Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/T1MDuPTabkY9kf4G9vCp7o-3Rlc.roa
File: T1MDuPTabkY9kf4G9vCp7o-3Rlc.roa (raw, json)
Hash identifier: 4qt+my+7/spcmWwukcXfAW/c4v/T56xEvzEk991eH94=
Subject key identifier: 4F:53:03:B8:F4:DA:6E:46:3D:91:FE:06:F6:F0:A9:EE:8F:B7:46:57
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0185719E695E5D3C71A8576175CE65971F1A
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/T1MDuPTabkY9kf4G9vCp7o-3Rlc.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31800
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:69:5e:5d:3c:71:a8:57:61:75:ce:65:97:1f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5303b8f4da6e463d91fe06f6f0a9ee8fb74657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:a3:b8:31:c9:95:8b:3b:77:e1:69:9d:cf:
63:4b:55:9e:7a:99:fd:80:02:e9:ad:33:4a:ae:5d:
09:8b:a7:3f:3b:c0:ef:ee:60:e1:95:ed:ff:e2:e8:
4e:0e:f8:90:97:4d:3d:b3:fc:0c:21:dc:fc:1a:46:
c6:cb:ad:5e:45:dc:bf:1e:2d:b6:5a:38:c1:70:80:
ed:7b:3a:8f:fa:cc:69:32:f1:01:41:70:5f:90:7f:
46:11:aa:7d:e3:fb:4b:df:b1:09:a0:67:c3:3a:5c:
19:f2:d7:11:1b:88:d4:33:71:9b:b7:ee:26:20:ee:
3a:36:00:28:ae:29:93:54:b5:1c:70:c8:67:8e:a3:
6b:ab:49:e1:00:f9:15:27:2b:9a:d2:48:8f:c1:c8:
5d:81:ee:ae:fc:78:d4:09:94:46:b7:56:f2:bd:1b:
f0:22:e9:15:9d:aa:4d:e1:e8:8c:45:68:1f:cf:53:
09:51:a3:53:0b:91:28:2d:47:d7:1e:67:7c:cc:66:
7f:96:96:cd:9e:6c:45:3b:c1:df:d6:4f:33:7a:1f:
99:b9:51:57:be:29:96:16:73:5e:0e:62:a1:ca:53:
1d:c1:33:92:67:cf:85:28:a6:3d:c2:77:86:cb:0d:
32:f1:fc:bd:38:96:39:51:d8:aa:63:e2:50:1c:90:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:03:B8:F4:DA:6E:46:3D:91:FE:06:F6:F0:A9:EE:8F:B7:46:57
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/T1MDuPTabkY9kf4G9vCp7o-3Rlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:11:a4:8c:e7:46:2f:9a:fa:56:db:ca:59:48:41:39:36:9d:
0a:a8:ce:91:c5:98:e7:1f:67:71:5b:83:5d:73:07:e8:ae:a5:
03:86:51:32:20:4d:d6:3f:e7:44:69:4b:88:42:54:9a:a2:23:
ca:c6:2b:0d:a0:98:4c:2a:a8:8e:57:23:93:0e:6b:3e:34:d4:
e0:3a:3f:9e:b9:98:95:c9:ba:05:4b:61:bc:a5:c8:f8:2d:7a:
39:45:b7:e9:23:00:61:37:d6:3f:66:e2:75:20:cc:24:cb:07:
04:07:9a:8f:3f:84:4a:3d:dd:3d:b1:18:60:ea:39:64:3c:a3:
00:38:d0:92:ee:7b:d9:e1:35:f9:9d:53:2d:24:7e:ea:10:49:
32:35:f2:3a:24:d3:c7:2f:cb:21:ef:59:a8:26:5d:bc:cb:57:
e4:ab:23:44:ba:f2:4b:70:4b:1c:b7:af:e7:9d:4a:9f:3d:a5:
83:20:39:e8:64:ec:20:9c:c8:57:84:9d:6d:19:5e:ce:ff:fb:
7a:6b:03:02:71:8b:5e:1a:2a:ff:95:ce:62:be:07:34:a2:24:
dd:a8:f1:fe:90:9e:4a:5b:80:08:5d:3d:5a:83:22:b7:e9:bd:
8f:3b:a9:d4:ca:41:f8:80:a3:95:f2:f7:fc:09:21:e0:1a:f8:
fc:89:91:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnmleXTxxqFdhdc5llx8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw
YWZlYjIwHhcNMjMwMTAyMDgzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjUzMDNiOGY0ZGE2ZTQ2M2Q5MWZlMDZmNmYwYTllZThmYjc0NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVyjuDHJlYs7d+Fpnc9jS1Weepn9
gALprTNKrl0Ji6c/O8Dv7mDhle3/4uhODviQl009s/wMIdz8GkbGy61eRdy/Hi22
WjjBcIDtezqP+sxpMvEBQXBfkH9GEap94/tL37EJoGfDOlwZ8tcRG4jUM3Gbt+4m
IO46NgAorimTVLUccMhnjqNrq0nhAPkVJyua0kiPwchdge6u/HjUCZRGt1byvRvw
IukVnapN4eiMRWgfz1MJUaNTC5EoLUfXHmd8zGZ/lpbNnmxFO8Hf1k8zeh+ZuVFX
vimWFnNeDmKhylMdwTOSZ8+FKKY9wneGyw0y8fy9OJY5UdiqY+JQHJDmFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9TA7j02m5GPZH+Bvbwqe6Pt0ZXMB8GA1UdIwQY
MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt
MWQ5ZDhkMDA0MTExLzEvVDFNRHVQVGFia1k5a2Y0Rzl2Q3A3by0zUmxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx
LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+y2MA0G
CSqGSIb3DQEBCwUAA4IBAQCLEaSM50YvmvpW28pZSEE5Np0KqM6RxZjnH2dxW4Nd
cwforqUDhlEyIE3WP+dEaUuIQlSaoiPKxisNoJhMKqiOVyOTDms+NNTgOj+euZiV
yboFS2G8pcj4LXo5RbfpIwBhN9Y/ZuJ1IMwkywcEB5qPP4RKPd09sRhg6jlkPKMA
ONCS7nvZ4TX5nVMtJH7qEEkyNfI6JNPHL8sh71moJl28y1fkqyNEuvJLcEsct6/n
nUqfPaWDIDnoZOwgnMhXhJ1tGV7O//t6awMCcYteGir/lc5ivgc0oiTdqPH+kJ5K
W4AIXT1agyK36b2PO6nUykH4gKOV8vf8CSHgGvj8iZF7
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:58:49 2025 by rpki-client