Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/D8F96-XaPwqU2cIMJV2rzsQMluE.roa
File: D8F96-XaPwqU2cIMJV2rzsQMluE.roa (raw, json)
Hash identifier: xpyYqJnO7mEaxWw+6GyeBP1eih5WkX6VPKcou4UvOSs=
Subject key identifier: 0F:C1:7D:EB:E5:DA:3F:0A:94:D9:C2:0C:25:5D:AB:CE:C4:0C:96:E1
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 0618C8D3
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/D8F96-XaPwqU2cIMJV2rzsQMluE.roa
Signing time: Mon 28 Mar 2022 21:15:27 +0000
ROA not before: Mon 28 Mar 2022 21:15:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60064
IP address blocks: 91.239.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102287571 (0x618c8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Mar 28 21:15:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fc17debe5da3f0a94d9c20c255dabcec40c96e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:78:44:c4:81:ff:79:62:7b:c1:2b:43:fd:
bb:b7:75:a7:ce:96:31:3b:c1:3b:c4:8d:15:0c:d0:
a8:40:7a:18:2f:ba:bc:34:d9:64:5d:b1:61:5a:1b:
9b:82:82:39:15:2b:48:a5:92:69:ed:f4:06:50:36:
c4:30:c0:12:e2:93:22:c6:53:8b:82:ce:65:47:66:
ea:6c:ff:7f:0c:cd:f9:d3:17:30:29:c8:47:8b:91:
ab:7a:b9:f1:0b:04:86:df:57:ea:e9:c4:21:55:5c:
5a:cb:ac:06:4c:83:8f:1f:92:1d:ab:76:db:b4:a6:
1e:f7:39:5c:00:0b:59:09:0f:50:af:78:b6:9d:71:
b0:f1:c2:9a:bf:8c:e1:46:63:73:35:83:ad:c8:6f:
e4:f3:fb:81:28:96:ac:ba:7d:cd:6b:a1:d1:13:ce:
cc:9f:76:64:18:ab:96:c3:7c:7a:79:08:ae:5a:88:
2b:c2:ad:13:69:63:b9:67:07:cd:58:fc:e6:66:e1:
b9:08:d6:cb:53:96:f0:ca:4c:08:dc:47:04:ad:9c:
a0:6c:eb:f9:ea:54:79:17:32:5a:1f:96:af:3d:4b:
f4:ef:e5:2f:15:c0:5d:d9:ac:63:1e:bf:8a:78:fa:
08:b7:90:5c:26:cf:1d:ea:10:64:83:0b:04:fc:3d:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C1:7D:EB:E5:DA:3F:0A:94:D9:C2:0C:25:5D:AB:CE:C4:0C:96:E1
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/D8F96-XaPwqU2cIMJV2rzsQMluE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.55.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c1:c1:8f:ad:24:5b:d0:ac:cd:aa:7e:e5:17:69:57:20:0d:
69:16:51:f4:c4:2a:bf:2e:01:44:0a:9e:42:d5:2d:ca:7e:6c:
ac:5a:d1:6d:ca:72:9d:ef:6a:8c:78:ba:20:7c:b4:24:83:52:
9d:66:7c:60:50:33:e1:88:e2:ef:dc:aa:e0:a4:7e:7d:a9:97:
32:ea:6d:a3:d0:78:fd:0f:2d:82:a0:7e:3f:bc:0c:80:c8:2f:
e7:c3:1f:a1:52:ed:e0:b7:dd:78:08:91:85:ff:2a:c2:f7:d2:
2c:c7:98:3b:a8:97:09:06:fe:fd:66:8f:a3:7b:1a:d9:21:3f:
17:80:0e:78:47:81:c7:0f:25:8e:4a:80:84:99:ef:fc:cb:d8:
ea:5b:ad:e7:9d:cf:e8:aa:68:0b:f7:d8:6b:eb:21:e5:0d:e0:
b6:ac:74:95:f8:c7:be:09:43:c3:8b:da:9e:83:24:f0:4d:aa:
2d:42:f8:01:ad:37:18:21:53:51:33:63:92:4f:7e:a8:1c:79:
39:dd:7c:34:86:da:58:41:d4:6e:e2:33:80:f6:ad:c4:b7:4d:
9f:64:94:9d:f5:d9:0d:65:c9:3f:e7:b2:6d:46:a0:1c:d7:a9:
7f:53:86:9b:21:01:6a:69:68:ac:a0:8e:15:a5:a1:c9:32:fa:
63:84:89:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBhjI0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmE1ZjBlNzY1NDc1NzU5NTdiYzkyYzZkZGRkMDg0ZDNlYTdmODYzMB4XDTIyMDMy
ODIxMTUyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGZjMTdkZWJlNWRh
M2YwYTk0ZDljMjBjMjU1ZGFiY2VjNDBjOTZlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1oeETEgf95YnvBK0P9u7d1p86WMTvBO8SNFQzQqEB6GC+6
vDTZZF2xYVobm4KCORUrSKWSae30BlA2xDDAEuKTIsZTi4LOZUdm6mz/fwzN+dMX
MCnIR4uRq3q58QsEht9X6unEIVVcWsusBkyDjx+SHat227SmHvc5XAALWQkPUK94
tp1xsPHCmr+M4UZjczWDrchv5PP7gSiWrLp9zWuh0RPOzJ92ZBirlsN8enkIrlqI
K8KtE2ljuWcHzVj85mbhuQjWy1OW8MpMCNxHBK2coGzr+epUeRcyWh+Wrz1L9O/l
LxXAXdmsYx6/inj6CLeQXCbPHeoQZIMLBPw9TCcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPwX3r5do/CpTZwgwlXavOxAyW4TAfBgNVHSMEGDAWgBS/pfDnZUdXWVe8
ksbd3QhNPqf4YzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y2WHc1MlZIVjFsWHZKTEczZDBJVFQ2bi1HTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvYmNjY2I4LTZjNzQtNGQwYS04OTVmLTAxZDE5YTc0YmUyMy8x
L0Q4Rjk2LVhhUHdxVTJjSU1KVjJyenNRTWx1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
YmNjY2I4LTZjNzQtNGQwYS04OTVmLTAxZDE5YTc0YmUyMy8xL3Y2WHc1MlZIVjFs
WHZKTEczZDBJVFQ2bi1HTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvvNzANBgkqhkiG9w0BAQsFAAOC
AQEAmMHBj60kW9Cszap+5RdpVyANaRZR9MQqvy4BRAqeQtUtyn5srFrRbcpyne9q
jHi6IHy0JINSnWZ8YFAz4Yji79yq4KR+famXMupto9B4/Q8tgqB+P7wMgMgv58Mf
oVLt4LfdeAiRhf8qwvfSLMeYO6iXCQb+/WaPo3sa2SE/F4AOeEeBxw8ljkqAhJnv
/MvY6lut553P6KpoC/fYa+sh5Q3gtqx0lfjHvglDw4vanoMk8E2qLUL4Aa03GCFT
UTNjkk9+qBx5Od18NIbaWEHUbuIzgPatxLdNn2SUnfXZDWXJP+eybUagHNepf1OG
myEBamlorKCOFaWhyTL6Y4SJ0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org