Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/qiCBXnUsjUk6kYD59tOyq2_ypAA.roa
File: qiCBXnUsjUk6kYD59tOyq2_ypAA.roa (raw, json)
Hash identifier: ordnKkFiPjS3uADOORweocXRl7OgVPkDSOTdvh2wCLQ=
Subject key identifier: AA:20:81:5E:75:2C:8D:49:3A:91:80:F9:F6:D3:B2:AB:6F:F2:A4:00
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018436809F44EE24DA6C26EC5867D3437763
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/qiCBXnUsjUk6kYD59tOyq2_ypAA.roa
Signing time: Wed 02 Nov 2022 04:01:49 +0000
ROA not before: Wed 02 Nov 2022 04:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/21 maxlen: 21
91.102.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:36:80:9f:44:ee:24:da:6c:26:ec:58:67:d3:43:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Nov 2 04:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa20815e752c8d493a9180f9f6d3b2ab6ff2a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:dd:56:17:91:e1:ab:0e:b0:0d:cb:9e:a1:
c7:66:cd:70:10:44:b6:95:66:46:1e:4b:8f:98:b7:
7d:18:95:ea:f0:15:91:bf:5b:9e:12:e9:4b:ae:b9:
44:b7:01:f8:eb:9e:99:cc:7f:f2:5d:af:32:28:17:
80:a9:e0:f0:11:54:f1:1b:63:f4:f5:05:d1:91:6c:
f4:4c:e9:2f:5f:7e:94:17:88:3e:27:1e:a8:07:e3:
bd:b2:60:db:2b:b8:82:5a:95:4e:56:fe:b2:05:61:
70:6f:88:70:e6:1a:91:dc:a4:b9:92:f2:d6:7a:4c:
79:d5:6e:39:bf:c9:24:f3:28:3d:85:d7:4f:8f:6b:
b5:41:e8:dd:c5:67:ba:c0:94:24:0b:51:b5:e9:02:
1e:10:8a:98:df:a8:de:86:01:df:dc:e5:17:14:37:
6d:78:2c:e1:d8:9b:76:e3:28:ed:cf:b4:80:33:96:
e2:54:1d:88:3e:d6:e5:aa:18:01:83:45:21:a3:9e:
cf:e0:dc:52:5c:63:84:2b:7b:12:a1:0f:c2:6e:08:
a9:f0:cf:bb:44:5f:43:68:28:9b:a8:24:45:eb:a9:
5d:ac:2f:df:83:57:72:7c:62:40:48:20:f5:5b:50:
5e:f8:b8:f6:f3:c7:11:1e:d7:59:8d:f1:52:05:01:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:81:5E:75:2C:8D:49:3A:91:80:F9:F6:D3:B2:AB:6F:F2:A4:00
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/qiCBXnUsjUk6kYD59tOyq2_ypAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:f6:d4:39:32:2c:16:0f:5f:c5:32:80:c9:30:93:37:e3:4c:
63:56:49:c6:47:a6:01:0e:0d:a9:41:00:35:38:04:0f:45:85:
87:5b:3b:8f:c5:ad:03:17:f4:a4:91:6e:56:b8:63:43:c4:f2:
1a:d8:72:df:7d:5e:ca:ff:88:87:4d:ec:f1:b0:73:08:e8:ab:
1c:40:1a:a3:15:9b:29:2e:07:32:85:57:32:b9:b9:9d:38:69:
af:21:a6:a4:8a:c7:30:56:a4:12:b9:cc:df:2f:cb:04:9b:d2:
45:78:e2:83:72:9b:2f:1c:3e:e6:6a:01:b1:c3:ff:d3:65:0f:
b9:65:ee:8c:83:5d:ce:f5:91:ed:0a:07:b8:0e:6e:9f:8b:5c:
20:99:e2:3d:bd:2d:d8:73:b7:32:6b:f4:19:3a:7b:93:bb:41:
f3:3d:10:50:46:69:ab:4d:c3:66:df:3e:de:e4:13:3f:d8:9a:
54:ce:27:9c:75:7f:e6:60:b1:ad:76:33:42:60:2a:58:c4:ea:
3c:5a:a2:2f:51:de:2f:dd:ee:18:d1:14:f7:83:9d:c8:f8:9a:
92:bf:4a:fa:c2:4d:83:10:cb:ed:f0:7b:32:6e:07:ea:71:e1:
4f:b4:4a:35:25:73:21:9f:62:8a:17:53:22:60:ed:6a:aa:91:
9e:9c:bf:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ2gJ9E7iTabCbsWGfTQ3djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjIxMTAyMDQwMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTIwODE1ZTc1MmM4ZDQ5M2E5MTgwZjlmNmQzYjJhYjZmZjJhNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmndVheR4asOsA3LnqHHZs1wEES2
lWZGHkuPmLd9GJXq8BWRv1ueEulLrrlEtwH4656ZzH/yXa8yKBeAqeDwEVTxG2P0
9QXRkWz0TOkvX36UF4g+Jx6oB+O9smDbK7iCWpVOVv6yBWFwb4hw5hqR3KS5kvLW
ekx51W45v8kk8yg9hddPj2u1QejdxWe6wJQkC1G16QIeEIqY36jehgHf3OUXFDdt
eCzh2Jt24yjtz7SAM5biVB2IPtblqhgBg0Uho57P4NxSXGOEK3sSoQ/Cbgip8M+7
RF9DaCibqCRF66ldrC/fg1dyfGJASCD1W1Be+Lj288cRHtdZjfFSBQGUIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoggV51LI1JOpGA+fbTsqtv8qQAMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvcWlDQlhuVXNqVWs2a1lENTl0T3lxMl95cEFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2agMA0G
CSqGSIb3DQEBCwUAA4IBAQAs9tQ5MiwWD1/FMoDJMJM340xjVknGR6YBDg2pQQA1
OAQPRYWHWzuPxa0DF/SkkW5WuGNDxPIa2HLffV7K/4iHTezxsHMI6KscQBqjFZsp
LgcyhVcyubmdOGmvIaakiscwVqQSuczfL8sEm9JFeOKDcpsvHD7magGxw//TZQ+5
Ze6Mg13O9ZHtCge4Dm6fi1wgmeI9vS3Yc7cya/QZOnuTu0HzPRBQRmmrTcNm3z7e
5BM/2JpUziecdX/mYLGtdjNCYCpYxOo8WqIvUd4v3e4Y0RT3g53I+JqSv0r6wk2D
EMvt8HsybgfqceFPtEo1JXMhn2KKF1MiYO1qqpGenL+s
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org