Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa
File: 4DlqZT9htEhmj9poUb4BpncpdEw.roa (raw, json)
Hash identifier: IMAaNCPiQGTHzW2jDHUamZWe0xQea8iksXff3gSxSto=
Subject key identifier: E0:39:6A:65:3F:61:B4:48:66:8F:DA:68:51:BE:01:A6:77:29:74:4C
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 04958CA8
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa
Signing time: Sat 01 Jan 2022 10:03:32 +0000
ROA not before: Sat 01 Jan 2022 10:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133398
IP address blocks: 91.224.92.0/24 maxlen: 24
185.36.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76909736 (0x4958ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 1 10:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0396a653f61b448668fda6851be01a67729744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:76:68:6b:ed:55:4b:43:c6:cf:65:9d:48:
54:a3:ca:17:91:31:ed:a1:20:85:d0:b1:36:74:4e:
88:db:45:d8:01:1e:dd:20:b4:d6:84:d2:ef:74:8c:
ae:a4:a5:1c:fb:03:b4:df:27:62:41:b4:1f:bb:f6:
56:66:e6:04:98:40:5a:e1:e3:ce:1d:bb:f8:71:63:
91:c5:78:8b:3a:38:89:93:19:6b:b7:f0:19:fd:fb:
31:cc:39:04:eb:f3:35:56:af:de:e4:8b:14:ef:ff:
e7:bb:dd:ea:28:2a:f5:4e:13:b4:8c:95:13:2f:45:
c9:f2:72:c3:37:f4:9e:59:a2:d7:3e:df:c2:f8:52:
ac:9a:90:e1:01:13:56:5e:c5:6e:37:43:cd:8e:e7:
ac:04:2c:78:4d:a0:b3:07:1e:78:df:ad:ba:31:8f:
5d:95:27:fd:e6:1b:d1:ff:15:79:8f:55:cc:65:54:
ab:88:4a:9b:2f:1b:e8:bc:2e:36:44:7a:11:54:b4:
d2:a9:39:b0:e7:0b:04:ec:ab:4e:05:bf:11:e9:e3:
f3:e4:ae:31:e0:b1:32:9b:ac:33:08:33:07:32:c3:
9c:1d:9a:31:90:a2:0e:d7:9d:2e:a2:71:72:6c:2f:
7a:0f:95:dc:53:b6:fd:d7:66:36:19:5b:e2:a2:de:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:6A:65:3F:61:B4:48:66:8F:DA:68:51:BE:01:A6:77:29:74:4C
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.92.0/24
185.36.81.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4f:c8:ce:dc:66:b2:e9:3a:56:b3:ce:9f:cb:c4:e7:26:d2:
ab:01:91:51:78:30:d8:ec:db:ce:94:c3:af:d8:18:70:6a:58:
bc:43:1e:23:2b:7a:a8:a9:f0:db:05:c0:22:ff:91:84:b0:78:
f6:e6:8a:8a:17:4d:5a:a3:a4:a5:8b:90:4d:ae:91:e9:a6:97:
5a:28:d7:af:4e:48:74:bc:a4:db:4e:4a:2c:9f:94:64:69:40:
0a:35:c3:ac:65:c8:93:d9:a7:ff:c0:d4:80:58:eb:e2:10:8c:
2b:6f:ef:b5:8c:41:2c:b7:da:cd:ce:51:b0:e3:48:38:53:68:
b2:52:fb:42:99:22:d2:e2:db:e6:37:09:9a:0b:f5:d1:09:bc:
f4:51:20:ab:8b:43:56:c9:4b:42:27:11:e8:65:ff:7a:1c:ee:
d4:88:ec:bc:7f:eb:c9:11:ac:c9:43:12:6a:a5:14:5f:12:8a:
26:0c:b4:e3:67:74:d2:d9:b0:c1:fe:71:94:95:d3:67:86:8d:
95:a5:38:07:8c:92:b3:e8:58:a2:9c:09:86:30:c7:d7:c7:74:
45:42:06:08:41:a4:70:30:f6:b5:01:d7:20:0e:63:d2:3b:e5:
48:0b:3f:9d:e4:a7:6c:6b:8e:3f:62:3c:cc:10:8d:91:01:97:
40:1b:1c:66
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBJWMqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTQ5ZmIxOTBmNGJkMGY1ODE1YThlNTc5ZjM2NmFkNThkNWQ0MWY5MB4XDTIyMDEw
MTEwMDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTAzOTZhNjUzZjYx
YjQ0ODY2OGZkYTY4NTFiZTAxYTY3NzI5NzQ0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM/mdmhr7VVLQ8bPZZ1IVKPKF5Ex7aEghdCxNnROiNtF2AEe
3SC01oTS73SMrqSlHPsDtN8nYkG0H7v2VmbmBJhAWuHjzh27+HFjkcV4izo4iZMZ
a7fwGf37Mcw5BOvzNVav3uSLFO//57vd6igq9U4TtIyVEy9FyfJywzf0nlmi1z7f
wvhSrJqQ4QETVl7FbjdDzY7nrAQseE2gswceeN+tujGPXZUn/eYb0f8VeY9VzGVU
q4hKmy8b6LwuNkR6EVS00qk5sOcLBOyrTgW/Eenj8+SuMeCxMpusMwgzBzLDnB2a
MZCiDtedLqJxcmwveg+V3FO2/ddmNhlb4qLeGScCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTgOWplP2G0SGaP2mhRvgGmdyl0TDAfBgNVHSMEGDAWgBS+SfsZD0vQ9YFa
jlefNmrVjV1B+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZrbjdHUTlMMFBXQldvNVhuelpxMVkxZFFmay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvYmQwZDEzLWU5ODMtNGZmOS1iNTA3LTVlNjU2ZjFiNDg3Ni8x
LzREbHFaVDlodEVobWo5cG9VYjRCcG5jcGRFdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
YmQwZDEzLWU5ODMtNGZmOS1iNTA3LTVlNjU2ZjFiNDg3Ni8xL3ZrbjdHUTlMMFBX
QldvNVhuelpxMVkxZFFmay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvgXAMEALkkUTANBgkqhkiG9w0B
AQsFAAOCAQEABU/Iztxmsuk6VrPOn8vE5ybSqwGRUXgw2OzbzpTDr9gYcGpYvEMe
Iyt6qKnw2wXAIv+RhLB49uaKihdNWqOkpYuQTa6R6aaXWijXr05IdLyk205KLJ+U
ZGlACjXDrGXIk9mn/8DUgFjr4hCMK2/vtYxBLLfazc5RsONIOFNoslL7Qpki0uLb
5jcJmgv10Qm89FEgq4tDVslLQicR6GX/ehzu1IjsvH/ryRGsyUMSaqUUXxKKJgy0
42d00tmwwf5xlJXTZ4aNlaU4B4ySs+hYopwJhjDH18d0RUIGCEGkcDD2tQHXIA5j
0jvlSAs/neSnbGuOP2I8zBCNkQGXQBscZg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org