Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/Snb-G9xhhZnjYiaR0YJ87QM2Rso.roa
File: Snb-G9xhhZnjYiaR0YJ87QM2Rso.roa (raw, json)
Hash identifier: 76Nql66EVy0ktBfKSscp2f521nwyeSVjOetxKxVOHlg=
Subject key identifier: 4A:76:FE:1B:DC:61:85:99:E3:62:26:91:D1:82:7C:ED:03:36:46:CA
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 0444D77E
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/Snb-G9xhhZnjYiaR0YJ87QM2Rso.roa
Signing time: Sat 01 Jan 2022 00:56:50 +0000
ROA not before: Sat 01 Jan 2022 00:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 91.199.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71620478 (0x444d77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jan 1 00:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a76fe1bdc618599e3622691d1827ced033646ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:53:e7:f8:f2:60:01:f0:b6:92:15:1f:ad:
90:51:41:a6:45:ae:86:29:47:36:99:e2:13:c1:53:
63:e2:86:35:ff:ca:66:9e:92:40:fa:d3:57:00:42:
ef:d8:60:f9:f7:b2:df:68:a0:73:bb:c4:6f:53:8b:
be:45:0b:35:89:3f:50:22:c5:7b:b8:1d:49:25:77:
1e:40:8e:7b:c1:8d:79:b5:e6:9f:35:61:76:2a:5a:
e7:e0:ff:20:48:66:69:ca:f3:63:bd:f4:51:d4:4a:
c6:7a:7d:78:d0:5c:f3:44:28:0b:d5:b4:b7:d4:9b:
a3:4b:43:b5:84:b3:c9:e6:0a:00:57:b8:27:4a:75:
48:64:bd:f8:84:16:25:9a:0c:af:f8:0b:b0:32:81:
71:a1:05:e9:22:d7:43:fa:15:6d:77:49:0e:db:1d:
cc:81:b2:ed:c6:10:05:44:16:08:b3:d6:34:9f:85:
5f:b6:3d:c8:e7:28:d0:56:34:c3:e3:71:05:89:01:
c1:32:e4:3d:f4:1c:50:ea:01:fb:65:f5:cd:0b:d2:
6e:61:4c:b3:46:70:a1:60:c0:bf:c0:10:85:b5:c0:
74:d7:47:3a:b6:e7:66:e6:73:dc:f4:b8:6e:86:ab:
e4:67:f3:a6:8d:31:18:1f:30:ef:c6:fb:61:c3:ef:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:FE:1B:DC:61:85:99:E3:62:26:91:D1:82:7C:ED:03:36:46:CA
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/Snb-G9xhhZnjYiaR0YJ87QM2Rso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:76:d7:aa:67:d4:f0:23:de:f5:72:fe:d0:66:b4:7b:91:3e:
ce:96:32:db:ea:c4:60:63:34:34:68:6e:24:84:9e:4a:ac:94:
6d:cf:52:58:b4:87:c1:2a:83:9f:b4:ea:46:ef:6a:ee:e1:e4:
8d:c5:80:6c:1f:8e:8c:b0:04:cd:0c:40:ce:07:99:92:32:63:
dd:c1:00:ba:c1:9e:72:3f:76:71:45:a6:85:2c:36:16:35:e1:
e5:f6:6b:e7:c9:f1:6e:b2:07:88:5e:62:76:ed:e8:0a:60:c6:
00:a9:64:2a:46:73:a5:c5:fd:17:9b:d6:94:62:f9:88:67:b2:
c0:b0:f5:3c:d2:60:d1:ac:34:a8:4b:7a:e9:8f:1a:bd:56:bb:
d8:c4:44:17:52:55:34:6e:25:67:c0:01:2c:8c:1c:08:93:98:
f6:db:18:38:ad:97:d4:f0:dc:a1:24:29:ec:b3:de:38:2e:77:
e3:df:21:03:33:7b:3f:40:7f:5d:34:07:c5:5d:b4:b1:36:06:
59:19:86:c1:89:b5:7c:51:ac:1f:9a:ad:40:f2:d8:58:6b:57:
b6:78:56:3d:b5:1b:d4:66:c2:1a:d1:ac:c7:d3:a4:7a:f9:df:
1d:b9:c5:56:b6:a8:1d:ec:fd:2f:a2:d8:27:12:bc:0b:14:3f:
e5:0b:9e:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBETXfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZDMyNWJlZmQ4YjdlODVlMzQ3MTA0MjA2ZDhjMGFiOGE2ZTBmYjRlMB4XDTIyMDEw
MTAwNTY1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE3NmZlMWJkYzYx
ODU5OWUzNjIyNjkxZDE4MjdjZWQwMzM2NDZjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWlU+f48mAB8LaSFR+tkFFBpkWuhilHNpniE8FTY+KGNf/K
Zp6SQPrTVwBC79hg+fey32igc7vEb1OLvkULNYk/UCLFe7gdSSV3HkCOe8GNebXm
nzVhdipa5+D/IEhmacrzY730UdRKxnp9eNBc80QoC9W0t9Sbo0tDtYSzyeYKAFe4
J0p1SGS9+IQWJZoMr/gLsDKBcaEF6SLXQ/oVbXdJDtsdzIGy7cYQBUQWCLPWNJ+F
X7Y9yOco0FY0w+NxBYkBwTLkPfQcUOoB+2X1zQvSbmFMs0ZwoWDAv8AQhbXAdNdH
OrbnZuZz3PS4boar5Gfzpo0xGB8w78b7YcPvQzECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKdv4b3GGFmeNiJpHRgnztAzZGyjAfBgNVHSMEGDAWgBRdMlvv2LfoXjRx
BCBtjAq4puD7TjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hUSmI3OWkzNkY0MGNRUWdiWXdLdUtiZy0wNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNTE0NmQwLTNlNzQtNDdhMS1hYTNlLWY5OTk1Yjc4YTg1Zi8x
L1NuYi1HOXhoaFpuallpYVIwWUo4N1FNMlJzby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NTE0NmQwLTNlNzQtNDdhMS1hYTNlLWY5OTk1Yjc4YTg1Zi8xL1hUSmI3OWkzNkY0
MGNRUWdiWXdLdUtiZy0wNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHxjANBgkqhkiG9w0BAQsFAAOC
AQEAoHbXqmfU8CPe9XL+0Ga0e5E+zpYy2+rEYGM0NGhuJISeSqyUbc9SWLSHwSqD
n7TqRu9q7uHkjcWAbB+OjLAEzQxAzgeZkjJj3cEAusGecj92cUWmhSw2FjXh5fZr
58nxbrIHiF5idu3oCmDGAKlkKkZzpcX9F5vWlGL5iGeywLD1PNJg0aw0qEt66Y8a
vVa72MREF1JVNG4lZ8ABLIwcCJOY9tsYOK2X1PDcoSQp7LPeOC53498hAzN7P0B/
XTQHxV20sTYGWRmGwYm1fFGsH5qtQPLYWGtXtnhWPbUb1GbCGtGsx9OkevnfHbnF
VraoHez9L6LYJxK8CxQ/5Quewg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:12 2024 by rpki-client on console-ams.rpki-client.org