Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/rw4kqcgSdJ1bhjvu_WcKq1kiB54.roa
File: rw4kqcgSdJ1bhjvu_WcKq1kiB54.roa (raw, json)
Hash identifier: aS+qNPTK9OUmrCirvlXS83TbULoZIDbs4N2deClpRKU=
Subject key identifier: AF:0E:24:A9:C8:12:74:9D:5B:86:3B:EE:FD:67:0A:AB:59:22:07:9E
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 0484AB7C
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/rw4kqcgSdJ1bhjvu_WcKq1kiB54.roa
Signing time: Sat 01 Jan 2022 12:55:38 +0000
ROA not before: Sat 01 Jan 2022 12:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1820
IP address blocks: 91.192.184.0/22 maxlen: 32
194.246.120.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75803516 (0x484ab7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 12:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af0e24a9c812749d5b863beefd670aab5922079e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:3f:5b:ac:8c:43:57:3f:09:6f:bc:1b:3d:
b6:35:f0:fd:48:0a:a8:54:13:f3:69:15:4c:c2:0d:
34:42:69:bb:6f:64:65:ac:fc:59:1c:c5:0f:73:25:
54:58:6c:eb:00:47:1e:0b:c2:55:a4:f1:9b:59:73:
28:35:62:bb:f6:ef:05:53:4f:b4:95:bf:5a:81:96:
3e:f7:9e:12:ac:4b:3a:f1:cf:ff:0c:08:cc:5a:6d:
f8:72:b0:0b:18:fe:9f:6c:4b:78:17:40:b9:a2:06:
89:b4:0c:36:80:26:55:34:73:36:2d:e9:4f:0b:6d:
45:ea:7c:44:35:a2:ad:9d:4d:fe:b2:aa:c2:52:22:
a4:9b:43:29:1b:88:6e:5f:5d:a2:9a:dc:86:fe:d8:
43:e6:77:f2:a5:cb:75:5d:2a:92:b3:70:27:6c:ae:
2b:a2:11:88:c1:50:d2:9e:26:69:7e:80:a1:70:86:
f8:fa:c2:6b:25:0f:6a:b2:f4:63:15:be:09:73:55:
2e:d6:bf:56:c3:32:58:49:7b:63:93:a0:25:98:17:
60:69:77:18:b2:3c:34:3a:ea:04:27:7c:d8:76:89:
70:1f:4e:4e:4b:d8:81:2a:1f:16:e4:2e:73:16:c2:
00:8a:33:4d:5c:82:f2:06:eb:e5:86:e5:ca:a8:08:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:24:A9:C8:12:74:9D:5B:86:3B:EE:FD:67:0A:AB:59:22:07:9E
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/rw4kqcgSdJ1bhjvu_WcKq1kiB54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
194.246.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:53:5b:be:fd:58:70:d0:4e:b6:17:a4:18:13:a9:c0:8d:81:
53:01:b5:fa:f1:4e:dc:95:11:91:76:9c:e4:14:a1:e0:1a:20:
6d:68:01:a3:a7:3f:70:a5:5f:0b:9e:be:5c:20:cb:54:8c:f0:
1f:56:85:ff:2f:b3:8a:99:e6:54:8c:d4:3c:c3:ac:93:0a:6d:
2a:98:39:70:00:ae:bd:f3:76:b1:fe:6e:f6:06:eb:36:bb:f8:
2c:16:be:15:1c:ca:f8:3a:c7:17:e7:d7:f1:25:f6:75:14:e2:
7e:98:a9:b6:ed:99:09:1b:67:84:48:ea:28:1c:78:72:c5:ee:
a0:1d:9b:45:da:ae:e6:cb:3a:0c:ea:31:d3:94:43:44:cd:72:
cb:1d:79:45:9f:31:32:85:4a:40:29:7b:30:9c:6b:00:05:34:
f5:af:9a:e1:36:5d:47:cf:11:90:72:ef:81:be:25:5d:e3:90:
0d:cb:d2:2e:0b:e3:da:4f:1a:fc:4e:da:69:2c:39:bc:64:2b:
89:7a:5c:fe:f6:f7:9e:43:14:e1:dd:6c:35:a0:fc:b8:78:aa:
93:45:2d:99:2b:d6:f5:21:8b:65:94:f1:26:dc:ef:75:7e:ce:
ef:3f:cb:ce:41:75:3c:c8:92:de:af:22:3c:ff:86:f6:a4:75:
3e:fb:ad:04
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBISrfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MDZmMDE0YTJiYzc2YWUwNGU2ZDMwNGQwNmFhY2JmYzhlODVkNTE0MB4XDTIyMDEw
MTEyNTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWYwZTI0YTljODEy
NzQ5ZDViODYzYmVlZmQ2NzBhYWI1OTIyMDc5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANhqP1usjENXPwlvvBs9tjXw/UgKqFQT82kVTMINNEJpu29k
Zaz8WRzFD3MlVFhs6wBHHgvCVaTxm1lzKDViu/bvBVNPtJW/WoGWPveeEqxLOvHP
/wwIzFpt+HKwCxj+n2xLeBdAuaIGibQMNoAmVTRzNi3pTwttRep8RDWirZ1N/rKq
wlIipJtDKRuIbl9doprchv7YQ+Z38qXLdV0qkrNwJ2yuK6IRiMFQ0p4maX6AoXCG
+PrCayUParL0YxW+CXNVLta/VsMyWEl7Y5OgJZgXYGl3GLI8NDrqBCd82HaJcB9O
TkvYgSofFuQucxbCAIozTVyC8gbr5YblyqgIcFMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSvDiSpyBJ0nVuGO+79ZwqrWSIHnjAfBgNVHSMEGDAWgBRAbwFKK8dq4E5t
ME0Gqsv8joXVFDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FHOEJTaXZIYXVCT2JUQk5CcXJMX0k2RjFSUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvYWIzY2FhLTMxM2UtNDY4My04NGRiLTllZTVhNzhlYzU3Yi8x
L3J3NGtxY2dTZEoxYmhqdnVfV2NLcTFraUI1NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
YWIzY2FhLTMxM2UtNDY4My04NGRiLTllZTVhNzhlYzU3Yi8xL1FHOEJTaXZIYXVC
T2JUQk5CcXJMX0k2RjFSUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvAuAMEAcL2eDANBgkqhkiG9w0B
AQsFAAOCAQEALlNbvv1YcNBOthekGBOpwI2BUwG1+vFO3JURkXac5BSh4BogbWgB
o6c/cKVfC56+XCDLVIzwH1aF/y+zipnmVIzUPMOskwptKpg5cACuvfN2sf5u9gbr
Nrv4LBa+FRzK+DrHF+fX8SX2dRTifpiptu2ZCRtnhEjqKBx4csXuoB2bRdqu5ss6
DOox05RDRM1yyx15RZ8xMoVKQCl7MJxrAAU09a+a4TZdR88RkHLvgb4lXeOQDcvS
Lgvj2k8a/E7aaSw5vGQriXpc/vb3nkMU4d1sNaD8uHiqk0UtmSvW9SGLZZTxJtzv
dX7O7z/LzkF1PMiS3q8iPP+G9qR1PvutBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:51 2024 by rpki-client on console-ams.rpki-client.org