Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/9HjXkK1VpnI2i5KEfyu3tKLXXA4.roa
File: 9HjXkK1VpnI2i5KEfyu3tKLXXA4.roa (raw, json)
Hash identifier: XA8IuACWNA4Ihzza4PheJV/98JRY15nigdzDaFNzrNQ=
Subject key identifier: F4:78:D7:90:AD:55:A6:72:36:8B:92:84:7F:2B:B7:B4:A2:D7:5C:0E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 06C2934E
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/9HjXkK1VpnI2i5KEfyu3tKLXXA4.roa
Signing time: Fri 29 Apr 2022 14:05:45 +0000
ROA not before: Fri 29 Apr 2022 14:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 91.194.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113414990 (0x6c2934e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Apr 29 14:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f478d790ad55a672368b92847f2bb7b4a2d75c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:2f:f5:cf:4e:2f:f2:74:46:90:75:98:28:
e7:89:a7:69:80:8c:0a:d0:59:7d:37:e3:9d:e3:d3:
4f:68:6e:37:e5:07:77:37:81:58:e2:bc:5f:02:3e:
2d:0a:f3:dc:5f:db:4b:68:8d:5e:07:1b:54:02:eb:
e0:c1:a4:e7:6a:b6:d4:4c:c0:a4:c0:cf:12:7b:a9:
8b:ab:11:85:69:11:fc:7f:64:82:d9:f1:f7:89:34:
2a:d3:45:4c:50:c2:e1:14:82:a6:56:0a:90:a1:14:
30:2b:07:57:56:aa:28:e1:59:7b:83:6a:72:f6:e6:
48:43:c9:a9:f7:e5:65:59:3e:23:18:4b:ae:0e:4d:
a6:11:4b:53:ce:20:6f:d0:9b:e3:cf:b1:5b:59:bd:
7a:4a:81:32:6a:fc:b8:35:46:ad:f8:4a:cf:11:6f:
dd:41:c9:b3:c2:26:12:2b:ac:96:fd:67:f0:2b:27:
a8:0b:72:20:57:74:c5:74:a5:a5:07:01:02:a1:98:
1a:32:51:03:67:b7:51:51:d7:2f:26:39:c7:9d:b8:
45:65:b8:19:cd:ea:59:8c:03:04:97:04:e2:d5:f3:
9c:55:46:65:1b:ff:60:7c:1b:c6:65:03:0e:e7:e2:
e1:ee:d4:17:51:99:2a:03:ac:77:8e:29:4a:6f:b9:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:D7:90:AD:55:A6:72:36:8B:92:84:7F:2B:B7:B4:A2:D7:5C:0E
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/9HjXkK1VpnI2i5KEfyu3tKLXXA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c3:1c:ce:82:16:34:a3:31:14:38:58:3a:8b:65:73:67:d7:
3b:a9:9e:16:7a:6c:29:de:be:25:db:4e:d1:d0:77:93:b7:4c:
20:db:c6:01:a7:06:1b:b2:9e:0c:6e:e2:7f:7f:2d:7b:bb:a9:
9f:41:30:2b:49:eb:89:0f:d2:d8:62:25:cd:7d:83:07:d4:1c:
97:fd:7c:1b:f5:24:8d:1f:9c:73:da:35:f4:cd:45:78:37:a1:
e0:4c:f9:a2:26:b3:da:1b:7d:84:32:7b:bd:22:3d:fe:90:71:
c7:b9:79:c7:4d:66:e8:d4:29:22:9d:d5:52:bd:ed:6e:b8:90:
d2:8f:a7:9b:0c:df:1e:1f:d6:64:48:2c:2e:c4:b9:6e:27:42:
ed:89:95:95:38:35:d8:ea:46:f8:24:ed:52:9f:09:67:9a:f0:
e2:c8:65:ee:ae:d8:72:14:de:4e:86:20:e8:6b:b2:50:60:4c:
1b:bd:32:21:81:9d:ee:70:d4:95:01:2e:82:35:bc:03:81:75:
ce:b2:89:10:ac:85:ba:37:5a:28:74:82:ba:0f:76:62:8f:7b:
77:98:91:6d:26:8c:99:3d:be:2c:15:b8:e0:ea:de:88:a6:e8:
95:ee:1d:98:77:4d:de:69:ed:40:d9:6c:df:a2:13:88:18:08:
ea:b9:50:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsKTTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
M2MwMzE1OGFlZDgxMTYxZDRmNTdjMTc0MmQ0NjA4MzQxNzNhNzllMB4XDTIyMDQy
OTE0MDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQ3OGQ3OTBhZDU1
YTY3MjM2OGI5Mjg0N2YyYmI3YjRhMmQ3NWMwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN0AL/XPTi/ydEaQdZgo54mnaYCMCtBZfTfjnePTT2huN+UH
dzeBWOK8XwI+LQrz3F/bS2iNXgcbVALr4MGk52q21EzApMDPEnupi6sRhWkR/H9k
gtnx94k0KtNFTFDC4RSCplYKkKEUMCsHV1aqKOFZe4NqcvbmSEPJqfflZVk+IxhL
rg5NphFLU84gb9Cb48+xW1m9ekqBMmr8uDVGrfhKzxFv3UHJs8ImEiuslv1n8Csn
qAtyIFd0xXSlpQcBAqGYGjJRA2e3UVHXLyY5x524RWW4Gc3qWYwDBJcE4tXznFVG
ZRv/YHwbxmUDDufi4e7UF1GZKgOsd44pSm+5RuUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT0eNeQrVWmcjaLkoR/K7e0otdcDjAfBgNVHSMEGDAWgBSjwDFYrtgRYdT1
fBdC1GCDQXOnnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L284QXhXSzdZRVdIVTlYd1hRdFJnZzBGenA1NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvYjY2NDI5LTRmMjAtNGI5MC1hNmI4LTRjMTBlMzM2MDU3Ny8x
LzlIalhrSzFWcG5JMmk1S0VmeXUzdEtMWFhBNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
YjY2NDI5LTRmMjAtNGI5MC1hNmI4LTRjMTBlMzM2MDU3Ny8xL284QXhXSzdZRVdI
VTlYd1hRdFJnZzBGenA1NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvC7TANBgkqhkiG9w0BAQsFAAOC
AQEAJ8MczoIWNKMxFDhYOotlc2fXO6meFnpsKd6+JdtO0dB3k7dMINvGAacGG7Ke
DG7if38te7upn0EwK0nriQ/S2GIlzX2DB9Qcl/18G/UkjR+cc9o19M1FeDeh4Ez5
oiaz2ht9hDJ7vSI9/pBxx7l5x01m6NQpIp3VUr3tbriQ0o+nmwzfHh/WZEgsLsS5
bidC7YmVlTg12OpG+CTtUp8JZ5rw4shl7q7YchTeToYg6GuyUGBMG70yIYGd7nDU
lQEugjW8A4F1zrKJEKyFujdaKHSCug92Yo97d5iRbSaMmT2+LBW44OreiKbole4d
mHdN3mntQNls36ITiBgI6rlQ0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org