Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/asimj95PNDa-DP6K9G368k2938U.roa
File: asimj95PNDa-DP6K9G368k2938U.roa (raw, json)
Hash identifier: 0pCf6aXtiCfMCy0MzKgkObdDEMuVvjZXv7ZN7/TY0TM=
Subject key identifier: 6A:C8:A6:8F:DE:4F:34:36:BE:0C:FE:8A:F4:6D:FA:F2:4D:BD:DF:C5
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 06C1B58D
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/asimj95PNDa-DP6K9G368k2938U.roa
Signing time: Fri 29 Apr 2022 14:05:45 +0000
ROA not before: Fri 29 Apr 2022 14:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 91.194.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113358221 (0x6c1b58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Apr 29 14:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ac8a68fde4f3436be0cfe8af46dfaf24dbddfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:4d:9e:67:c2:c4:35:bb:67:b3:64:3f:49:
5b:53:5e:7c:60:a4:e2:8e:ea:91:b1:be:5f:0a:2b:
50:f4:88:00:67:09:36:02:2b:df:c4:24:78:9b:eb:
1f:81:82:2f:17:c7:95:9d:ef:2c:c7:dc:97:ce:a9:
1c:0a:e2:48:2b:f1:f0:69:2c:cf:dc:f4:02:00:4d:
75:a6:fb:53:54:f6:61:14:17:5f:30:d4:f0:2e:92:
60:0c:db:da:51:bf:58:8a:d5:ce:4d:6e:44:a0:d9:
44:89:6f:36:47:f2:ec:e3:7d:c0:85:c9:c5:9f:50:
7a:4c:a9:b3:db:15:78:58:b4:1f:90:c4:36:b0:3a:
c8:53:88:5c:72:3c:bf:ec:e7:7a:13:a2:7f:6d:48:
65:80:b8:8f:e9:5e:8c:2c:40:d1:b8:06:3a:d9:f8:
71:5f:9c:ef:98:ea:7a:15:4e:56:d5:fe:34:ac:f2:
61:c3:ef:08:ed:6c:9e:66:e2:9a:ed:75:08:b9:96:
5c:4e:99:78:9c:db:5c:47:5d:38:7f:6a:e5:c9:b4:
25:38:76:1f:8c:7d:cb:de:ad:1e:46:fc:8f:e4:39:
26:f1:4e:2d:ff:40:c0:65:33:1e:f3:48:b5:28:1b:
9d:4d:06:1c:87:2c:ed:40:b1:66:0d:7b:48:94:18:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:A6:8F:DE:4F:34:36:BE:0C:FE:8A:F4:6D:FA:F2:4D:BD:DF:C5
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/asimj95PNDa-DP6K9G368k2938U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
76:26:15:b7:d0:f0:dc:6f:29:f3:b7:20:28:d5:6d:ec:95:3e:
fb:d5:45:ea:99:39:f1:82:3f:0e:9b:55:29:0c:25:fb:b8:cf:
b7:21:86:e9:c7:50:ef:64:0e:b7:bf:d6:77:ca:a3:c9:89:cc:
10:6a:31:ca:5e:65:02:7d:6e:b7:52:40:52:ec:bb:27:ae:25:
39:7a:b8:97:85:2f:0f:af:e9:25:a7:d5:12:15:d2:fc:50:65:
0f:43:b3:a7:f6:e5:1a:a0:23:01:56:75:3f:d7:69:1d:fb:dd:
59:2c:7b:a5:81:19:75:09:99:30:d9:4b:5c:33:22:4f:6a:29:
2b:4d:0a:26:74:9a:11:2c:29:29:eb:87:eb:79:b1:53:43:bc:
84:9e:48:3c:91:26:7d:d5:4c:6d:2c:06:f1:af:01:6f:e4:95:
39:d6:00:11:fa:8e:39:af:04:9b:25:23:ae:84:6d:bb:e5:2e:
e2:8a:bf:18:e8:ac:8b:42:f7:9b:27:be:67:b7:1d:af:fc:80:
76:80:09:78:fb:6d:24:cd:f4:c7:7b:e1:3d:ef:0e:e0:ad:e9:
f9:b8:a2:cc:d9:d0:14:f1:04:32:e4:32:3e:e5:11:cc:8f:56:
de:e1:00:c2:bf:93:b4:6c:63:e2:ed:93:2e:88:3f:0a:2e:3e:
6f:a0:b7:40
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBsG1jTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
M2MwMzE1OGFlZDgxMTYxZDRmNTdjMTc0MmQ0NjA4MzQxNzNhNzllMB4XDTIyMDQy
OTE0MDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmFjOGE2OGZkZTRm
MzQzNmJlMGNmZThhZjQ2ZGZhZjI0ZGJkZGZjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO9aTZ5nwsQ1u2ezZD9JW1NefGCk4o7qkbG+XworUPSIAGcJ
NgIr38QkeJvrH4GCLxfHlZ3vLMfcl86pHAriSCvx8Gksz9z0AgBNdab7U1T2YRQX
XzDU8C6SYAzb2lG/WIrVzk1uRKDZRIlvNkfy7ON9wIXJxZ9Qekyps9sVeFi0H5DE
NrA6yFOIXHI8v+znehOif21IZYC4j+lejCxA0bgGOtn4cV+c75jqehVOVtX+NKzy
YcPvCO1snmbimu11CLmWXE6ZeJzbXEddOH9q5cm0JTh2H4x9y96tHkb8j+Q5JvFO
Lf9AwGUzHvNItSgbnU0GHIcs7UCxZg17SJQYvy0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqyKaP3k80Nr4M/or0bfryTb3fxTAfBgNVHSMEGDAWgBSjwDFYrtgRYdT1
fBdC1GCDQXOnnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L284QXhXSzdZRVdIVTlYd1hRdFJnZzBGenA1NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvYjY2NDI5LTRmMjAtNGI5MC1hNmI4LTRjMTBlMzM2MDU3Ny8x
L2FzaW1qOTVQTkRhLURQNks5RzM2OGsyOTM4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
YjY2NDI5LTRmMjAtNGI5MC1hNmI4LTRjMTBlMzM2MDU3Ny8xL284QXhXSzdZRVdI
VTlYd1hRdFJnZzBGenA1NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvC7DANBgkqhkiG9w0BAQsFAAOC
AQEAdiYVt9Dw3G8p87cgKNVt7JU++9VF6pk58YI/DptVKQwl+7jPtyGG6cdQ72QO
t7/Wd8qjyYnMEGoxyl5lAn1ut1JAUuy7J64lOXq4l4UvD6/pJafVEhXS/FBlD0Oz
p/blGqAjAVZ1P9dpHfvdWSx7pYEZdQmZMNlLXDMiT2opK00KJnSaESwpKeuH63mx
U0O8hJ5IPJEmfdVMbSwG8a8Bb+SVOdYAEfqOOa8EmyUjroRtu+Uu4oq/GOisi0L3
mye+Z7cdr/yAdoAJePttJM30x3vhPe8O4K3p+biizNnQFPEEMuQyPuURzI9W3uEA
wr+TtGxj4u2TLog/Ci4+b6C3QA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org