Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/s6ZykVclPjBxnVSrd9SEWNm1s8s.roa
File: s6ZykVclPjBxnVSrd9SEWNm1s8s.roa (raw, json)
Hash identifier: ZWQFtap9unE+hDgzprYXV9fjznnNjXtd0bXjh5Y6ZSM=
Subject key identifier: B3:A6:72:91:57:25:3E:30:71:9D:54:AB:77:D4:84:58:D9:B5:B3:CB
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 17FC7405
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/s6ZykVclPjBxnVSrd9SEWNm1s8s.roa
Signing time: Sat 01 Jan 2022 15:58:38 +0000
ROA not before: Sat 01 Jan 2022 15:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198348
IP address blocks: 91.233.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402420741 (0x17fc7405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jan 1 15:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a6729157253e30719d54ab77d48458d9b5b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:1f:7a:f8:72:93:a3:b5:91:fb:d8:a0:b8:
08:17:3d:43:23:6f:16:0c:13:cf:7f:6f:ca:5a:51:
8a:4f:f7:fa:52:00:69:03:bc:ff:7b:91:9c:e0:76:
88:02:7c:23:f6:6d:b9:c0:32:c8:37:ae:0f:40:3a:
df:fc:80:77:03:57:59:63:26:5f:20:c6:18:a6:d5:
2b:5b:f2:4c:02:3b:d0:a3:d2:56:7d:ef:1f:a5:d5:
05:f9:07:1a:b3:97:bf:fa:01:e1:8f:60:88:31:32:
c7:4d:a3:9d:f6:74:14:8f:d7:d0:6c:72:3d:5d:a2:
f0:75:9c:4a:72:10:a7:4d:5b:ee:c8:ff:0a:b7:bd:
88:67:30:9f:7b:81:f5:92:27:0d:04:63:d6:b6:01:
f4:15:b6:46:ad:98:8b:56:4b:a1:3e:ce:d1:3f:71:
c2:87:14:58:9e:9a:f0:74:75:a9:a7:bf:81:8e:c4:
3f:76:f5:b5:7a:64:e9:26:d4:8a:e9:f1:bd:47:69:
15:7d:c2:0f:61:61:5f:8d:f6:9d:49:f3:80:e6:c6:
ba:78:f5:21:9e:9c:c7:20:3f:93:72:d7:c3:c3:d6:
b9:b3:8c:3d:09:6e:d2:65:ba:a5:5f:6a:7b:6c:bd:
4c:b5:34:ac:1e:f1:6e:55:6a:ad:8a:b8:c1:0a:f4:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:72:91:57:25:3E:30:71:9D:54:AB:77:D4:84:58:D9:B5:B3:CB
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/s6ZykVclPjBxnVSrd9SEWNm1s8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.230.0/23
Signature Algorithm: sha256WithRSAEncryption
81:cd:fa:1c:20:a1:23:79:c3:4a:6a:d1:7e:54:2d:18:bd:91:
6b:07:7b:65:a3:28:56:12:8e:90:d4:a7:0c:7c:df:c6:23:98:
3a:03:08:8c:f5:dc:a5:97:94:02:73:ae:84:f6:91:e4:d9:f3:
e6:85:13:09:52:df:0d:47:8f:f3:f1:12:35:9e:80:90:bb:eb:
74:d0:e0:bb:cd:25:24:e6:50:51:5a:f8:3b:38:ef:8a:78:0e:
b5:36:c9:46:0c:38:9f:27:97:04:b3:5d:e1:92:1a:cd:56:a9:
de:90:07:24:c5:4b:3e:b4:0e:7e:6a:a3:94:0f:9a:4e:72:b6:
6e:73:49:30:f2:58:c9:15:4e:29:f9:e4:6e:5e:70:22:d9:87:
97:8f:61:bf:e3:d7:8f:48:9e:78:bd:c2:cc:8f:1e:8a:dc:73:
00:56:63:29:bb:32:6c:1a:83:f2:6a:4a:e1:83:75:8f:4b:19:
a5:ae:95:a6:d9:11:6a:90:16:48:13:87:26:44:15:45:ca:f2:
b9:76:fe:9e:aa:60:25:e1:f2:82:42:ad:44:4d:0b:71:c1:4e:
0c:d9:c4:36:10:17:4f:29:c1:0c:32:49:5f:76:6b:39:34:d7:
44:4c:4f:38:5f:cd:79:04:34:ed:89:42:60:cf:2c:27:68:08:
c0:57:d3:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF/x0BTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MDUxNjM3OWEwNDJkZjc0NDVlNDJlZmIzNjQ2ZDFmMjVhNjdkNTA0MB4XDTIyMDEw
MTE1NTgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjNhNjcyOTE1NzI1
M2UzMDcxOWQ1NGFiNzdkNDg0NThkOWI1YjNjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsaH3r4cpOjtZH72KC4CBc9QyNvFgwTz39vylpRik/3+lIA
aQO8/3uRnOB2iAJ8I/ZtucAyyDeuD0A63/yAdwNXWWMmXyDGGKbVK1vyTAI70KPS
Vn3vH6XVBfkHGrOXv/oB4Y9giDEyx02jnfZ0FI/X0GxyPV2i8HWcSnIQp01b7sj/
Cre9iGcwn3uB9ZInDQRj1rYB9BW2Rq2Yi1ZLoT7O0T9xwocUWJ6a8HR1qae/gY7E
P3b1tXpk6SbUiunxvUdpFX3CD2FhX432nUnzgObGunj1IZ6cxyA/k3LXw8PWubOM
PQlu0mW6pV9qe2y9TLU0rB7xblVqrYq4wQr0sCcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzpnKRVyU+MHGdVKt31IRY2bWzyzAfBgNVHSMEGDAWgBSQUWN5oELfdEXk
Lvs2RtHyWmfVBDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tGRmplYUJDMzNSRjVDNzdOa2JSOGxwbjFRUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvYTVkOThmLWZhN2UtNDAxZi04MDhmLTQ0YTkxYmExN2IwOC8x
L3M2WnlrVmNsUGpCeG5WU3JkOVNFV05tMXM4cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
YTVkOThmLWZhN2UtNDAxZi04MDhmLTQ0YTkxYmExN2IwOC8xL2tGRmplYUJDMzNS
RjVDNzdOa2JSOGxwbjFRUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvp5jANBgkqhkiG9w0BAQsFAAOC
AQEAgc36HCChI3nDSmrRflQtGL2Rawd7ZaMoVhKOkNSnDHzfxiOYOgMIjPXcpZeU
AnOuhPaR5Nnz5oUTCVLfDUeP8/ESNZ6AkLvrdNDgu80lJOZQUVr4OzjvingOtTbJ
Rgw4nyeXBLNd4ZIazVap3pAHJMVLPrQOfmqjlA+aTnK2bnNJMPJYyRVOKfnkbl5w
ItmHl49hv+PXj0ieeL3CzI8eitxzAFZjKbsybBqD8mpK4YN1j0sZpa6VptkRapAW
SBOHJkQVRcryuXb+nqpgJeHygkKtRE0LccFODNnENhAXTynBDDJJX3ZrOTTXRExP
OF/NeQQ07YlCYM8sJ2gIwFfTaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org