Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/O3RDzWIXczU0n2t9zg3hmkowecc.roa
File: O3RDzWIXczU0n2t9zg3hmkowecc.roa (raw, json)
Hash identifier: iLAO4gLhYd8jk8OWbrbzdbT1qQxGdasgMSOW2xaNtgk=
Subject key identifier: 3B:74:43:CD:62:17:73:35:34:9F:6B:7D:CE:0D:E1:9A:4A:30:79:C7
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 108465EF
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/O3RDzWIXczU0n2t9zg3hmkowecc.roa
Signing time: Sat 01 Jan 2022 03:01:38 +0000
ROA not before: Sat 01 Jan 2022 03:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51815
IP address blocks: 91.209.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277112303 (0x108465ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jan 1 03:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b7443cd62177335349f6b7dce0de19a4a3079c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:df:24:ff:80:e3:d1:b1:5b:6c:39:cc:2d:
56:0b:29:da:b4:80:55:6b:50:1b:0f:2f:19:4a:f0:
95:e6:b5:99:2a:3e:1a:01:0c:61:45:34:be:4d:72:
76:c6:f0:24:d4:0a:9d:ca:3b:de:4c:3e:62:36:92:
2d:92:0c:11:a2:96:55:e0:c5:ed:94:3b:c6:6e:e3:
39:2b:1d:02:2c:a8:0d:e0:a3:c3:8b:75:9c:3c:9b:
af:69:f6:d3:ce:bb:49:74:3e:a5:2e:95:0c:aa:a3:
b8:94:94:d5:44:d2:39:a8:39:07:41:83:85:1c:b2:
60:c0:8c:3b:ba:9d:e1:29:be:9a:6e:e3:f9:4a:9b:
74:f9:14:7c:f2:96:31:22:a8:db:1d:d4:4c:05:c6:
f6:bd:ba:26:be:c9:3d:9c:e7:60:f5:a6:0a:50:2a:
30:fb:b3:db:cc:0f:6c:28:9d:c6:bf:c6:86:94:61:
0b:3e:ae:49:a2:58:3c:2f:3e:d6:5c:c9:12:4a:bb:
6a:4e:47:66:8e:4a:01:a9:62:16:41:06:28:7f:34:
23:46:be:8b:8f:2e:e5:f8:99:ff:98:73:a7:cb:ad:
44:c6:ff:82:43:97:ef:17:27:eb:66:e8:15:99:56:
48:49:86:29:aa:66:57:03:bf:6a:4b:4d:2e:78:d4:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:43:CD:62:17:73:35:34:9F:6B:7D:CE:0D:E1:9A:4A:30:79:C7
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/O3RDzWIXczU0n2t9zg3hmkowecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.88.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:84:7d:2b:c8:6d:71:f7:0d:5b:f8:32:b9:f4:f2:23:5f:
bf:bc:16:e2:86:c1:a3:63:fa:67:76:4f:a8:e8:be:e4:1d:9a:
af:97:0c:d0:ff:fb:af:fc:26:b1:ad:f7:9f:91:1d:36:45:a5:
ea:37:bf:2d:da:ef:b7:92:c6:7d:c6:f4:c4:91:81:51:49:4e:
77:41:e0:74:d9:56:94:4c:4d:d5:ea:80:fb:0b:7f:9c:eb:99:
20:1c:e3:fa:f7:f8:73:10:6b:3a:b5:c9:3e:37:c8:67:b9:da:
77:31:4b:98:d8:e0:b3:9a:6f:a8:46:40:be:c2:1e:49:48:bc:
25:ec:2f:b7:f5:56:c2:60:13:10:6a:90:c5:5a:37:b3:85:80:
73:3c:1a:20:1f:db:78:30:a0:a7:d4:d8:ae:7a:28:cc:fd:e8:
0f:d3:68:a0:8a:e8:59:b0:fb:2e:54:92:eb:c4:ff:b2:4f:45:
44:2c:92:e4:dd:65:a9:43:09:5f:f2:7d:b7:91:e4:98:83:56:
28:1d:b4:71:e9:ee:c1:a8:0f:51:13:7c:13:1e:d3:cb:f5:52:
23:e8:04:fb:62:62:5e:c1:8a:95:90:ac:b0:db:81:5f:d7:0e:
5f:32:b7:49:6c:f5:ff:a6:d8:5b:cc:9e:43:d4:9d:fb:ff:15:
45:1f:44:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEIRl7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTBjY2UxYjlkMDZkY2NlODg1NjY1OTUzNjQ5OWMxNjAzMzkxMzcwMB4XDTIyMDEw
MTAzMDEzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2I3NDQzY2Q2MjE3
NzMzNTM0OWY2YjdkY2UwZGUxOWE0YTMwNzljNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmM3yT/gOPRsVtsOcwtVgsp2rSAVWtQGw8vGUrwlea1mSo+
GgEMYUU0vk1ydsbwJNQKnco73kw+YjaSLZIMEaKWVeDF7ZQ7xm7jOSsdAiyoDeCj
w4t1nDybr2n20867SXQ+pS6VDKqjuJSU1UTSOag5B0GDhRyyYMCMO7qd4Sm+mm7j
+UqbdPkUfPKWMSKo2x3UTAXG9r26Jr7JPZznYPWmClAqMPuz28wPbCidxr/GhpRh
Cz6uSaJYPC8+1lzJEkq7ak5HZo5KAaliFkEGKH80I0a+i48u5fiZ/5hzp8utRMb/
gkOX7xcn62boFZlWSEmGKapmVwO/aktNLnjUep0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7dEPNYhdzNTSfa33ODeGaSjB5xzAfBgNVHSMEGDAWgBQ1DM4bnQbczohW
ZZU2SZwWAzkTcDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Rek9HNTBHM002SVZtV1ZOa21jRmdNNUUzQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTMvZjUyZGI5LThlMjUtNDI5Ny05M2ZkLTU1NDE1YTBiYTczYi8x
L08zUkR6V0lYY3pVMG4ydDl6ZzNobWtvd2VjYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMv
ZjUyZGI5LThlMjUtNDI5Ny05M2ZkLTU1NDE1YTBiYTczYi8xL05Rek9HNTBHM002
SVZtV1ZOa21jRmdNNUUzQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvRWDANBgkqhkiG9w0BAQsFAAOC
AQEAGQqEfSvIbXH3DVv4Mrn08iNfv7wW4obBo2P6Z3ZPqOi+5B2ar5cM0P/7r/wm
sa33n5EdNkWl6je/Ldrvt5LGfcb0xJGBUUlOd0HgdNlWlExN1eqA+wt/nOuZIBzj
+vf4cxBrOrXJPjfIZ7nadzFLmNjgs5pvqEZAvsIeSUi8Jewvt/VWwmATEGqQxVo3
s4WAczwaIB/beDCgp9TYrnoozP3oD9NooIroWbD7LlSS68T/sk9FRCyS5N1lqUMJ
X/J9t5HkmINWKB20cenuwagPURN8Ex7Ty/VSI+gE+2JiXsGKlZCssNuBX9cOXzK3
SWz1/6bYW8yeQ9Sd+/8VRR9Eew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org