Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/uC_ARIFr3Y9ZUBgfaEq26jIislg.roa
File: uC_ARIFr3Y9ZUBgfaEq26jIislg.roa (raw, json)
Hash identifier: BlHlz5AhJAldtY8XwzeqYtlWk/dtCK9afC9sG6pRiCA=
Subject key identifier: B8:2F:C0:44:81:6B:DD:8F:59:50:18:1F:68:4A:B6:EA:32:22:B2:58
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 018C112424F7B29896A07D98D4D821C1290E
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/uC_ARIFr3Y9ZUBgfaEq26jIislg.roa
Signing time: Mon 27 Nov 2023 14:17:10 +0000
ROA not before: Mon 27 Nov 2023 14:17:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204922
IP address blocks: 91.199.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:24:24:f7:b2:98:96:a0:7d:98:d4:d8:21:c1:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Nov 27 14:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82fc044816bdd8f5950181f684ab6ea3222b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:9b:50:67:47:1d:89:e8:e0:ad:64:2e:64:
cb:57:c3:17:3b:08:0b:63:4a:02:5f:29:aa:2e:85:
58:11:1d:7c:dd:e6:08:89:22:1a:80:bd:54:5b:18:
60:db:8f:90:38:68:97:f4:a8:25:78:8e:70:05:13:
a6:4f:a4:b0:c6:1f:1f:7e:83:99:5d:7b:29:9e:a1:
0d:6e:60:e7:b5:1e:3d:bc:5d:39:1d:c4:cd:02:c0:
07:b3:6e:50:08:c3:a3:cc:49:11:a2:db:1e:81:33:
96:5c:46:1c:59:05:29:75:ab:19:1c:f9:14:81:2b:
d0:e1:11:7f:65:ed:01:91:b2:f2:67:63:62:3a:a9:
a5:bc:8b:b8:c9:16:0a:77:21:2c:a4:af:1c:9f:8e:
f2:52:7f:da:09:38:29:f6:f6:a7:96:9c:67:e9:0e:
5e:40:94:12:49:0b:bc:70:5b:cb:fb:f0:c6:31:96:
63:1f:8c:22:47:fb:c1:76:7e:32:a5:f7:d4:d9:30:
58:2d:f5:32:36:1d:46:19:6c:6a:e4:72:5d:17:7c:
e4:d5:db:80:54:e4:43:7a:43:44:bf:19:0d:00:fd:
10:f9:c6:cc:b9:2e:dd:9f:1a:c6:85:df:7a:fe:5c:
ee:4e:25:fc:b3:9e:d4:a3:34:33:fa:de:9a:3c:c0:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:C0:44:81:6B:DD:8F:59:50:18:1F:68:4A:B6:EA:32:22:B2:58
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/uC_ARIFr3Y9ZUBgfaEq26jIislg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.113.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4e:17:df:71:c4:24:9c:1c:94:52:b9:b2:39:49:fc:b7:0b:
35:45:16:51:e4:9a:18:fa:a7:68:d9:fe:a8:0e:3e:4b:2e:48:
ed:8c:78:09:3a:e7:ec:8d:73:68:97:2d:38:87:57:1d:35:94:
ca:fa:2e:bb:0f:c2:98:b2:3e:65:b8:04:76:88:c6:cd:2c:44:
96:59:70:c6:2f:38:b6:f5:e4:a7:ae:ef:34:5e:c5:8b:12:a9:
e3:2c:58:c0:e7:02:ba:c1:a7:ad:ad:0d:24:e6:5d:8a:5f:45:
ab:ee:01:65:87:4c:48:f4:50:a2:27:1d:e3:70:31:59:e3:2c:
9d:b2:d0:7c:69:dc:d0:ce:f6:85:f4:01:31:82:59:eb:18:c4:
35:dc:97:6a:56:c6:d7:38:6b:15:cc:cd:27:3d:f1:6d:83:16:
a1:aa:84:13:da:4f:cc:de:e6:c8:d0:77:85:8b:cd:5c:4d:15:
29:b7:4c:bb:c9:92:a7:e7:04:ab:cb:25:76:a9:34:7c:76:1e:
99:4a:e7:c5:d3:fe:7d:9c:6c:41:af:9a:3b:07:f6:43:e5:31:
41:45:02:36:5b:2b:3a:8e:89:4e:f4:68:60:58:24:0a:45:da:
90:85:34:1b:6b:c8:ba:a1:c5:1a:c4:46:02:c7:dd:98:e1:d9:
b9:04:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:18:01 2025 by rpki-client