Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/Sw6Z9QJevz2k8NUBsZarhRQR2yo.roa
File: Sw6Z9QJevz2k8NUBsZarhRQR2yo.roa (raw, json)
Hash identifier: EFZPqRc/7/KSnxNzCII9G5jrPMZhPlEmDDuu3tw5WJs=
Subject key identifier: 4B:0E:99:F5:02:5E:BF:3D:A4:F0:D5:01:B1:96:AB:85:14:11:DB:2A
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 0551DFE2
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/Sw6Z9QJevz2k8NUBsZarhRQR2yo.roa
Signing time: Sat 01 Jan 2022 13:59:09 +0000
ROA not before: Sat 01 Jan 2022 13:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134512
IP address blocks: 91.239.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89251810 (0x551dfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jan 1 13:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b0e99f5025ebf3da4f0d501b196ab851411db2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:21:ca:96:f2:02:25:24:7a:8e:ee:8e:57:
f8:42:ae:c0:d1:fa:83:e4:7d:7a:8c:cb:29:16:dc:
b5:59:e3:c4:53:b2:8d:af:2b:87:30:69:3e:2a:21:
c4:19:43:e6:93:77:c6:eb:e3:8c:cb:11:f3:1e:5f:
90:81:6f:ac:3e:2c:73:d9:e7:94:c1:6e:a9:c0:be:
71:30:61:f4:7b:fa:0b:88:09:9a:47:50:f6:26:4f:
4c:b9:7b:14:87:08:a7:eb:9b:8c:40:02:82:99:b2:
bc:89:63:6c:bf:0b:1d:e9:17:a4:23:53:bc:2e:86:
72:53:cb:ce:40:4d:06:d2:0e:a1:98:df:24:5b:fc:
e1:04:9b:f0:74:ef:58:c3:2a:62:eb:1a:bf:54:39:
92:e8:3f:90:0f:4e:c3:19:3d:4a:7f:d2:29:1d:0e:
2a:7d:f6:8b:5a:ce:e0:a9:e0:d3:35:a1:da:98:05:
1e:91:24:f2:4d:1c:7f:48:12:ca:94:f5:08:6f:f0:
bc:cf:5c:00:21:b5:64:a6:91:b8:56:13:82:aa:ac:
4c:1b:48:91:c5:0d:ae:f8:e1:ba:6c:3f:b7:a0:98:
f1:f8:c0:bf:5b:4a:4f:bd:71:62:d2:56:4e:70:95:
e2:1c:07:60:f6:56:05:37:f9:d6:a8:5d:29:c5:03:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0E:99:F5:02:5E:BF:3D:A4:F0:D5:01:B1:96:AB:85:14:11:DB:2A
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/Sw6Z9QJevz2k8NUBsZarhRQR2yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:21:78:47:15:70:7a:80:ef:df:b7:ae:f3:84:81:ea:39:ac:
bf:6e:cd:86:17:7e:08:fd:0e:c1:11:f6:76:2b:db:e7:eb:a3:
f1:34:ba:ee:34:e4:06:d7:99:87:77:63:d1:0d:e6:b0:bc:0b:
fb:3c:9b:22:32:5f:ca:aa:ee:ec:df:03:27:26:b7:7f:32:cf:
8c:d5:23:c4:cb:4d:a4:ce:5f:36:38:c9:dd:98:a0:7c:31:ff:
bb:05:7f:2b:89:94:68:52:ab:ee:3e:1b:27:99:19:92:cf:c1:
31:b4:94:73:25:af:8c:66:18:c7:3f:22:42:39:e5:45:12:52:
27:42:90:62:95:39:2a:13:7d:89:56:f7:7a:c9:4d:08:1e:c9:
59:a1:cf:bb:b4:62:a1:a6:3f:92:c2:5a:fe:67:c9:fd:08:b9:
31:32:14:1c:07:88:70:9c:12:24:7b:09:84:5c:6b:94:45:78:
9e:72:fd:b7:3f:7f:ea:06:65:19:44:76:94:ac:2b:75:94:34:
e4:3f:e5:56:80:1e:0c:5f:bb:9e:13:ab:1d:31:94:f9:83:55:
fe:16:16:c7:96:a2:04:1a:42:ac:84:9c:02:c7:d8:67:f9:08:
f4:e4:12:81:4a:1a:96:b4:41:87:55:bb:fe:d8:a8:dc:7f:15:
4e:d7:c2:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBVHf4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmE1ZjBlNzY1NDc1NzU5NTdiYzkyYzZkZGRkMDg0ZDNlYTdmODYzMB4XDTIyMDEw
MTEzNTkwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGIwZTk5ZjUwMjVl
YmYzZGE0ZjBkNTAxYjE5NmFiODUxNDExZGIyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvUIcqW8gIlJHqO7o5X+EKuwNH6g+R9eozLKRbctVnjxFOy
ja8rhzBpPiohxBlD5pN3xuvjjMsR8x5fkIFvrD4sc9nnlMFuqcC+cTBh9Hv6C4gJ
mkdQ9iZPTLl7FIcIp+ubjEACgpmyvIljbL8LHekXpCNTvC6GclPLzkBNBtIOoZjf
JFv84QSb8HTvWMMqYusav1Q5kug/kA9Owxk9Sn/SKR0OKn32i1rO4Kng0zWh2pgF
HpEk8k0cf0gSypT1CG/wvM9cACG1ZKaRuFYTgqqsTBtIkcUNrvjhumw/t6CY8fjA
v1tKT71xYtJWTnCV4hwHYPZWBTf51qhdKcUDyc0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRLDpn1Al6/PaTw1QGxlquFFBHbKjAfBgNVHSMEGDAWgBS/pfDnZUdXWVe8
ksbd3QhNPqf4YzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y2WHc1MlZIVjFsWHZKTEczZDBJVFQ2bi1HTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvYmNjY2I4LTZjNzQtNGQwYS04OTVmLTAxZDE5YTc0YmUyMy8x
L1N3Nlo5UUpldnoyazhOVUJzWmFyaFJRUjJ5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
YmNjY2I4LTZjNzQtNGQwYS04OTVmLTAxZDE5YTc0YmUyMy8xL3Y2WHc1MlZIVjFs
WHZKTEczZDBJVFQ2bi1HTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvvNzANBgkqhkiG9w0BAQsFAAOC
AQEAPCF4RxVweoDv37eu84SB6jmsv27Nhhd+CP0OwRH2divb5+uj8TS67jTkBteZ
h3dj0Q3msLwL+zybIjJfyqru7N8DJya3fzLPjNUjxMtNpM5fNjjJ3ZigfDH/uwV/
K4mUaFKr7j4bJ5kZks/BMbSUcyWvjGYYxz8iQjnlRRJSJ0KQYpU5KhN9iVb3eslN
CB7JWaHPu7RioaY/ksJa/mfJ/Qi5MTIUHAeIcJwSJHsJhFxrlEV4nnL9tz9/6gZl
GUR2lKwrdZQ05D/lVoAeDF+7nhOrHTGU+YNV/hYWx5aiBBpCrIScAsfYZ/kI9OQS
gUoalrRBh1W7/tio3H8VTtfCIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org