08:1b:4a:f3:da:33:41:e4:8a:37:
e5:85:a3:e7:e9:de:42:05:a7:92:0b:d0:a5:6f:14:
8b:85:37:90:f4:fa:c5:dc:ae:e0:1b:e6:ae:8e:cc:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:72:0F:FD:FA:8A:9C:9E:D9:5B:12:07:59:0A:48:77:16:52:E8
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/itVyD_36ipye2VsSB1kKSHcWUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8b:e5:bb:59:14:ee:b3:32:13:e1:92:8a:b2:b2:dc:31:53:
a5:0e:b9:02:ea:3c:22:eb:07:1b:55:50:f9:9b:28:a7:f7:d2:
a4:8a:45:56:fc:96:83:fd:20:9d:fc:ea:2b:53:5b:09:fa:66:
79:13:20:60:6a:e3:ff:99:13:56:36:fe:c8:e1:2c:f2:18:fc:
8c:c2:06:b2:a6:7b:a6:bc:94:2c:d0:49:c3:da:e3:9c:6d:f8:
22:b5:a1:c7:c9:11:02:d7:83:c1:0f:06:47:1d:df:37:54:8a:
56:c6:4d:57:70:8a:5e:56:da:23:56:57:96:7f:30:12:24:c9:
33:75:81:36:1c:f1:fb:73:70:3c:bc:61:3c:6a:f9:60:94:c2:
b7:9c:39:29:8f:5a:26:09:4a:c5:ba:af:45:f4:01:0a:67:65:
db:0f:3e:6e:00:0d:53:6e:43:1a:11:ab:5f:72:a6:0e:95:6b:
90:ee:7c:8c:15:a3:33:b4:e9:aa:de:35:ee:f8:0f:b6:34:20:
cc:8d:59:ac:61:0c:f3:ae:c3:ec:27:ed:f6:c8:28:02:35:63:
87:4b:ef:dc:5b:b9:c3:55:41:d8:a3:5f:ef:e5:d9:6f:7e:a1:
d0:19:0f:6c:23:e5:0f:88:1f:41:b3:89:c9:ea:1c:b6:59:de:
95:08:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:49 2025 by rpki-client