Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/vTjH-feWKmQUsads-ccp7jTXxog.roa
File: vTjH-feWKmQUsads-ccp7jTXxog.roa (raw, json)
Hash identifier: AkpvRPXCmBTxvGR8dk4ySv2Xe8xNFCQoG3GeM2kT/n0=
Subject key identifier: BD:38:C7:F9:F7:96:2A:64:14:B1:A7:6C:F9:C7:29:EE:34:D7:C6:88
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 06B0E999
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/vTjH-feWKmQUsads-ccp7jTXxog.roa
Signing time: Sat 01 Jan 2022 15:00:36 +0000
ROA not before: Sat 01 Jan 2022 15:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47973
IP address blocks: 91.103.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112257433 (0x6b0e999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 15:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd38c7f9f7962a6414b1a76cf9c729ee34d7c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:05:09:45:7b:d7:bc:71:bd:8f:a1:b2:6e:
22:c7:5b:22:9a:d5:78:8f:6c:fb:e2:3c:de:e8:06:
3e:f5:d6:ce:2f:30:63:17:b1:ff:fe:e9:c8:04:5f:
75:a2:55:d8:8f:1f:fd:fa:4f:16:75:39:e1:26:22:
c2:c2:fc:7d:75:9b:ea:d0:7d:39:e1:69:43:d6:54:
f0:c2:6c:1c:54:63:d4:d8:1b:e0:35:72:5a:02:61:
0e:16:f0:cc:11:5f:aa:cd:f4:b6:79:4c:48:a9:65:
b7:29:86:65:31:6a:a7:9c:ff:28:4b:b4:7c:7b:78:
4e:bb:9f:06:38:59:5c:de:78:82:e4:01:63:44:bb:
5c:46:de:e7:9e:4d:26:7e:c2:8a:0b:33:40:76:5e:
98:ab:6f:24:e6:cf:3e:7b:a6:1c:ad:94:57:72:52:
ea:11:46:50:44:a8:68:9e:b3:ed:9b:7f:f1:29:44:
74:4b:43:84:d2:6b:dd:7c:c1:4b:5a:2a:0f:65:a3:
c6:14:02:2d:28:88:a2:96:09:e5:55:98:35:ef:2a:
c3:9b:0f:e5:62:56:37:1b:1d:4b:71:58:98:6b:aa:
b8:26:5d:b1:4c:e4:82:9d:bf:b3:91:c5:0d:3a:c8:
bc:c9:e1:39:a5:3f:6c:64:11:6b:75:ce:21:ca:f8:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:C7:F9:F7:96:2A:64:14:B1:A7:6C:F9:C7:29:EE:34:D7:C6:88
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/vTjH-feWKmQUsads-ccp7jTXxog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:6b:5d:6f:e1:bd:b3:4e:80:12:b0:3a:e8:2c:f5:dc:e5:
4b:64:5f:11:98:22:79:66:48:c3:49:b7:10:9c:b2:14:b8:24:
47:da:e3:f1:0e:18:84:f5:7e:53:39:9a:7a:0a:b4:90:08:ae:
09:ed:3a:56:96:e4:32:87:4c:8f:9e:7d:ef:8d:17:0a:65:6e:
1b:63:ad:66:47:6d:09:da:a1:cf:d9:fc:dd:02:f6:c9:07:fb:
08:3a:09:44:8f:32:ef:44:bd:d0:55:c6:6c:1a:40:86:ef:6c:
90:6c:17:61:e2:14:01:42:ac:b7:5a:7d:0a:b2:d8:63:2f:7f:
0b:e1:e8:28:e5:1b:e4:4c:38:84:5b:6e:4e:1f:4f:2e:db:93:
fc:ec:de:64:a8:d4:f0:39:fb:f4:46:8d:bd:ac:9f:88:4c:84:
13:b9:91:d3:a9:72:c9:e7:79:24:71:87:ae:5c:b1:df:3a:5e:
d8:2e:0f:d4:1c:1d:48:7a:e3:fb:65:ea:a9:26:7c:55:85:b3:
8a:c0:78:59:50:80:55:72:25:a8:9d:52:fd:af:2c:50:87:a3:
94:53:05:d7:54:33:f3:51:20:aa:59:bc:c6:b8:8c:68:92:7f:
a0:d4:26:84:db:be:49:01:6e:1d:a7:02:51:aa:44:12:73:0f:
3d:d7:74:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBrDpmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
N2Q3NTMzNWY3N2JmNDI0MDk3NjI3N2IxZGQwZTE5YmIyM2E4ZTFkMB4XDTIyMDEw
MTE1MDAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQzOGM3ZjlmNzk2
MmE2NDE0YjFhNzZjZjljNzI5ZWUzNGQ3YzY4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7OBQlFe9e8cb2PobJuIsdbIprVeI9s++I83ugGPvXWzi8w
Yxex//7pyARfdaJV2I8f/fpPFnU54SYiwsL8fXWb6tB9OeFpQ9ZU8MJsHFRj1Ngb
4DVyWgJhDhbwzBFfqs30tnlMSKlltymGZTFqp5z/KEu0fHt4TrufBjhZXN54guQB
Y0S7XEbe555NJn7CigszQHZemKtvJObPPnumHK2UV3JS6hFGUESoaJ6z7Zt/8SlE
dEtDhNJr3XzBS1oqD2WjxhQCLSiIopYJ5VWYNe8qw5sP5WJWNxsdS3FYmGuquCZd
sUzkgp2/s5HFDTrIvMnhOaU/bGQRa3XOIcr4UXsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS9OMf595YqZBSxp2z5xynuNNfGiDAfBgNVHSMEGDAWgBQH11M193v0JAl2
J3sd0OGbsjqOHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I5ZFROZmQ3OUNRSmRpZDdIZERobTdJNmpoMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvY2UzZmE3LWZjODgtNGY0OC1hNWNlLWE0NWJiY2IzNGRlNS8x
L3ZUakgtZmVXS21RVXNhZHMtY2NwN2pUWHhvZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
Y2UzZmE3LWZjODgtNGY0OC1hNWNlLWE0NWJiY2IzNGRlNS8xL0I5ZFROZmQ3OUNR
SmRpZDdIZERobTdJNmpoMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFtnUzANBgkqhkiG9w0BAQsFAAOC
AQEAS4FrXW/hvbNOgBKwOugs9dzlS2RfEZgieWZIw0m3EJyyFLgkR9rj8Q4YhPV+
Uzmaegq0kAiuCe06VpbkModMj559740XCmVuG2OtZkdtCdqhz9n83QL2yQf7CDoJ
RI8y70S90FXGbBpAhu9skGwXYeIUAUKst1p9CrLYYy9/C+HoKOUb5Ew4hFtuTh9P
LtuT/OzeZKjU8Dn79EaNvayfiEyEE7mR06lyyed5JHGHrlyx3zpe2C4P1BwdSHrj
+2XqqSZ8VYWzisB4WVCAVXIlqJ1S/a8sUIejlFMF11Qz81Egqlm8xriMaJJ/oNQm
hNu+SQFuHacCUapEEnMPPdd0MQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:56:29 2025 by rpki-client