Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/1-vAU1mXIbpS-JCj4DTmJwS1bxNk.roa
File: 1-vAU1mXIbpS-JCj4DTmJwS1bxNk.roa (raw, json)
Hash identifier: nalaoHxb4i+yhdeYb/Q9xGBSf2r1dmcomnENzqB6BNY=
Subject key identifier: FA:F0:14:D6:65:C8:6E:94:BE:24:28:F8:0D:39:89:C1:2D:5B:C4:D9
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 0105621F
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/1-vAU1mXIbpS-JCj4DTmJwS1bxNk.roa
Signing time: Sat 01 Jan 2022 09:01:13 +0000
ROA not before: Sat 01 Jan 2022 09:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49883
IP address blocks: 91.213.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17130015 (0x105621f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Jan 1 09:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf014d665c86e94be2428f80d3989c12d5bc4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:f8:e3:5b:0f:6f:eb:7f:30:da:07:ab:d1:
d8:78:92:c5:ae:37:d4:ff:a9:b5:71:25:10:46:82:
67:31:c2:a0:06:63:c1:4a:bc:49:b8:fe:fa:d4:2a:
2e:22:b9:a5:f5:f2:5b:ea:1e:88:17:8d:79:f7:e8:
da:16:f6:2c:96:df:45:8f:25:85:ec:84:de:4f:4b:
81:74:79:f7:06:43:8e:86:e9:13:5d:1e:9d:11:56:
ae:7c:28:1b:a9:4d:aa:c0:98:8d:b5:08:04:a8:12:
b4:0d:7c:26:ca:0a:9a:7c:4d:85:77:c2:44:50:29:
d5:9c:f1:15:a9:ce:c0:3a:bc:7a:c9:45:b7:74:6b:
34:b6:e3:47:88:14:e1:91:d6:4b:f6:df:ea:7a:a3:
58:54:2d:61:78:9c:2b:a8:be:f4:92:c2:9d:66:8a:
b9:ec:ae:7f:be:3f:8e:8f:ea:af:3d:6b:15:cb:ea:
74:be:14:29:70:78:25:f7:13:84:c5:91:88:d5:61:
a5:c0:76:7b:2c:dd:73:68:cc:cb:93:f8:87:9c:a9:
b3:36:b1:2a:d7:cc:04:3e:b3:43:e4:3a:3b:6a:b4:
9e:53:1c:d3:b6:50:63:6a:eb:b7:20:78:3b:e3:20:
0d:b0:19:e9:46:34:54:86:38:cb:a0:29:8b:27:80:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F0:14:D6:65:C8:6E:94:BE:24:28:F8:0D:39:89:C1:2D:5B:C4:D9
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/1-vAU1mXIbpS-JCj4DTmJwS1bxNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f0:1c:d1:d7:94:eb:37:ae:94:ec:09:f3:ed:15:7a:56:a2:
3e:67:fa:07:ec:9b:13:ed:bd:09:1f:55:57:49:13:26:91:19:
99:5e:13:d0:7c:78:4b:94:01:9e:c6:95:2f:06:1f:35:ee:79:
f1:44:d7:ee:e3:1a:f3:e4:df:ca:96:64:5c:d0:99:66:a9:6b:
50:eb:06:d1:65:b2:b1:e2:53:c2:4d:ec:a6:37:0b:c1:da:51:
5a:b3:90:af:1e:91:66:96:d4:a8:da:32:a8:09:e7:d4:cf:73:
74:c0:82:f5:46:b3:69:9c:13:f1:8c:6c:c9:4f:26:de:b3:44:
98:79:1f:aa:f8:71:d6:1c:9f:e5:a9:55:db:3e:8c:19:20:09:
b7:1b:bb:33:5b:05:55:57:dd:b7:b1:d8:95:d6:18:c7:b6:a6:
89:a6:ea:62:79:8e:07:7d:43:03:2e:dc:77:c6:5b:2d:b4:6f:
54:38:3f:b6:a9:42:62:37:87:39:37:98:3c:06:06:46:19:39:
e3:66:39:c3:22:fe:ca:87:12:94:9a:17:60:3a:a0:04:65:eb:
9c:28:65:e5:59:7f:f8:64:0e:08:c4:17:d6:60:8b:09:b5:c9:
bd:91:48:d4:fb:1a:ac:a5:1c:bc:39:68:07:2f:19:78:d6:ad:
4d:ac:80:a0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAQViHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
N2M1YTc2ZjI4YjcxZWE4ZGJmOTk5YWJhYWI3YTY1OTgzOWFjMTgyMB4XDTIyMDEw
MTA5MDExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFmMDE0ZDY2NWM4
NmU5NGJlMjQyOGY4MGQzOTg5YzEyZDViYzRkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUW+ONbD2/rfzDaB6vR2HiSxa431P+ptXElEEaCZzHCoAZj
wUq8Sbj++tQqLiK5pfXyW+oeiBeNeffo2hb2LJbfRY8lheyE3k9LgXR59wZDjobp
E10enRFWrnwoG6lNqsCYjbUIBKgStA18JsoKmnxNhXfCRFAp1ZzxFanOwDq8eslF
t3RrNLbjR4gU4ZHWS/bf6nqjWFQtYXicK6i+9JLCnWaKueyuf74/jo/qrz1rFcvq
dL4UKXB4JfcThMWRiNVhpcB2eyzdc2jMy5P4h5ypszaxKtfMBD6zQ+Q6O2q0nlMc
07ZQY2rrtyB4O+MgDbAZ6UY0VIY4y6ApiyeAXMMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT68BTWZchulL4kKPgNOYnBLVvE2TAfBgNVHSMEGDAWgBRXxadvKLceqNv5
mauqt6ZZg5rBgjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y4V25ieWkzSHFqYi1abXJxcmVtV1lPYXdZSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvYzMyYjlkLThjN2MtNDQ0MS1iZGIxLTZhNjgyNTFmMTM4Ny8x
LzEtdkFVMW1YSWJwUy1KQ2o0RFRtSndTMWJ4Tmsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1
L2MzMmI5ZC04YzdjLTQ0NDEtYmRiMS02YTY4MjUxZjEzODcvMS9WOFduYnlpM0hx
amItWm1ycXJlbVdZT2F3WUkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1bswDQYJKoZIhvcNAQELBQAD
ggEBAKDwHNHXlOs3rpTsCfPtFXpWoj5n+gfsmxPtvQkfVVdJEyaRGZleE9B8eEuU
AZ7GlS8GHzXuefFE1+7jGvPk38qWZFzQmWapa1DrBtFlsrHiU8JN7KY3C8HaUVqz
kK8ekWaW1KjaMqgJ59TPc3TAgvVGs2mcE/GMbMlPJt6zRJh5H6r4cdYcn+WpVds+
jBkgCbcbuzNbBVVX3bex2JXWGMe2pomm6mJ5jgd9QwMu3HfGWy20b1Q4P7apQmI3
hzk3mDwGBkYZOeNmOcMi/sqHEpSaF2A6oARl65woZeVZf/hkDgjEF9Zgiwm1yb2R
SNT7GqylHLw5aAcvGXjWrU2sgKA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:14 2024 by rpki-client on console-ams.rpki-client.org