Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n21lZZ1FvCbcSZg5_fCd5iU4X6Y.roa
File: n21lZZ1FvCbcSZg5_fCd5iU4X6Y.roa (raw, json)
Hash identifier: Ych+WR+MOWApoRdKk+boxftfgBUgQi24fQ3/x9NlmGw=
Subject key identifier: 9F:6D:65:65:9D:45:BC:26:DC:49:98:39:FD:F0:9D:E6:25:38:5F:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF43FF898424824D5D07E5AADF1CD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n21lZZ1FvCbcSZg5_fCd5iU4X6Y.roa
Signing time: Sun 01 Jan 2023 14:44:55 +0000
ROA not before: Sun 01 Jan 2023 14:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60906
IP address blocks: 91.233.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f4:3f:f8:98:42:48:24:d5:d0:7e:5a:ad:f1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6d65659d45bc26dc499839fdf09de625385fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:d7:e3:b0:33:7f:5f:31:08:ed:69:d9:b6:
26:3f:20:79:56:f2:c0:ed:60:39:df:ed:16:91:5f:
27:22:73:7f:ef:3d:c5:b9:9b:0e:ee:e7:f5:db:22:
4c:0d:6a:ff:2e:29:3d:91:08:54:44:86:bd:07:ea:
89:6b:af:47:c7:e6:43:9c:07:75:ee:b5:0a:f0:5b:
9c:06:f2:80:54:72:ec:5f:ee:ea:d3:b4:93:ec:5a:
d8:dc:66:37:7c:80:57:c4:00:7c:4f:30:cc:d9:cc:
9c:5f:1a:06:f0:48:eb:c9:c4:ee:d1:c0:3e:7b:cb:
b1:ea:7f:f4:f5:eb:26:c6:12:2d:5e:61:02:cd:c4:
8a:26:5b:85:19:70:29:71:c3:8f:54:05:ed:87:71:
50:ca:26:51:ee:04:8b:9a:9e:99:84:f9:51:eb:70:
78:22:ac:6b:0c:2c:18:dd:e2:c9:31:ad:96:b9:d2:
86:d6:f4:61:aa:82:42:9d:7d:e0:dd:75:04:b6:70:
e4:8f:45:f9:76:4e:0c:b6:c6:e9:15:3a:0a:7a:36:
cf:24:0e:1a:c2:34:0e:59:2b:db:03:6e:32:81:a6:
fb:eb:11:43:97:96:83:52:52:c9:e5:72:ec:0c:1e:
46:83:ca:2b:d5:29:15:c4:a3:21:a9:69:18:e0:4d:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6D:65:65:9D:45:BC:26:DC:49:98:39:FD:F0:9D:E6:25:38:5F:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n21lZZ1FvCbcSZg5_fCd5iU4X6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4e:00:15:00:4f:3c:07:56:21:b3:c7:3a:89:4d:e1:9f:d6:
ce:9c:ec:1c:c5:64:14:3e:e8:bb:7f:5b:8d:4b:a5:c1:6d:80:
c9:8c:3e:1e:d9:ac:1d:01:d8:6b:f3:1d:bd:cb:11:cb:c9:22:
4c:19:fd:e0:c7:ac:be:b8:7b:02:0f:04:e9:8b:ca:06:fd:26:
be:ae:a9:cb:fa:84:62:dd:2a:14:23:4b:21:e2:e8:28:c3:a8:
83:44:b0:ac:ef:2a:70:59:34:f6:b6:ad:16:8b:5a:cc:27:38:
04:8d:30:00:7e:b8:51:a2:a6:6a:af:4f:f2:4c:14:90:a6:3a:
60:0f:ff:6e:11:1e:1a:b3:4b:dd:58:80:95:6c:21:75:9f:c3:
28:c9:6b:e1:1b:ad:5e:0f:f1:68:a7:e4:70:3d:9e:95:ed:fe:
10:df:86:2d:f3:b5:21:d5:a9:63:4e:28:1b:93:e7:bb:73:ce:
78:e6:60:93:4a:10:14:f2:67:65:5e:a9:9e:2d:09:2d:89:e1:
11:19:62:47:1f:b7:8d:06:cb:c4:0d:f4:74:2c:a2:33:a5:4c:
c8:b1:ef:77:4d:07:a0:a9:8c:27:21:9e:36:a4:81:f0:c8:9d:
b1:5c:1b:a5:ec:c8:43:62:42:2e:35:a7:fd:89:5f:55:b6:f1:
b8:ac:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:03:03 2025 by rpki-client