Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ci247E0JA77ZlFBWCPpbnsIKsoU.roa
File: Ci247E0JA77ZlFBWCPpbnsIKsoU.roa (raw, json)
Hash identifier: qnO65YAHpqSUjeAMG3P8LGaAgc1qozUlPbRyOU8ysTk=
Subject key identifier: 0A:2D:B8:EC:4D:09:03:BE:D9:94:50:56:08:FA:5B:9E:C2:0A:B2:85
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01889772F0905383F157CA8FFA0441F75A13
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ci247E0JA77ZlFBWCPpbnsIKsoU.roa
Signing time: Wed 07 Jun 2023 20:01:12 +0000
ROA not before: Wed 07 Jun 2023 20:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 91.245.91.0/24 maxlen: 24
176.103.121.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:72:f0:90:53:83:f1:57:ca:8f:fa:04:41:f7:5a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 7 20:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a2db8ec4d0903bed994505608fa5b9ec20ab285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:11:02:e9:dc:5b:d3:02:c1:8e:94:7b:62:
2e:2c:be:af:f2:7b:91:ba:f7:2a:d1:39:cb:c1:5f:
86:00:38:ce:21:d3:4e:9c:f7:e1:db:00:54:02:39:
cd:38:fe:e2:da:a7:64:0f:20:a1:06:43:38:99:97:
f1:5e:21:e2:52:c2:32:54:29:9a:79:76:d1:fb:41:
ae:d1:75:bc:6a:30:d1:01:48:7e:9d:b5:5e:b8:35:
ce:63:45:db:8d:f1:19:c2:c5:62:69:98:b5:f9:35:
98:d1:34:d6:3d:d2:2d:b9:46:14:e4:b3:d9:5e:9c:
95:52:0f:d2:f2:d1:4c:f9:97:e6:77:61:9f:fe:0f:
d6:eb:0f:d8:26:12:c0:67:eb:22:c9:89:85:dc:63:
55:1e:b9:62:e1:67:2a:a4:cf:71:81:b4:ba:52:51:
36:a9:ee:ac:c7:ff:d8:e2:ed:d1:9e:63:dc:f4:72:
47:c6:54:b6:27:de:70:5d:47:c2:fb:2e:dd:34:90:
bc:fa:d0:03:f7:fd:f7:f7:59:0e:ce:9d:6e:5a:83:
86:3f:a1:e5:44:f6:60:51:4c:d7:58:1e:8c:62:ec:
8e:a2:db:38:76:0b:30:e6:ec:a7:4b:56:cd:4f:46:
c7:f3:b5:7b:ea:be:33:a5:71:00:59:fd:76:41:d2:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:B8:EC:4D:09:03:BE:D9:94:50:56:08:FA:5B:9E:C2:0A:B2:85
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ci247E0JA77ZlFBWCPpbnsIKsoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.120.0/23
91.245.91.0/24
176.103.121.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3a:fb:cd:90:ee:45:aa:55:f1:b8:c7:a0:26:a0:5b:02:ff:
ff:0d:7e:9a:4e:17:50:7f:f2:ba:f1:3d:1d:87:46:df:77:9a:
9c:ba:fb:63:29:0d:01:37:ff:70:0a:eb:f9:15:13:b2:49:50:
4c:59:0a:01:7b:06:8f:3f:f5:cf:6a:74:b5:63:6c:81:01:8f:
bb:02:e0:2f:b3:32:35:80:ab:94:22:5c:92:e0:51:c8:78:62:
51:64:5d:18:ab:9a:fe:3a:18:ee:13:7b:2d:99:b1:5c:75:e6:
ff:77:9e:72:d6:71:68:a5:12:7d:95:cc:04:41:1e:2e:12:fc:
f9:1b:4b:57:9b:4f:3c:9a:91:fc:41:16:aa:e8:2f:51:fd:16:
53:f2:39:7d:69:5f:e5:25:57:52:37:ff:c4:90:fa:e7:a6:38:
e8:b1:a6:f3:c4:3b:e5:f0:b8:8f:40:dc:5f:23:c3:b6:4f:20:
97:66:84:3d:8d:17:76:ea:ff:27:0c:cf:bf:e0:3f:d3:79:2c:
6f:32:bd:56:c9:f7:0b:7b:b9:f2:9a:07:cc:fe:06:8b:12:ae:
16:a6:e9:61:12:f0:8e:a0:73:d1:f7:dc:b5:32:1f:5a:0c:91:
8e:23:95:27:14:23:d7:13:c1:fd:5f:c0:2b:22:75:a6:19:21:
73:07:a3:23
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiXcvCQU4PxV8qP+gRB91oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwNjA3MjAwMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTJkYjhlYzRkMDkwM2JlZDk5NDUwNTYwOGZhNWI5ZWMyMGFiMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N0RAuncW9MCwY6Ue2IuLL6v8nuR
uvcq0TnLwV+GADjOIdNOnPfh2wBUAjnNOP7i2qdkDyChBkM4mZfxXiHiUsIyVCma
eXbR+0Gu0XW8ajDRAUh+nbVeuDXOY0XbjfEZwsViaZi1+TWY0TTWPdItuUYU5LPZ
XpyVUg/S8tFM+Zfmd2Gf/g/W6w/YJhLAZ+siyYmF3GNVHrli4WcqpM9xgbS6UlE2
qe6sx//Y4u3RnmPc9HJHxlS2J95wXUfC+y7dNJC8+tAD9/3391kOzp1uWoOGP6Hl
RPZgUUzXWB6MYuyOots4dgsw5uynS1bNT0bH87V76r4zpXEAWf12QdKL6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAotuOxNCQO+2ZRQVgj6W57CCrKFMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvQ2kyNDdFMEpBNzdabEZCV0NQcGJuc0lLc29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+p4AwQA
W/VbAwQAsGd5MA0GCSqGSIb3DQEBCwUAA4IBAQCVOvvNkO5FqlXxuMegJqBbAv//
DX6aThdQf/K68T0dh0bfd5qcuvtjKQ0BN/9wCuv5FROySVBMWQoBewaPP/XPanS1
Y2yBAY+7AuAvszI1gKuUIlyS4FHIeGJRZF0Yq5r+OhjuE3stmbFcdeb/d55y1nFo
pRJ9lcwEQR4uEvz5G0tXm088mpH8QRaq6C9R/RZT8jl9aV/lJVdSN//EkPrnpjjo
sabzxDvl8LiPQNxfI8O2TyCXZoQ9jRd26v8nDM+/4D/TeSxvMr1WyfcLe7nymgfM
/gaLEq4WpulhEvCOoHPR99y1Mh9aDJGOI5UnFCPXE8H9X8ArInWmGSFzB6Mj
-----END CERTIFICATE-----
Generated at Mon May 12 00:07:54 2025 by rpki-client