Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/9WPlFPSgp1gZkwFDCWW28HzqWGA.roa
File: 9WPlFPSgp1gZkwFDCWW28HzqWGA.roa (raw, json)
Hash identifier: GCNbhlOUlxjcJx0QaPr3jvMkZ21hWxsb9odUad4MktI=
Subject key identifier: F5:63:E5:14:F4:A0:A7:58:19:93:01:43:09:65:B6:F0:7C:EA:58:60
Certificate issuer: /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial: 03BBDA97
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/9WPlFPSgp1gZkwFDCWW28HzqWGA.roa
Signing time: Sat 01 Jan 2022 10:02:18 +0000
ROA not before: Sat 01 Jan 2022 10:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198251
IP address blocks: 91.232.240.0/24 maxlen: 24
91.232.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62642839 (0x3bbda97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Validity
Not Before: Jan 1 10:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f563e514f4a0a758199301430965b6f07cea5860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:3a:ba:72:d8:f5:5e:9e:ff:fc:59:53:99:
e0:61:a7:21:06:3a:2f:94:72:ca:5f:3c:03:98:2d:
cb:e8:f8:2e:6c:c6:15:75:fd:19:51:c9:1a:50:02:
d8:cf:79:37:68:57:54:fc:da:43:f3:a4:9c:9d:16:
ab:e7:62:fd:03:5d:4d:7b:6a:41:39:ce:a3:2f:7e:
b1:d0:db:c4:96:ca:d4:3d:cd:67:ab:5d:35:ea:74:
8f:61:c9:3b:64:7d:b6:13:90:95:c7:f5:75:99:51:
2f:7d:d0:3a:f6:bd:40:d9:48:65:0c:f6:77:39:c1:
a7:76:0e:8f:ff:39:da:07:22:ff:21:b9:5d:0e:26:
ee:76:13:d8:85:0c:88:5b:e8:34:05:23:74:cf:ae:
10:2e:f0:f2:6f:b9:56:ec:51:06:fd:c9:f1:a0:5a:
59:e5:c8:af:52:06:53:1b:aa:03:1c:2d:23:6e:0a:
dd:e5:3b:54:99:05:2e:18:b1:37:a6:ec:10:5f:7f:
51:d4:d9:11:a8:48:b6:06:1d:fb:05:57:5e:0e:18:
7f:d5:22:15:bc:15:b0:41:1e:a2:70:91:8c:e9:f3:
e4:b8:92:70:8c:a0:8c:e3:77:07:4f:b5:0c:9c:0e:
68:67:e9:c7:a8:a3:2e:1f:bb:61:3d:1c:fe:cc:c5:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:E5:14:F4:A0:A7:58:19:93:01:43:09:65:B6:F0:7C:EA:58:60
X509v3 Authority Key Identifier:
keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/9WPlFPSgp1gZkwFDCWW28HzqWGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ff:7b:be:5d:ad:0a:aa:9e:ff:44:62:20:e5:84:1f:65:72:
37:1b:21:41:cd:2a:a4:22:03:7a:d5:3a:ca:0c:52:6a:cf:e8:
d2:73:db:57:0e:08:91:ec:33:49:e1:c0:67:a3:5b:8d:46:aa:
b7:15:d4:0e:97:19:95:e6:fa:cf:b3:a3:71:66:ea:fe:0e:8d:
2b:21:1e:7a:f4:f2:68:72:fc:ee:ab:df:f5:62:fe:3f:44:7a:
39:3c:94:aa:c0:b5:fe:00:17:e0:03:18:a2:73:6e:51:e8:80:
c6:ee:55:98:96:10:23:ca:f1:92:24:e8:e6:c4:7f:29:34:05:
b1:03:28:23:ce:5e:1a:44:e6:68:2a:45:07:39:58:0a:cc:f7:
d7:cb:73:c2:8d:0d:c9:da:1a:dc:de:7c:7f:1f:a2:76:de:73:
80:cd:48:8e:f6:a4:6e:03:18:7c:a9:4e:76:35:ca:e4:81:ea:
e6:18:f9:e7:41:2d:97:78:3d:df:f9:2c:a3:ce:6c:9d:b3:04:
17:0e:56:33:bf:08:39:66:74:24:d4:29:c8:3d:8d:05:31:b9:
90:69:fc:92:7b:00:e9:87:99:0b:02:06:91:b7:23:e5:71:39:
a0:01:e3:2d:df:43:f0:8a:85:44:1f:32:49:13:18:46:5f:dd:
e4:83:d4:7c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7valzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NDNjZGVlMTQ2YjEzYjk2NjdkZWZmM2Y3YjMwZTlhMWFhMzM0YzgzMB4XDTIyMDEw
MTEwMDIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjU2M2U1MTRmNGEw
YTc1ODE5OTMwMTQzMDk2NWI2ZjA3Y2VhNTg2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5DOrpy2PVenv/8WVOZ4GGnIQY6L5Ryyl88A5gty+j4LmzG
FXX9GVHJGlAC2M95N2hXVPzaQ/OknJ0Wq+di/QNdTXtqQTnOoy9+sdDbxJbK1D3N
Z6tdNep0j2HJO2R9thOQlcf1dZlRL33QOva9QNlIZQz2dznBp3YOj/852gci/yG5
XQ4m7nYT2IUMiFvoNAUjdM+uEC7w8m+5VuxRBv3J8aBaWeXIr1IGUxuqAxwtI24K
3eU7VJkFLhixN6bsEF9/UdTZEahItgYd+wVXXg4Yf9UiFbwVsEEeonCRjOnz5LiS
cIygjON3B0+1DJwOaGfpx6ijLh+7YT0c/szFKL0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT1Y+UU9KCnWBmTAUMJZbbwfOpYYDAfBgNVHSMEGDAWgBQUPN7hRrE7lmfe
/z97MOmhqjNMgzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZEemU0VWF4TzVabjN2OF9lekRwb2FvelRJTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvMWNhMzljLTIwMWMtNDFmZC05Y2IwLTgyMzZlNTcyNjRiZi8x
LzlXUGxGUFNncDFnWmt3RkRDV1cyOEh6cVdHQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
MWNhMzljLTIwMWMtNDFmZC05Y2IwLTgyMzZlNTcyNjRiZi8xL0ZEemU0VWF4TzVa
bjN2OF9lekRwb2FvelRJTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvo8DANBgkqhkiG9w0BAQsFAAOC
AQEApf97vl2tCqqe/0RiIOWEH2VyNxshQc0qpCIDetU6ygxSas/o0nPbVw4Ikewz
SeHAZ6NbjUaqtxXUDpcZleb6z7OjcWbq/g6NKyEeevTyaHL87qvf9WL+P0R6OTyU
qsC1/gAX4AMYonNuUeiAxu5VmJYQI8rxkiTo5sR/KTQFsQMoI85eGkTmaCpFBzlY
Csz318tzwo0Nydoa3N58fx+idt5zgM1IjvakbgMYfKlOdjXK5IHq5hj550Etl3g9
3/kso85snbMEFw5WM78IOWZ0JNQpyD2NBTG5kGn8knsA6YeZCwIGkbcj5XE5oAHj
Ld9D8IqFRB8ySRMYRl/d5IPUfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:36 2024 by rpki-client on console-ams.rpki-client.org