Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/egeCY7NlG7KSqgtG984e2hUa7jE.roa
File: egeCY7NlG7KSqgtG984e2hUa7jE.roa (raw, json)
Hash identifier: lzL6XIoG6XaQXTpZsRVdDNrQYkxWuz0w8x9pKdMc58Y=
Subject key identifier: 7A:07:82:63:B3:65:1B:B2:92:AA:0B:46:F7:CE:1E:DA:15:1A:EE:31
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01D83F6E
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/egeCY7NlG7KSqgtG984e2hUa7jE.roa
Signing time: Sat 07 May 2022 03:50:45 +0000
ROA not before: Sat 07 May 2022 03:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30949230 (0x1d83f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: May 7 03:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a078263b3651bb292aa0b46f7ce1eda151aee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:dc:14:d5:15:70:66:b6:39:fa:8b:94:b5:
5d:04:34:87:d6:79:7c:9c:54:af:07:97:e3:5f:b3:
77:61:58:f8:e7:91:7b:73:f1:2c:96:5e:7a:e4:79:
ca:97:d7:4a:d4:de:55:48:2f:b1:c4:76:d4:07:9f:
b2:c0:c2:84:6a:b9:63:15:d8:0b:18:aa:7d:42:b1:
e2:82:f9:b2:03:af:ce:0f:c6:22:c0:1b:8c:d8:e1:
2f:ef:b7:0d:b9:2e:ad:db:c1:aa:63:a6:74:da:5a:
48:0a:a5:80:1e:ad:21:eb:0d:dc:71:73:7e:f2:14:
c8:26:90:6f:69:dd:b4:be:f2:e4:d2:d2:0b:b0:ed:
d9:5e:65:18:c2:ff:bb:cd:f3:79:f4:ac:07:89:c7:
fe:ca:7c:48:f2:e1:63:b3:43:ad:34:de:cc:e4:5f:
35:bc:ee:7e:21:b1:61:24:b1:73:e7:e2:ca:01:2b:
62:b6:6d:fe:a0:9a:a7:31:83:05:e7:9d:dc:29:1e:
86:9b:aa:75:15:04:ab:a0:c0:b5:f5:4f:ef:b0:08:
18:01:94:31:fc:c0:17:05:11:20:82:7e:7f:39:d3:
44:28:04:fb:ff:74:7d:c4:60:95:bb:11:e7:13:cb:
1b:a9:ec:06:71:79:17:ec:cf:53:48:5f:95:48:88:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:07:82:63:B3:65:1B:B2:92:AA:0B:46:F7:CE:1E:DA:15:1A:EE:31
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/egeCY7NlG7KSqgtG984e2hUa7jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b0:26:78:60:3c:af:66:c8:d7:23:e4:29:ae:fc:43:75:64:
98:3e:19:49:0d:59:69:5d:cf:7b:00:19:f6:ce:30:dd:6d:4c:
33:38:5a:9a:6d:9a:66:26:07:85:0f:20:3b:d2:ae:ee:22:fc:
53:8d:97:f7:3f:11:cf:a7:c9:bb:6f:05:69:40:a2:75:e2:65:
da:61:0f:30:61:4e:7a:3e:20:c1:15:cf:15:64:2a:e7:93:20:
a4:86:4e:5a:ae:2c:91:66:ee:cb:ca:43:21:2b:f8:b1:80:75:
45:d2:92:19:d8:c0:19:86:1e:f0:0d:e0:8d:c3:2f:95:1e:8a:
d1:f4:c1:5d:95:a9:01:4e:c0:89:bd:7b:d6:bc:51:22:18:55:
d0:9b:9a:55:60:d1:3c:69:bb:8a:48:e7:b4:3e:e7:75:66:b4:
ca:e8:9c:6d:34:44:80:c4:ec:d0:5c:91:d9:8a:b3:69:96:4e:
e0:0f:75:c0:64:fb:fb:fd:7d:a7:54:c8:39:a5:f3:ae:9c:68:
1f:52:f3:df:52:4b:80:be:94:8c:9a:9c:de:08:a4:92:d2:a9:
45:ca:17:b7:d3:08:a8:4b:08:f6:69:10:da:d7:b6:e8:64:ea:
7c:92:9a:35:21:d7:54:b1:cd:16:5a:ca:b2:67:ec:64:cc:4c:
2b:3e:8d:71
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdg/bjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MzYzYmI2NTg5NWYzYTU0YTRiMzI0YTEwYzc5YWM5OGVmZTJhMWNhMB4XDTIyMDUw
NzAzNTA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2EwNzgyNjNiMzY1
MWJiMjkyYWEwYjQ2ZjdjZTFlZGExNTFhZWUzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtG3BTVFXBmtjn6i5S1XQQ0h9Z5fJxUrweX41+zd2FY+OeR
e3PxLJZeeuR5ypfXStTeVUgvscR21AefssDChGq5YxXYCxiqfUKx4oL5sgOvzg/G
IsAbjNjhL++3DbkurdvBqmOmdNpaSAqlgB6tIesN3HFzfvIUyCaQb2ndtL7y5NLS
C7Dt2V5lGML/u83zefSsB4nH/sp8SPLhY7NDrTTezORfNbzufiGxYSSxc+fiygEr
YrZt/qCapzGDBeed3CkehpuqdRUEq6DAtfVP77AIGAGUMfzAFwURIIJ+fznTRCgE
+/90fcRglbsR5xPLG6nsBnF5F+zPU0hflUiI5McCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR6B4Jjs2UbspKqC0b3zh7aFRruMTAfBgNVHSMEGDAWgBRjY7tliV86VKSz
JKEMeayY7+KhyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kyTzdaWWxmT2xTa3N5U2hESG1zbU9faW9jby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJkNy8x
L2VnZUNZN05sRzdLU3FndEc5ODRlMmhVYTdqRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZGI5YmYxLWUwMTktNDVhNC04NjYzLWE2Y2E0NTRkYjJkNy8xL1kyTzdaWWxmT2xT
a3N5U2hESG1zbU9faW9jby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvddTANBgkqhkiG9w0BAQsFAAOC
AQEAmrAmeGA8r2bI1yPkKa78Q3VkmD4ZSQ1ZaV3PewAZ9s4w3W1MMzhamm2aZiYH
hQ8gO9Ku7iL8U42X9z8Rz6fJu28FaUCideJl2mEPMGFOej4gwRXPFWQq55MgpIZO
Wq4skWbuy8pDISv4sYB1RdKSGdjAGYYe8A3gjcMvlR6K0fTBXZWpAU7Aib171rxR
IhhV0JuaVWDRPGm7ikjntD7ndWa0yuicbTREgMTs0FyR2YqzaZZO4A91wGT7+/19
p1TIOaXzrpxoH1Lz31JLgL6UjJqc3gikktKpRcoXt9MIqEsI9mkQ2te26GTqfJKa
NSHXVLHNFlrKsmfsZMxMKz6NcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org