Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/c62ynCDcjI-1q1IzWEr4VT5Xf88.roa
File: c62ynCDcjI-1q1IzWEr4VT5Xf88.roa (raw, json)
Hash identifier: yf3Co8WGrHYouiiTd6M8a2ZPrswrxPmBMmhb4GUNBG8=
Subject key identifier: 73:AD:B2:9C:20:DC:8C:8F:B5:AB:52:33:58:4A:F8:55:3E:57:7F:CF
Certificate issuer: /CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Certificate serial: 0183831CD6988EB412A5CAB3CBE6AF64F9B5
Authority key identifier: 9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/c62ynCDcjI-1q1IzWEr4VT5Xf88.roa
Signing time: Wed 28 Sep 2022 08:00:48 +0000
ROA not before: Wed 28 Sep 2022 08:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56798
IP address blocks: 91.207.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:1c:d6:98:8e:b4:12:a5:ca:b3:cb:e6:af:64:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Validity
Not Before: Sep 28 08:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73adb29c20dc8c8fb5ab5233584af8553e577fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:0c:e1:e2:b8:d4:c5:47:a6:37:fb:8f:9d:
29:66:c3:cb:3a:c5:a1:f8:13:e5:d8:16:f6:6e:a0:
93:4b:ce:b7:b2:cf:e6:53:2d:bc:70:83:90:84:2d:
7c:2e:a4:5e:bd:d1:93:1a:92:c4:6f:96:07:68:9b:
a5:38:e7:20:94:fc:30:c4:07:44:97:92:3b:82:03:
c6:d9:92:1c:5d:4d:f8:74:88:8c:ca:74:75:05:68:
ce:03:18:a1:ab:d7:72:e0:8f:43:f3:7d:e7:3e:8e:
da:71:68:f8:c1:a0:10:45:a4:2e:32:8e:59:c0:d4:
89:62:57:9e:29:9a:fc:d2:f7:74:b2:77:d0:7b:e4:
b8:9d:87:76:fc:dc:e4:56:ce:b0:6f:8a:bd:34:7a:
cd:9d:b9:6a:18:a9:54:5f:0a:11:f5:ff:a8:22:83:
8b:36:cc:fa:dd:e5:c1:77:d3:68:bf:93:50:3b:44:
0e:8e:50:ec:16:28:9b:ff:03:e7:f7:ab:8f:8f:5b:
31:77:b6:c7:2a:b7:05:6b:6a:63:51:32:94:74:8e:
38:54:ea:b4:cf:6c:f9:86:0d:8c:d6:df:45:01:0f:
14:35:e5:23:66:56:92:92:10:4f:e7:3a:ca:f9:72:
52:85:ec:2a:6b:74:e3:c5:45:67:68:60:f5:de:a7:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:B2:9C:20:DC:8C:8F:B5:AB:52:33:58:4A:F8:55:3E:57:7F:CF
X509v3 Authority Key Identifier:
keyid:9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/c62ynCDcjI-1q1IzWEr4VT5Xf88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:be:d8:a7:71:d8:e5:6d:e5:e5:6b:e3:32:7c:af:5f:56:89:
06:84:3c:a2:88:9f:55:2e:23:e2:d8:a1:05:2d:37:73:05:c3:
cd:e3:d4:3d:18:47:3d:13:5a:b4:80:08:5b:4b:4b:70:c8:a3:
d3:8a:d1:07:b2:ea:32:92:1a:a3:8a:fb:59:7b:2c:09:9f:8f:
ff:c9:5e:d9:fa:c8:f8:9d:84:f4:c9:d6:d0:b5:2f:4e:bf:09:
ad:f9:ef:7c:5a:e7:d4:50:ed:65:86:2e:31:e0:89:3e:7e:30:
e1:97:4d:0b:4c:5f:e9:55:d6:e8:db:a7:5e:4d:fe:f2:7f:fd:
47:df:84:95:a6:d1:53:b4:b4:3f:95:a2:5f:33:57:94:8e:bd:
23:d5:69:ea:de:6e:3c:fe:ac:6c:14:45:93:6b:36:07:56:20:
1c:8d:53:35:2b:ac:6b:13:ac:73:3b:71:6c:13:b3:83:73:cc:
c0:76:7d:0f:ee:b3:e3:da:47:d1:8f:5e:c3:e7:40:20:65:54:
c6:e3:0e:cb:6b:09:ef:a0:db:21:f8:b2:fa:f9:95:ff:af:0b:
1c:9e:11:47:75:29:22:d3:4e:d0:3e:66:5e:f1:d2:0b:3d:15:
be:40:d0:4d:41:c7:c0:bd:cf:9e:a3:72:0d:05:39:21:44:24:
d1:52:46:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYODHNaYjrQSpcqzy+avZPm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkN2I2ZjE3OTNiZjI4MDJjYjNhM2Q3ZmFkMzJjY2FhZDhk
OGFkMmUwHhcNMjIwOTI4MDgwMDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FkYjI5YzIwZGM4YzhmYjVhYjUyMzM1ODRhZjg1NTNlNTc3ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg8M4eK41MVHpjf7j50pZsPLOsWh
+BPl2Bb2bqCTS863ss/mUy28cIOQhC18LqRevdGTGpLEb5YHaJulOOcglPwwxAdE
l5I7ggPG2ZIcXU34dIiMynR1BWjOAxihq9dy4I9D833nPo7acWj4waAQRaQuMo5Z
wNSJYleeKZr80vd0snfQe+S4nYd2/NzkVs6wb4q9NHrNnblqGKlUXwoR9f+oIoOL
Nsz63eXBd9Nov5NQO0QOjlDsFiib/wPn96uPj1sxd7bHKrcFa2pjUTKUdI44VOq0
z2z5hg2M1t9FAQ8UNeUjZlaSkhBP5zrK+XJShewqa3TjxUVnaGD13qcLBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOtspwg3IyPtatSM1hK+FU+V3/PMB8GA1UdIwQY
MBaAFJ17bxeTvygCyzo9f60yzKrY2K0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblh0dkY1T19LQUxMT2oxX3JUTE1xdGpZclM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jMTI1NDEtMjdiMC00NjVjLWI1Nzct
MTJlNDMxYzBiOTMzLzEvYzYyeW5DRGNqSS0xcTFJeldFcjRWVDVYZjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jMTI1NDEtMjdiMC00NjVjLWI1NzctMTJlNDMxYzBiOTMz
LzEvblh0dkY1T19LQUxMT2oxX3JUTE1xdGpZclM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/PMA0G
CSqGSIb3DQEBCwUAA4IBAQCnvtincdjlbeXla+MyfK9fVokGhDyiiJ9VLiPi2KEF
LTdzBcPN49Q9GEc9E1q0gAhbS0twyKPTitEHsuoykhqjivtZeywJn4//yV7Z+sj4
nYT0ydbQtS9Ovwmt+e98WufUUO1lhi4x4Ik+fjDhl00LTF/pVdbo26deTf7yf/1H
34SVptFTtLQ/laJfM1eUjr0j1Wnq3m48/qxsFEWTazYHViAcjVM1K6xrE6xzO3Fs
E7ODc8zAdn0P7rPj2kfRj17D50AgZVTG4w7LawnvoNsh+LL6+ZX/rwscnhFHdSki
007QPmZe8dILPRW+QNBNQcfAvc+eo3INBTkhRCTRUkaI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:42 2024 by rpki-client on console-fra.rpki-client.org