Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/cDonMqsMT-18gF12_6OkQS-pi6A.roa
File: cDonMqsMT-18gF12_6OkQS-pi6A.roa (raw, json)
Hash identifier: J9lbQZp4VpMGJzesXMDBa1LNiUc0G0wI2n0qYMn0vtg=
Subject key identifier: 70:3A:27:32:AB:0C:4F:ED:7C:80:5D:76:FF:A3:A4:41:2F:A9:8B:A0
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01856D663B2F6A3408578B87CB42A3020977
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/cDonMqsMT-18gF12_6OkQS-pi6A.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.82.0/24 maxlen: 24
91.103.81.0/24 maxlen: 24
91.103.83.0/24 maxlen: 24
91.103.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3b:2f:6a:34:08:57:8b:87:cb:42:a3:02:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703a2732ab0c4fed7c805d76ffa3a4412fa98ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:9b:f5:24:92:f0:84:53:14:55:aa:d7:46:
5b:c5:0a:02:9d:ed:68:3e:d3:d7:5b:35:04:3b:b0:
2c:7f:ae:6f:d0:14:83:81:17:7c:a0:a3:c7:bf:7e:
0b:6a:a2:8d:16:2a:ef:84:4a:ed:5a:89:25:e4:a7:
ce:6b:00:19:86:fc:db:a9:89:c0:05:33:ac:56:72:
55:ca:a1:bd:5a:50:c0:6f:14:96:2f:ed:a9:b6:e2:
1b:11:ed:90:26:07:3c:67:bc:e1:19:e1:fd:2e:07:
32:26:7a:b0:29:6a:6e:cf:81:40:5f:ea:1e:5c:46:
b4:f9:ad:9d:16:ca:91:af:c4:3e:1a:1d:4d:ad:0d:
13:1d:58:0d:07:72:8a:13:ed:fb:f1:22:63:b4:b3:
7e:06:d7:06:03:5f:13:24:f7:71:cb:ac:d7:b6:83:
d8:08:bb:64:3f:e2:a6:69:6e:df:c9:02:02:76:1c:
70:45:d2:9e:fc:66:8f:e5:f3:3d:35:7b:a9:f9:ed:
8f:ae:75:9d:18:3b:fa:70:72:c8:01:52:90:c0:45:
bd:ea:41:ef:cb:05:5e:16:1b:51:e0:08:34:58:84:
ae:2c:79:29:2f:0b:87:78:5f:ae:9b:75:86:88:0e:
d0:c8:30:8f:ec:42:b3:27:c9:1f:87:cc:43:48:80:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:27:32:AB:0C:4F:ED:7C:80:5D:76:FF:A3:A4:41:2F:A9:8B:A0
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/cDonMqsMT-18gF12_6OkQS-pi6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7a:13:4e:2b:a2:55:4c:7c:db:47:d0:2e:0d:f2:c5:0b:13:
f7:02:ab:98:88:26:72:22:76:48:3c:5b:ac:68:46:10:69:af:
50:1c:ff:a3:68:80:b6:fa:97:10:71:37:78:d7:a1:f8:93:91:
f9:59:8c:1f:0e:36:39:9d:42:43:49:2c:be:8c:ef:94:7d:d5:
62:73:c4:ad:34:ae:46:be:4a:c8:3b:be:81:e4:1f:22:b5:c2:
bc:94:28:fc:a6:27:b4:0d:28:5d:80:61:23:4b:9c:f1:b2:33:
7b:9e:2b:bb:ca:83:2e:69:fb:99:db:c7:a1:42:71:cd:bc:b6:
a4:92:04:39:99:a8:32:2a:bc:32:9d:7d:a1:05:08:6c:ba:08:
ff:45:63:30:e9:6f:4e:9c:21:54:cb:a5:65:0a:d8:28:1a:9e:
29:c9:0a:bf:d1:5d:e6:2a:eb:1e:f7:3d:88:ae:9c:ed:7d:ad:
d2:29:79:fd:2c:65:51:70:99:0a:e0:e8:05:3f:0b:0a:9d:79:
7e:df:0d:fa:a5:e2:b4:b2:8c:87:4d:91:c4:75:30:08:ff:92:
8c:95:dc:35:ca:c0:ec:09:62:1c:fb:6d:cb:ad:eb:f6:2b:46:
0f:a6:98:15:e3:26:94:69:98:c3:5a:eb:ed:a9:5d:9d:9b:a7:
31:02:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:45 2025 by rpki-client