Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/2Fdcqjz_-iSIefzmT7ZGDfSffHU.roa
File: 2Fdcqjz_-iSIefzmT7ZGDfSffHU.roa (raw, json)
Hash identifier: p6Dir8t/ihWJvLW5YqwwXbdj5+1HLmu/fXh1aBr3naY=
Subject key identifier: D8:57:5C:AA:3C:FF:FA:24:88:79:FC:E6:4F:B6:46:0D:F4:9F:7C:75
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018A3C8C9051FCABBB11FABFA7E94DBE7D10
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/2Fdcqjz_-iSIefzmT7ZGDfSffHU.roa
Signing time: Mon 28 Aug 2023 14:29:19 +0000
ROA not before: Mon 28 Aug 2023 14:29:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 109.166.38.0/24 maxlen: 24
109.166.37.0/24 maxlen: 24
109.166.36.0/24 maxlen: 24
151.248.68.0/24 maxlen: 24
151.248.69.0/24 maxlen: 24
91.219.17.0/24 maxlen: 24
91.219.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:8c:90:51:fc:ab:bb:11:fa:bf:a7:e9:4d:be:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Aug 28 14:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8575caa3cfffa248879fce64fb6460df49f7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:c0:a2:4f:64:7d:29:17:c6:da:57:9c:c1:
2a:73:95:9d:65:be:ec:c6:8e:6d:41:fc:eb:dc:11:
d3:5b:7d:ce:85:fb:1c:20:82:5e:21:ff:eb:b5:ec:
c3:ca:74:31:22:c5:f9:ab:f7:a8:15:e6:60:39:8f:
fc:d6:39:9f:16:e7:ad:3f:b1:dc:d8:c5:21:b1:4e:
28:a7:b7:48:b5:12:a1:5b:39:15:e4:00:fa:d0:a9:
15:c8:80:48:89:e3:d4:76:5a:58:d3:9a:71:08:13:
e3:bd:06:23:6f:18:2c:37:a0:1d:86:fe:d3:a0:65:
e3:0f:b3:2c:9e:92:ac:0e:34:bb:91:d2:53:32:34:
de:83:59:f3:ae:e4:5b:74:ca:2f:83:5c:ee:69:9d:
71:d7:ec:6a:82:d2:e4:97:3a:47:a4:19:15:ac:cd:
db:7e:3a:aa:c3:4f:aa:40:be:af:e9:85:83:de:fd:
5a:33:3c:76:4d:ee:01:04:4f:d8:8c:4b:d0:47:f5:
10:96:32:a0:eb:8b:e9:0d:7b:78:2d:94:33:37:a3:
61:e9:57:e9:54:df:1f:3b:bf:ea:45:aa:35:d3:08:
04:20:65:a2:a2:7d:bc:61:60:fa:2c:ca:1e:44:1e:
ca:08:75:e0:53:51:12:29:8a:82:03:54:92:b2:d0:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:5C:AA:3C:FF:FA:24:88:79:FC:E6:4F:B6:46:0D:F4:9F:7C:75
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/2Fdcqjz_-iSIefzmT7ZGDfSffHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.17.0-91.219.19.255
109.166.36.0-109.166.38.255
151.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:c5:9a:d2:00:73:f1:6a:24:9a:ac:98:3f:f2:cc:d4:8c:9f:
1f:5f:69:06:5e:20:40:15:bf:07:35:44:bf:cc:04:b8:c0:89:
45:dd:41:3a:3b:e0:86:21:4b:a4:f9:da:75:d2:28:bf:43:5e:
05:ad:69:e6:41:23:94:2c:d3:b4:e2:3d:1d:db:12:15:ae:a7:
a7:93:24:2d:c4:c2:c5:b1:ed:75:0b:9f:49:4e:0a:e1:98:e0:
4e:7a:1c:1f:27:4c:be:0d:2d:3b:53:4e:b4:45:66:5b:36:af:
51:2c:e2:3c:d2:11:6a:c7:e4:cb:04:78:7f:ee:14:49:e9:99:
a2:ad:05:72:07:ff:b8:94:f7:35:64:7d:15:bc:8a:53:b4:1d:
3d:c1:4b:15:0c:f2:2f:80:39:f4:53:15:b6:f6:2e:65:45:e6:
a2:18:97:9c:e0:28:56:28:9e:ef:20:84:21:02:1d:ff:8c:8c:
fd:bf:82:ab:e5:3c:9f:c9:6b:6e:38:2f:b5:3c:70:73:44:fa:
2b:43:81:a7:78:98:66:07:ac:15:b8:f7:95:bf:f2:a1:25:b2:
1a:c2:4b:6e:c3:33:7f:dd:fc:99:c8:98:91:46:9d:db:04:83:
ce:19:87:94:20:d2:24:ba:aa:e5:4c:19:81:96:1a:94:3e:0e:
9f:31:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:40:02 2025 by rpki-client