Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/vQKU70kU4-lt-MJqaBSYjPgDqT8.roa
File: vQKU70kU4-lt-MJqaBSYjPgDqT8.roa (raw, json)
Hash identifier: aASklZp9v0//o9gSU7T6cUbk8CXcm+t1YO5GvK+PS0Q=
Subject key identifier: BD:02:94:EF:49:14:E3:E9:6D:F8:C2:6A:68:14:98:8C:F8:03:A9:3F
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 048D2797
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/vQKU70kU4-lt-MJqaBSYjPgDqT8.roa
Signing time: Sat 01 Jan 2022 09:53:42 +0000
ROA not before: Sat 01 Jan 2022 09:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206123
IP address blocks: 91.247.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76359575 (0x48d2797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Jan 1 09:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd0294ef4914e3e96df8c26a6814988cf803a93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:d5:30:0a:2a:b2:14:9b:36:56:bd:c9:6f:
da:e3:dd:d4:64:a6:6c:16:e9:9f:4c:c3:ac:93:9e:
40:63:6e:88:4e:86:22:45:6e:86:ac:f2:68:c6:6d:
dd:8a:e6:e5:b0:12:4b:e0:91:82:4b:f5:b4:32:e6:
dd:44:d3:aa:ad:20:2f:3f:56:bb:4a:c6:6a:f6:d3:
35:a7:a5:93:6f:e5:1c:38:c9:02:c6:a3:24:8e:e2:
2d:78:28:58:0c:46:ec:9d:16:74:34:cc:66:c9:7a:
4d:c7:61:6e:4b:dc:d3:f0:fd:4c:b1:b4:f3:49:17:
85:4a:a5:42:10:c3:f2:c7:01:8b:bb:55:f7:b9:ad:
dd:e2:8c:36:d6:b7:d5:49:0c:f5:7d:b3:ba:9e:fc:
08:53:79:1e:fa:48:67:fd:6b:7b:e4:2e:7c:d7:bd:
c1:88:43:90:3f:c5:f2:81:5f:b3:98:29:f5:a1:45:
0f:b5:e8:7b:d2:cd:35:42:ca:bf:6e:0a:22:4c:55:
57:3e:8a:e4:6c:c8:8d:66:48:50:cd:05:6d:47:4c:
04:a2:23:a3:dd:04:de:87:18:90:74:63:54:56:cf:
2d:be:97:98:67:59:5e:a4:3d:d9:f3:cd:d5:45:b1:
ac:f8:46:d1:ff:6b:4c:4e:12:e6:46:77:e2:6b:8f:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:94:EF:49:14:E3:E9:6D:F8:C2:6A:68:14:98:8C:F8:03:A9:3F
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/vQKU70kU4-lt-MJqaBSYjPgDqT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.253.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b5:5d:8b:dd:36:40:78:10:ae:3d:a8:84:10:e5:1f:db:59:
37:52:b4:c4:fd:52:f1:7e:af:1c:b3:1a:4c:1d:99:0d:1c:bf:
b9:ca:18:92:6a:0d:68:28:0b:98:c5:5b:8e:35:04:ba:6f:cc:
2a:0b:64:aa:cb:43:6f:56:e7:91:0b:c7:75:5f:f1:ff:b9:67:
13:e0:84:8d:c4:a2:c4:43:46:61:49:9f:46:74:cf:da:ad:20:
d8:f4:a9:3f:2e:03:c4:a4:4c:76:4e:56:c6:26:4a:6c:1d:fd:
9b:6f:47:50:ff:1e:8d:29:35:27:30:e1:70:dd:d1:5f:a5:37:
c5:24:d3:2b:f9:0c:fd:01:7e:99:40:6c:8c:7a:c3:5e:35:35:
b6:6d:94:94:bf:fe:11:a1:fd:26:f5:e8:4f:5a:ce:49:c4:c9:
1a:95:de:6b:2b:cb:f9:cf:ce:c7:79:17:e8:dc:23:f2:af:4b:
84:a2:53:88:43:1c:10:5b:3f:41:7e:cc:35:38:c7:b8:a7:43:
6a:b2:21:5c:1f:9d:6b:e2:b8:18:ee:04:3b:53:9d:88:a0:de:
df:6c:3e:98:c6:90:28:35:ab:ee:e1:60:2d:90:60:e4:db:dc:
2d:3f:4f:35:eb:4b:98:50:cc:de:75:bb:8b:33:17:62:e5:35:
41:66:f1:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBI0nlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTk4YzUwNmExNzRjZjJjYWQ5YzFhNmM1YjgxZDZlODk4ODYzNjJkMB4XDTIyMDEw
MTA5NTM0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQwMjk0ZWY0OTE0
ZTNlOTZkZjhjMjZhNjgxNDk4OGNmODAzYTkzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdM1TAKKrIUmzZWvclv2uPd1GSmbBbpn0zDrJOeQGNuiE6G
IkVuhqzyaMZt3Yrm5bASS+CRgkv1tDLm3UTTqq0gLz9Wu0rGavbTNaelk2/lHDjJ
AsajJI7iLXgoWAxG7J0WdDTMZsl6Tcdhbkvc0/D9TLG080kXhUqlQhDD8scBi7tV
97mt3eKMNta31UkM9X2zup78CFN5HvpIZ/1re+QufNe9wYhDkD/F8oFfs5gp9aFF
D7Xoe9LNNULKv24KIkxVVz6K5GzIjWZIUM0FbUdMBKIjo90E3ocYkHRjVFbPLb6X
mGdZXqQ92fPN1UWxrPhG0f9rTE4S5kZ34muParECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS9ApTvSRTj6W34wmpoFJiM+AOpPzAfBgNVHSMEGDAWgBQumMUGoXTPLK2c
GmxbgdbomIY2LTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xwakZCcUYwenl5dG5CcHNXNEhXNkppR05pMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvYTY0MjVjLTBjN2MtNGZkZi04N2IyLTZiYmE3ZmMzMTcyOC8x
L3ZRS1U3MGtVNC1sdC1NSnFhQlNZalBnRHFUOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
YTY0MjVjLTBjN2MtNGZkZi04N2IyLTZiYmE3ZmMzMTcyOC8xL0xwakZCcUYwenl5
dG5CcHNXNEhXNkppR05pMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv3/TANBgkqhkiG9w0BAQsFAAOC
AQEAlrVdi902QHgQrj2ohBDlH9tZN1K0xP1S8X6vHLMaTB2ZDRy/ucoYkmoNaCgL
mMVbjjUEum/MKgtkqstDb1bnkQvHdV/x/7lnE+CEjcSixENGYUmfRnTP2q0g2PSp
Py4DxKRMdk5WxiZKbB39m29HUP8ejSk1JzDhcN3RX6U3xSTTK/kM/QF+mUBsjHrD
XjU1tm2UlL/+EaH9JvXoT1rOScTJGpXeayvL+c/Ox3kX6Nwj8q9LhKJTiEMcEFs/
QX7MNTjHuKdDarIhXB+da+K4GO4EO1OdiKDe32w+mMaQKDWr7uFgLZBg5NvcLT9P
NetLmFDM3nW7izMXYuU1QWbx3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:16 2024 by rpki-client on console-fra.rpki-client.org