Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/rFRAqjFFPzWWb5LHhoDuduyAfkE.roa
File: rFRAqjFFPzWWb5LHhoDuduyAfkE.roa (raw, json)
Hash identifier: ngvPEe7rAg8tw/aX9e8gAdVmK7d74hoMAHwFpBhWiW4=
Subject key identifier: AC:54:40:AA:31:45:3F:35:96:6F:92:C7:86:80:EE:76:EC:80:7E:41
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 074F5A3A
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/rFRAqjFFPzWWb5LHhoDuduyAfkE.roa
Signing time: Fri 11 Mar 2022 11:22:29 +0000
ROA not before: Fri 11 Mar 2022 11:22:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.82.0/24 maxlen: 24
91.103.81.0/24 maxlen: 24
91.103.83.0/24 maxlen: 24
91.103.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122640954 (0x74f5a3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Mar 11 11:22:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac5440aa31453f35966f92c78680ee76ec807e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:a2:2e:d1:ab:12:62:d3:b3:2b:e1:ee:11:
7b:b3:aa:b1:f5:6d:36:51:2b:fb:46:49:e4:26:67:
f9:1d:d2:2b:49:72:e4:8c:6e:76:3b:71:15:57:36:
31:68:7c:8a:2f:5a:d5:86:21:21:51:ec:ba:01:66:
7a:2f:5f:6e:f9:0f:73:2b:33:20:bd:f5:be:6f:df:
a6:f2:74:9c:36:de:30:5e:7d:ec:b7:ef:10:31:09:
cf:fc:62:83:2a:a0:5e:6f:3d:22:28:10:1d:8c:12:
41:84:e6:e3:49:bc:b5:a0:62:43:36:99:6d:26:48:
8f:e5:34:7f:ef:b8:31:a8:7b:99:46:72:59:38:c3:
4b:66:0e:57:3e:8d:c6:0b:7e:74:92:92:ac:a6:cd:
45:4c:e0:08:27:79:9b:05:6c:ed:91:c9:66:ef:c4:
7f:57:be:58:7c:70:d6:a2:94:e6:5f:c7:86:28:e7:
44:03:b8:3f:90:53:e9:9e:72:6e:09:9f:d5:30:31:
a1:9f:37:dd:81:64:c2:85:05:44:d5:12:86:85:48:
e5:4a:9e:f5:f5:22:1a:d7:19:b9:65:22:14:60:4d:
70:c4:31:5b:9b:10:9f:8b:ef:18:58:7a:cf:8b:35:
c5:05:1e:ab:5f:af:c0:b4:aa:e7:91:fd:51:b0:bf:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:40:AA:31:45:3F:35:96:6F:92:C7:86:80:EE:76:EC:80:7E:41
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/rFRAqjFFPzWWb5LHhoDuduyAfkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
65:79:42:6c:55:bf:07:f5:9e:df:24:33:4d:29:ab:fe:b8:07:
32:44:aa:e8:3d:58:08:4d:1f:37:5c:72:a2:6e:1b:3e:21:1d:
cb:70:65:03:09:1d:5b:d1:d8:21:ac:b8:61:c6:41:69:25:a9:
de:2a:6d:a7:32:b7:a6:b1:73:c9:eb:6c:b7:69:1d:71:10:ec:
d5:4d:66:c1:16:a5:02:fa:9b:71:73:18:76:22:76:42:22:d4:
14:47:d6:e8:8f:a7:63:53:6b:1d:e9:82:57:b1:5c:52:2d:f7:
cb:43:96:20:0a:f2:81:09:23:3f:32:a3:00:c1:a2:f7:38:89:
a7:93:bb:0a:ab:ca:16:5e:01:e7:b5:a2:54:ac:7e:5b:11:ca:
50:10:4f:53:5c:bb:f9:8d:98:48:2c:d3:e5:36:a0:67:7f:44:
9a:05:2c:8f:76:34:c5:8b:6d:07:7e:10:17:9b:83:06:52:fd:
70:27:f4:d9:fe:72:cd:86:6d:65:e5:fc:fa:fc:c4:dc:96:e3:
de:6d:30:b0:c3:89:98:5a:5e:26:76:8d:b5:a5:38:20:bc:2d:
c4:67:eb:af:28:6d:40:31:72:51:fb:18:28:30:85:88:5f:28:
a1:b5:a4:8a:13:d0:34:d4:c5:16:46:21:c0:ad:b5:df:f1:61:
19:22:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:57 2025 by rpki-client