Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/g5UYFdG-z-63twpltRRpFVK2cVU.roa
File: g5UYFdG-z-63twpltRRpFVK2cVU.roa (raw, json)
Hash identifier: tFtgVWj+1TNwoBIkaUJz3jW59jLoX+pfBrjWLGsMkk4=
Subject key identifier: 83:95:18:15:D1:BE:CF:EE:B7:B7:0A:65:B5:14:69:15:52:B6:71:55
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01856D663A13C3A738617E94F530BD45653E
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/g5UYFdG-z-63twpltRRpFVK2cVU.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 91.103.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3a:13:c3:a7:38:61:7e:94:f5:30:bd:45:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83951815d1becfeeb7b70a65b514691552b67155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:3d:13:8c:fc:39:e4:79:6b:19:de:88:65:
72:14:bd:7f:c5:fc:60:36:c0:93:70:12:e3:04:da:
58:6f:f3:d4:62:3d:f5:a9:17:bb:f8:65:da:c1:29:
19:5f:06:ef:c1:14:58:f9:6f:9e:73:50:a4:50:02:
39:8c:84:c1:19:d8:f6:49:8c:ec:5c:80:c6:bd:73:
62:4b:c2:ea:5c:e9:eb:d9:a7:97:b6:a1:6f:37:15:
dc:72:ab:50:9d:9d:b9:be:d1:35:a3:6b:30:0e:f1:
57:6e:c3:74:37:9d:f0:ec:e4:da:f1:45:5d:db:e1:
5d:88:6f:d4:e5:63:48:0e:8f:b3:fa:fc:95:2d:cb:
25:25:91:07:e9:85:f3:61:59:ae:a2:28:d4:e9:10:
df:41:2f:fd:09:0a:bf:bf:e9:53:79:4c:fa:29:8d:
d5:39:b1:65:0d:6a:61:77:03:b6:03:f0:84:32:6d:
92:60:80:64:98:cf:60:34:25:5e:9a:f5:a4:3d:91:
76:70:31:32:68:7d:1c:7d:26:b1:81:43:06:e6:7e:
c3:3b:7d:f7:67:c1:69:7a:79:3a:dc:53:64:d8:3b:
8e:e7:9b:14:94:26:94:ff:5b:c4:30:eb:23:17:99:
4c:39:72:65:7f:63:2c:b5:33:56:ca:6f:d1:86:87:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:18:15:D1:BE:CF:EE:B7:B7:0A:65:B5:14:69:15:52:B6:71:55
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/g5UYFdG-z-63twpltRRpFVK2cVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.82.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:c8:b7:9d:53:c9:84:f0:b5:0d:da:62:a9:3d:a9:15:c4:
a6:ed:99:31:06:1e:6d:d8:87:3a:2d:cb:68:06:36:54:74:a6:
60:16:20:84:ee:e7:78:da:d9:87:c2:2c:26:97:47:6e:05:e1:
79:79:6b:07:fd:fc:c7:19:46:ab:bf:5e:23:c9:01:99:6b:9e:
4d:02:78:6d:92:12:34:d3:78:d5:60:4b:6b:ea:d8:14:0e:62:
a6:34:c1:d2:9d:e7:90:89:25:bb:57:0c:12:39:28:c9:ff:ab:
a8:30:f0:3f:a4:50:4b:28:d3:dc:b2:4c:08:ae:10:86:d6:13:
bf:a6:5f:6d:5c:c6:34:5d:cb:aa:77:97:9a:e8:f9:c8:62:61:
d9:8e:51:0c:9a:5d:ff:81:0d:31:0b:ad:d6:5e:a5:08:3c:2b:
ff:ca:b1:2d:c6:2a:c6:d8:5c:2d:a5:d0:e1:da:ce:a9:bd:04:
11:70:b6:e7:72:9a:42:f3:6f:fe:31:5e:05:18:6c:20:85:37:
d6:72:b5:e8:52:64:27:fc:e8:a0:69:55:ec:39:25:1c:32:5b:
1a:6f:4f:3a:55:1f:d6:ed:84:e4:40:7d:11:e8:4a:b0:e0:a0:
05:97:41:4d:b8:16:0d:67:7a:a9:b9:d4:b7:b7:19:a7:66:66:
67:db:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:53:49 2025 by rpki-client