Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/XEF35KZZdMwRnfasgQZL2KT0m9U.roa
File: XEF35KZZdMwRnfasgQZL2KT0m9U.roa (raw, json)
Hash identifier: +Zw1MxbrjW/fYkdGqkyAkw5YvetYzUrhF6x8vHXEH9E=
Subject key identifier: 5C:41:77:E4:A6:59:74:CC:11:9D:F6:AC:81:06:4B:D8:A4:F4:9B:D5
Certificate issuer: /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial: 142C2976
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/XEF35KZZdMwRnfasgQZL2KT0m9U.roa
Signing time: Sat 01 Jan 2022 04:51:14 +0000
ROA not before: Sat 01 Jan 2022 04:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31742
IP address blocks: 91.241.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338438518 (0x142c2976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Validity
Not Before: Jan 1 04:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c4177e4a65974cc119df6ac81064bd8a4f49bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:dd:e8:a8:5f:93:c9:f0:d8:ca:36:6a:ee:
5f:16:65:c2:39:9a:a6:a4:a2:63:7e:94:67:29:28:
95:ba:85:6e:9f:93:5d:6f:97:06:c7:3a:12:3b:b8:
1f:9c:65:5b:86:6a:69:15:cb:57:00:2b:90:b1:45:
47:90:0c:fb:2c:c5:94:e5:ad:d6:91:90:be:3a:28:
45:83:5c:4e:2e:a3:cf:ab:1e:dc:14:33:29:1f:08:
83:c3:2a:a9:30:d4:84:a7:67:b3:15:f7:e9:e1:ff:
4d:ed:07:c8:0e:c4:79:5b:17:c5:ed:2c:fd:ba:48:
91:81:08:5c:df:72:f1:89:78:57:ac:e9:58:6c:13:
e4:b1:c7:37:5a:f1:97:1d:cb:62:d8:c7:ba:2e:49:
c5:8f:72:3f:ff:14:2c:e2:5b:06:45:73:39:e6:48:
cb:93:e8:7e:ba:c7:4f:15:3e:9a:1f:1e:3b:44:d6:
8b:b7:40:d4:91:03:6f:eb:95:96:67:b0:c8:63:36:
ab:01:cd:f3:43:11:97:68:5c:94:94:cb:fc:45:c4:
2f:e0:37:8d:99:0f:47:d1:6b:fc:71:b5:88:65:ee:
13:2c:d2:08:64:72:e0:44:60:d8:77:47:ca:2d:2e:
d7:36:7b:f3:45:f4:bb:72:b7:b3:d5:a1:fa:60:d1:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:41:77:E4:A6:59:74:CC:11:9D:F6:AC:81:06:4B:D8:A4:F4:9B:D5
X509v3 Authority Key Identifier:
keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/XEF35KZZdMwRnfasgQZL2KT0m9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.78.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a1:82:0a:e8:8e:2b:5c:33:32:fb:8d:63:b7:3c:90:a1:04:
a0:05:91:88:dc:36:9c:36:e7:16:ac:70:14:b0:2f:6d:d3:66:
0c:4a:35:00:b0:15:4f:32:7d:45:08:06:25:49:72:4d:dc:35:
60:68:8b:88:b1:32:aa:72:47:19:02:f7:0d:c0:ef:7f:d0:52:
88:fb:3c:9b:e8:8a:20:50:31:6a:1c:27:db:c0:1e:4f:9f:ba:
04:24:73:63:49:ae:b5:38:fa:15:79:c6:a5:c0:22:90:d4:b6:
75:4d:be:03:bd:65:67:bb:d5:0f:f8:9e:e3:62:f8:9b:28:2b:
25:9b:32:4e:63:89:33:94:d3:54:f8:20:c2:e6:7c:e6:00:34:
61:c4:ed:1d:43:d1:8f:63:cd:03:4d:b9:23:d1:05:9d:21:e2:
61:61:0e:09:06:44:bb:52:fd:5f:7d:1d:e6:70:4f:50:c0:a5:
ed:47:45:a7:76:21:66:d9:5c:0f:18:f6:50:1d:19:f1:60:33:
f8:6b:6d:1c:1f:1b:cf:d5:39:7f:bf:1b:57:f6:66:3d:38:fe:
d7:57:09:ec:37:28:5d:48:b4:3e:cd:9e:5b:08:e4:64:76:e3:
22:32:e5:d4:9c:fe:a1:f0:cb:2a:3a:f8:43:6d:56:9f:be:c0:
17:87:8a:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFCwpdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NGQ5YmM4MjhhNTY2YjA2YWY0ZDc2NWRmYjVkYTViYzFkNzZjNzI1MB4XDTIyMDEw
MTA0NTExNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWM0MTc3ZTRhNjU5
NzRjYzExOWRmNmFjODEwNjRiZDhhNGY0OWJkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKFQ3eioX5PJ8NjKNmruXxZlwjmapqSiY36UZykolbqFbp+T
XW+XBsc6Eju4H5xlW4ZqaRXLVwArkLFFR5AM+yzFlOWt1pGQvjooRYNcTi6jz6se
3BQzKR8Ig8MqqTDUhKdnsxX36eH/Te0HyA7EeVsXxe0s/bpIkYEIXN9y8Yl4V6zp
WGwT5LHHN1rxlx3LYtjHui5JxY9yP/8ULOJbBkVzOeZIy5PofrrHTxU+mh8eO0TW
i7dA1JEDb+uVlmewyGM2qwHN80MRl2hclJTL/EXEL+A3jZkPR9Fr/HG1iGXuEyzS
CGRy4ERg2HdHyi0u1zZ780X0u3K3s9Wh+mDR57sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRcQXfkpll0zBGd9qyBBkvYpPSb1TAfBgNVHSMEGDAWgBQE2byCilZrBq9N
dl37XaW8HXbHJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JObThnb3BXYXdhdlRYWmQtMTJsdkIxMnh5VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvNzI0MzViLTdlN2UtNDQ3Yi1hYzI0LTk4MmM0MjlkNDE1Ni8x
L1hFRjM1S1paZE13Um5mYXNnUVpMMktUMG05VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
NzI0MzViLTdlN2UtNDQ3Yi1hYzI0LTk4MmM0MjlkNDE1Ni8xL0JObThnb3BXYXdh
dlRYWmQtMTJsdkIxMnh5VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvxTjANBgkqhkiG9w0BAQsFAAOC
AQEARKGCCuiOK1wzMvuNY7c8kKEEoAWRiNw2nDbnFqxwFLAvbdNmDEo1ALAVTzJ9
RQgGJUlyTdw1YGiLiLEyqnJHGQL3DcDvf9BSiPs8m+iKIFAxahwn28AeT5+6BCRz
Y0mutTj6FXnGpcAikNS2dU2+A71lZ7vVD/ie42L4mygrJZsyTmOJM5TTVPggwuZ8
5gA0YcTtHUPRj2PNA025I9EFnSHiYWEOCQZEu1L9X30d5nBPUMCl7UdFp3YhZtlc
Dxj2UB0Z8WAz+GttHB8bz9U5f78bV/ZmPTj+11cJ7DcoXUi0Ps2eWwjkZHbjIjLl
1Jz+ofDLKjr4Q21Wn77AF4eK0g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:03 2023 by rpki-client on console-fra.rpki-client.org