Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/aCxVPycg5zTl8NxcaMrigU7bOu4.roa
File: aCxVPycg5zTl8NxcaMrigU7bOu4.roa (raw, json)
Hash identifier: RDCWqr1+x7MEgFhWRQMgK5kJUXX89XNDkcj1DU3TYFY=
Subject key identifier: 68:2C:55:3F:27:20:E7:34:E5:F0:DC:5C:68:CA:E2:81:4E:DB:3A:EE
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 018BF61CEA49E5027BDE356CB2551BCF9CF8
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/aCxVPycg5zTl8NxcaMrigU7bOu4.roa
Signing time: Wed 22 Nov 2023 08:19:31 +0000
ROA not before: Wed 22 Nov 2023 08:19:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 91.208.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:1c:ea:49:e5:02:7b:de:35:6c:b2:55:1b:cf:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Nov 22 08:19:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=682c553f2720e734e5f0dc5c68cae2814edb3aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:04:4d:34:87:e6:08:6e:11:b7:1b:ea:e1:
19:2a:fd:1c:94:b1:c1:d4:ad:be:b8:5a:2b:dc:0a:
38:77:99:fc:c6:c9:d4:cc:de:b4:7b:9d:71:5c:bc:
45:5c:37:69:56:6d:e6:59:0e:b4:97:bb:44:5f:e4:
f4:09:3e:47:07:df:60:2a:3d:de:4c:d8:4e:48:3b:
56:36:fa:5b:c9:79:a8:7e:f1:4c:46:42:d5:fd:4f:
eb:99:6a:68:10:52:8a:cd:5f:da:75:80:36:15:0a:
27:79:22:26:1e:38:a6:e5:2e:e0:64:9d:cd:61:55:
6c:ed:ae:3e:30:81:6e:3b:8d:76:cf:a3:da:c1:56:
0a:98:df:0f:35:42:62:50:d3:5d:07:15:88:50:9a:
3d:49:66:b4:f7:a7:0f:69:54:e6:93:65:9a:64:18:
85:bd:41:ba:42:32:b9:1a:76:4c:68:fa:70:43:60:
5f:a7:92:66:16:02:05:fd:c0:5f:02:39:cc:00:c6:
98:70:2e:09:17:91:9c:e0:3e:c8:9e:0e:b8:1c:5d:
8d:ed:29:10:55:cc:d7:4b:c6:9a:35:18:73:a0:02:
47:b7:b8:65:93:fc:0f:4a:36:a0:a3:49:60:42:e7:
3f:40:9c:13:0e:4b:9a:41:b0:7d:85:46:1a:f6:ed:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:55:3F:27:20:E7:34:E5:F0:DC:5C:68:CA:E2:81:4E:DB:3A:EE
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/aCxVPycg5zTl8NxcaMrigU7bOu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:eb:e5:8e:73:49:8c:5b:18:53:35:26:90:41:5f:af:41:db:
75:11:69:cc:07:08:2f:81:09:67:d6:1a:20:f9:d9:88:15:97:
7a:db:5b:a7:08:e4:6f:ae:f8:5e:16:ad:23:c2:d2:96:6c:71:
1d:2b:4d:9b:6d:f0:b8:6c:5e:23:80:b8:b9:13:c3:7a:dc:07:
53:50:dc:dd:6a:b2:8c:03:22:f5:aa:31:eb:fb:87:5d:da:9e:
48:55:03:5d:a5:65:6d:5f:b0:eb:0a:af:ad:4b:69:93:ac:0f:
b2:04:8c:4e:1e:fe:1d:40:f7:84:a3:1f:e8:51:a7:d3:e9:7c:
1b:71:a5:91:ff:d3:e9:fd:dd:cf:f7:7a:69:c2:b4:9e:38:b4:
8a:b4:cf:e2:30:2b:10:cb:71:ba:ff:d9:e9:12:ef:83:e7:1f:
19:81:37:49:ba:bc:04:f0:80:2f:ca:5d:88:91:98:3f:a5:3e:
3e:cd:53:6b:0d:14:73:62:f8:cf:94:30:43:89:62:76:6d:ec:
41:17:b7:94:a3:68:41:bd:3d:e4:79:4d:fc:d5:98:d1:84:50:
85:c0:6d:d7:4c:cb:80:ea:88:63:92:fd:d1:e0:35:3b:ea:cd:
6a:c3:36:63:ad:7d:33:4b:c5:65:2e:f6:1f:a0:0b:c0:14:14:
da:b8:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:42:36 2025 by rpki-client