Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/O6KmpB9c0KGlgoBd0tyG6h4tvfw.roa
File: O6KmpB9c0KGlgoBd0tyG6h4tvfw.roa (raw, json)
Hash identifier: CheGozrQEOPaj00NwrgG6tK+ZBi8tnWSpdTZ2OFZluE=
Subject key identifier: 3B:A2:A6:A4:1F:5C:D0:A1:A5:82:80:5D:D2:DC:86:EA:1E:2D:BD:FC
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 074B3B17
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/O6KmpB9c0KGlgoBd0tyG6h4tvfw.roa
Signing time: Sat 01 Jan 2022 00:53:10 +0000
ROA not before: Sat 01 Jan 2022 00:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200098
IP address blocks: 91.223.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122370839 (0x74b3b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Jan 1 00:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ba2a6a41f5cd0a1a582805dd2dc86ea1e2dbdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:72:00:ff:24:44:b7:04:fd:15:96:5f:b9:
3f:44:0e:2d:bb:79:4d:98:55:5e:70:a4:45:38:bf:
89:6f:ac:0d:04:40:c3:49:26:4b:18:13:90:2a:5e:
b5:cc:b3:86:69:27:1c:46:66:58:8e:71:18:a7:f7:
10:20:00:89:42:55:bd:2b:d8:0c:4e:fe:15:1c:fa:
b5:fb:cf:b3:7f:48:3b:e5:24:ad:80:f8:c0:35:0b:
3c:20:b6:88:95:91:34:a9:f2:0d:33:9c:ff:82:ee:
70:18:d2:23:7c:f5:11:aa:82:93:13:2c:25:bf:de:
f4:8c:6e:1d:1b:94:8e:c8:0d:b6:db:05:e3:e0:eb:
34:8c:ef:77:8c:3f:ef:17:6e:3f:bd:64:e5:bb:6c:
83:ad:f6:80:fd:f7:92:11:24:53:70:25:d4:f1:28:
f1:91:70:60:a5:d7:46:9a:48:f8:38:50:5a:78:8c:
37:79:02:b1:92:9a:66:f3:95:63:4e:b6:09:07:49:
b6:0b:4c:be:9f:fa:ee:7f:b8:ef:07:f9:5c:21:e0:
0e:d6:2d:49:08:0b:08:50:65:fc:e8:06:c6:1e:c9:
1b:7f:9d:36:0e:8b:b6:43:41:7a:1b:49:d3:0d:fd:
2d:a1:ae:f1:5b:21:a6:90:3a:65:88:05:07:51:86:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:A6:A4:1F:5C:D0:A1:A5:82:80:5D:D2:DC:86:EA:1E:2D:BD:FC
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/O6KmpB9c0KGlgoBd0tyG6h4tvfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a0:a3:57:71:4e:d1:91:2d:8c:83:3c:55:6c:6d:67:ac:72:
06:1f:bd:67:84:4e:37:66:15:30:9c:ad:0f:99:17:7a:1b:aa:
d6:f2:16:85:b8:55:5d:d3:9e:87:58:26:78:56:1f:ca:dc:03:
87:56:c2:d2:4b:ae:5a:ea:59:78:a9:ac:0e:a2:a5:2b:5a:5c:
83:7c:70:bd:7a:af:06:93:28:88:87:92:e2:22:de:2c:94:67:
12:06:fb:cb:cd:70:11:ab:72:e6:eb:ea:fd:6e:0a:e7:f9:12:
02:10:ff:e4:92:8d:62:1e:7a:3b:22:7e:28:c1:86:69:65:0a:
a9:61:04:0f:f9:65:6e:6b:4e:98:2c:88:76:3a:da:07:87:8f:
9b:cb:d3:e7:9c:66:93:be:46:cb:f1:63:84:bc:0a:0a:aa:08:
4d:6e:fa:03:89:3b:ce:c5:75:d0:00:02:48:a0:70:2f:df:46:
c8:37:f3:2c:a6:3a:38:d8:3d:b2:4b:12:f3:f0:14:40:05:fa:
63:c4:af:d3:75:41:c7:f8:4e:9b:5b:81:86:ea:5d:52:dc:83:
07:9f:e3:91:f1:1e:7a:99:87:66:60:85:e9:b3:0e:35:08:72:
74:7d:b9:7b:40:12:81:7a:86:04:d1:b8:d8:f7:fa:f4:98:eb:
41:a9:63:07
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0s7FzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzUyNmE4NTEyMTNlNWE2M2FjMjk0NzhlZDEzNjcwODI5ZmNhMWE1MB4XDTIyMDEw
MTAwNTMxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2JhMmE2YTQxZjVj
ZDBhMWE1ODI4MDVkZDJkYzg2ZWExZTJkYmRmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpicgD/JES3BP0Vll+5P0QOLbt5TZhVXnCkRTi/iW+sDQRA
w0kmSxgTkCpetcyzhmknHEZmWI5xGKf3ECAAiUJVvSvYDE7+FRz6tfvPs39IO+Uk
rYD4wDULPCC2iJWRNKnyDTOc/4LucBjSI3z1EaqCkxMsJb/e9IxuHRuUjsgNttsF
4+DrNIzvd4w/7xduP71k5btsg632gP33khEkU3Al1PEo8ZFwYKXXRppI+DhQWniM
N3kCsZKaZvOVY062CQdJtgtMvp/67n+47wf5XCHgDtYtSQgLCFBl/OgGxh7JG3+d
Ng6LtkNBehtJ0w39LaGu8VshppA6ZYgFB1GG7N0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ7oqakH1zQoaWCgF3S3IbqHi29/DAfBgNVHSMEGDAWgBSXUmqFEhPlpjrC
lHjtE2cIKfyhpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2wxSnFoUklUNWFZNndwUjQ3Uk5uQ0NuOG9hVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvNGJlODZhLTBhZWItNGIxOC1hNmM0LWUyZGNlOTNhNDUyOS8x
L082S21wQjljMEtHbGdvQmQwdHlHNmg0dHZmdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
NGJlODZhLTBhZWItNGIxOC1hNmM0LWUyZGNlOTNhNDUyOS8xL2wxSnFoUklUNWFZ
NndwUjQ3Uk5uQ0NuOG9hVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvfkzANBgkqhkiG9w0BAQsFAAOC
AQEAfKCjV3FO0ZEtjIM8VWxtZ6xyBh+9Z4RON2YVMJytD5kXehuq1vIWhbhVXdOe
h1gmeFYfytwDh1bC0kuuWupZeKmsDqKlK1pcg3xwvXqvBpMoiIeS4iLeLJRnEgb7
y81wEaty5uvq/W4K5/kSAhD/5JKNYh56OyJ+KMGGaWUKqWEED/llbmtOmCyIdjra
B4ePm8vT55xmk75Gy/FjhLwKCqoITW76A4k7zsV10AACSKBwL99GyDfzLKY6ONg9
sksS8/AUQAX6Y8Sv03VBx/hOm1uBhupdUtyDB5/jkfEeepmHZmCF6bMONQhydH25
e0ASgXqGBNG42Pf69JjrQaljBw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-ams.rpki-client.org