Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/o6ppo-D_krSmOD6wqFpjBRCOKdw.roa
File: o6ppo-D_krSmOD6wqFpjBRCOKdw.roa (raw, json)
Hash identifier: 4PByHlkwupjjeeyCYkB250UYLnRFHPk3KOXxbqgtTxY=
Subject key identifier: A3:AA:69:A3:E0:FF:92:B4:A6:38:3E:B0:A8:5A:63:05:10:8E:29:DC
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 099B52E1
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/o6ppo-D_krSmOD6wqFpjBRCOKdw.roa
Signing time: Sat 01 Jan 2022 07:54:37 +0000
ROA not before: Sat 01 Jan 2022 07:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56738
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161174241 (0x99b52e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 1 07:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3aa69a3e0ff92b4a6383eb0a85a6305108e29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:0a:8b:d9:be:fb:8e:37:3d:6a:35:a9:d6:
9d:bd:9d:04:2f:5d:d5:09:49:49:3d:a6:50:0d:ec:
c9:7c:16:74:4d:60:a1:a6:6e:fc:24:97:ab:e4:c7:
79:74:e5:35:ef:a4:ee:6a:c6:42:26:77:21:d7:81:
f9:16:6c:a2:cc:28:26:bd:cc:fe:99:1f:28:d9:ce:
8f:6c:a7:29:40:c7:78:b6:40:99:16:a6:34:81:c9:
1a:11:99:2d:1a:d2:0d:a6:ed:f5:90:b7:ff:f1:07:
22:f0:08:d9:f0:51:1e:45:b8:73:26:d8:c5:d1:63:
f1:b1:a0:26:60:7c:3e:ee:5b:ae:0f:92:43:f1:6a:
d4:dd:06:46:dc:ec:24:c2:80:9b:21:ad:d4:a3:ab:
03:cf:e7:e0:ac:48:75:b4:fa:eb:c2:d5:d4:53:68:
61:98:95:37:14:a1:c1:3e:a3:5c:c6:77:5c:69:ba:
7c:23:ab:07:57:6a:94:b1:9e:0e:9a:be:c0:52:53:
dd:3a:ad:cc:0c:6e:ad:ec:ad:2e:fc:8a:d0:cd:d1:
a8:ba:9e:36:71:89:5f:12:23:12:c8:c3:1a:da:19:
84:5a:83:d5:a1:aa:35:9e:48:df:02:e4:2b:d7:95:
5b:d6:ed:d8:87:dd:8a:4e:72:b8:e2:6d:e4:06:ed:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:69:A3:E0:FF:92:B4:A6:38:3E:B0:A8:5A:63:05:10:8E:29:DC
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/o6ppo-D_krSmOD6wqFpjBRCOKdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c7:4c:ab:43:9f:87:a0:45:a9:d3:bd:4b:48:24:31:3d:1c:
bb:6d:57:19:a3:81:8a:ce:e5:13:47:26:62:b3:67:38:10:7b:
1e:93:1b:1a:6f:18:7c:20:2c:e1:34:d9:d1:f6:38:24:1c:82:
bc:93:e3:7c:7f:74:9e:4a:2c:10:f8:a1:77:28:b1:e2:60:57:
4c:cb:c4:f8:82:27:87:1f:71:87:6f:d8:39:02:67:6c:2f:9d:
f4:42:23:19:9f:6e:5e:6f:ff:38:fc:7e:d6:07:09:c2:90:2c:
5a:e8:00:fc:3f:02:f3:6d:86:58:80:98:03:2a:cb:da:23:ba:
53:3c:5b:2e:7f:5a:ae:d4:7d:23:d7:fc:d8:6b:47:35:b7:c4:
e2:b5:b2:ba:9c:dd:50:b0:1e:03:de:c6:dc:ab:3b:fd:a5:47:
65:6f:be:d7:3b:2a:f2:d0:4f:1b:41:e2:95:21:5b:4a:61:9b:
da:3a:54:e8:32:d3:47:7f:9d:4f:be:24:3d:ec:70:36:df:90:
dc:b0:3e:b2:52:f4:16:ae:d3:1e:66:47:ae:73:04:14:cc:1f:
9c:4a:92:64:05:36:20:69:8d:e3:9f:fe:0a:35:ed:b0:2f:0c:
14:bb:ac:76:91:2d:fe:2c:5f:57:29:fb:91:5a:72:88:57:d0:
a4:d5:5e:8c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZtS4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzhhYTZlZDRiNmNhYzZiM2E1Mjk2MWJjZmEyMjljZmRhMDAwODBlMB4XDTIyMDEw
MTA3NTQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTNhYTY5YTNlMGZm
OTJiNGE2MzgzZWIwYTg1YTYzMDUxMDhlMjlkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjOCovZvvuONz1qNanWnb2dBC9d1QlJST2mUA3syXwWdE1g
oaZu/CSXq+THeXTlNe+k7mrGQiZ3IdeB+RZsoswoJr3M/pkfKNnOj2ynKUDHeLZA
mRamNIHJGhGZLRrSDabt9ZC3//EHIvAI2fBRHkW4cybYxdFj8bGgJmB8Pu5brg+S
Q/Fq1N0GRtzsJMKAmyGt1KOrA8/n4KxIdbT668LV1FNoYZiVNxShwT6jXMZ3XGm6
fCOrB1dqlLGeDpq+wFJT3TqtzAxureytLvyK0M3RqLqeNnGJXxIjEsjDGtoZhFqD
1aGqNZ5I3wLkK9eVW9bt2Ifdik5yuOJt5Abt9BkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSjqmmj4P+StKY4PrCoWmMFEI4p3DAfBgNVHSMEGDAWgBQ3iqbtS2ysazpS
lhvPoinP2gAIDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L040cW03VXRzckdzNlVwWWJ6NklwejlvQUNBNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvMWJkZGE5LTY0ZWMtNGZiNi04YjQwLWY0YjlkYTQ4MGVlMi8x
L282cHBvLURfa3JTbU9ENndxRnBqQlJDT0tkdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
MWJkZGE5LTY0ZWMtNGZiNi04YjQwLWY0YjlkYTQ4MGVlMi8xL040cW03VXRzckdz
NlVwWWJ6NklwejlvQUNBNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvjSzANBgkqhkiG9w0BAQsFAAOC
AQEAdMdMq0Ofh6BFqdO9S0gkMT0cu21XGaOBis7lE0cmYrNnOBB7HpMbGm8YfCAs
4TTZ0fY4JByCvJPjfH90nkosEPihdyix4mBXTMvE+IInhx9xh2/YOQJnbC+d9EIj
GZ9uXm//OPx+1gcJwpAsWugA/D8C822GWICYAyrL2iO6UzxbLn9artR9I9f82GtH
NbfE4rWyupzdULAeA97G3Ks7/aVHZW++1zsq8tBPG0HilSFbSmGb2jpU6DLTR3+d
T74kPexwNt+Q3LA+slL0Fq7THmZHrnMEFMwfnEqSZAU2IGmN45/+CjXtsC8MFLus
dpEt/ixfVyn7kVpyiFfQpNVejA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:49 2024 by rpki-client on console-ams.rpki-client.org