Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/Pt0X7CahD9GmRQ5DYl7xWmW1n7A.roa
File: Pt0X7CahD9GmRQ5DYl7xWmW1n7A.roa (raw, json)
Hash identifier: BBEEB7NgVIGZSLzX6swy0PgFXzHChe7lY9feze+c3Ss=
Subject key identifier: 3E:DD:17:EC:26:A1:0F:D1:A6:45:0E:43:62:5E:F1:5A:65:B5:9F:B0
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01885D379A2F03E1CEAD6440BCBB1701429D
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/Pt0X7CahD9GmRQ5DYl7xWmW1n7A.roa
Signing time: Sat 27 May 2023 12:38:24 +0000
ROA not before: Sat 27 May 2023 12:38:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.81.0/24 maxlen: 24
91.103.82.0/24 maxlen: 29
91.103.83.0/24 maxlen: 24
91.103.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:37:9a:2f:03:e1:ce:ad:64:40:bc:bb:17:01:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: May 27 12:38:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3edd17ec26a10fd1a6450e43625ef15a65b59fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:04:c8:19:98:26:1e:19:55:2b:ee:3f:a5:
1a:83:aa:ae:ec:4e:30:da:e0:3f:5d:08:80:fd:ac:
44:ad:49:71:50:be:5e:aa:10:05:08:2c:cc:0b:4c:
c2:aa:5b:0d:9d:42:49:a4:c5:98:7b:f1:d1:b6:57:
c8:8d:d2:27:98:8c:22:ef:9e:f8:32:cb:27:42:78:
47:6d:38:a5:1a:16:fd:75:fb:e6:73:f1:cd:4b:83:
82:3f:73:e9:36:e8:87:02:9c:e4:93:14:a5:12:b5:
01:6d:a7:38:05:55:de:72:19:a1:78:fe:c3:05:04:
ce:bc:2a:a2:6b:cd:6d:fc:17:90:9d:71:a4:3b:f1:
e6:7e:e7:6c:d3:3c:d6:e5:a0:70:5a:50:39:ab:3d:
1f:d6:33:96:26:56:38:9c:85:59:d5:6d:35:91:6c:
25:83:f2:98:0a:28:2c:ef:5d:bf:09:ef:eb:80:6e:
23:4c:53:c3:29:65:68:45:09:66:22:5a:1d:80:47:
c7:ea:b0:02:d5:34:ed:cc:e4:95:d7:f2:6b:bf:2f:
e6:09:51:63:43:83:d7:57:31:94:e9:e9:d4:67:44:
7b:f8:e2:de:4c:fa:ad:d4:c6:48:bd:76:a6:51:2f:
c3:23:31:6c:a1:44:7a:cf:c6:ac:9f:69:cf:c7:af:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:17:EC:26:A1:0F:D1:A6:45:0E:43:62:5E:F1:5A:65:B5:9F:B0
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/Pt0X7CahD9GmRQ5DYl7xWmW1n7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f6:84:5c:a0:de:5f:de:d8:75:98:06:ab:9f:d2:0c:87:63:
64:7e:43:05:fe:1f:2a:54:b1:f1:13:6c:85:00:87:c7:67:33:
0d:0a:7d:3b:5b:ba:30:18:4c:c1:85:e0:8e:37:25:50:e2:b6:
a4:37:e1:fd:63:72:32:28:60:8c:25:4f:90:a2:97:cf:6f:e0:
f7:3e:e9:c6:0d:01:b7:87:40:7d:01:c7:53:55:b1:66:08:5d:
87:7d:9a:ec:04:2b:10:21:d3:8b:c3:fa:c0:56:10:ca:cf:05:
1f:48:6a:e6:23:b1:a3:97:c7:4c:d5:ce:d6:7d:99:31:57:5e:
f6:c7:62:d1:d1:80:68:15:8a:9e:56:53:b6:bc:c7:98:dd:5c:
ff:95:4f:7f:f5:e3:d2:ca:31:57:72:cb:05:40:a2:80:f8:a9:
c1:ea:42:40:a3:17:f2:c3:31:42:fe:cf:66:57:54:97:19:6b:
d4:3a:f4:df:2e:9a:31:96:b0:a6:7c:c9:ad:78:93:f8:87:42:
53:a0:fd:0a:17:ab:03:14:e1:2b:14:5b:ee:7d:0d:d0:e0:9d:
2c:68:2f:07:7c:52:46:bc:a5:19:2a:ac:15:13:83:fa:76:85:
29:02:a5:03:68:89:46:b0:a9:5a:61:08:c7:8f:24:ea:a6:b9:
b4:ca:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:56:10 2025 by rpki-client