Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/jUoP9J0idPJO1lyMw8eOA150_zg.roa
File: jUoP9J0idPJO1lyMw8eOA150_zg.roa (raw, json)
Hash identifier: gjfB8oT+/G6DuvO0Xzxx3U3trcQrfVZ85N5p8D1wYe4=
Subject key identifier: 8D:4A:0F:F4:9D:22:74:F2:4E:D6:5C:8C:C3:C7:8E:03:5E:74:FF:38
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 37968BB9
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/jUoP9J0idPJO1lyMw8eOA150_zg.roa
Signing time: Sat 01 Jan 2022 12:57:45 +0000
ROA not before: Sat 01 Jan 2022 12:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56452
IP address blocks: 91.223.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932613049 (0x37968bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d4a0ff49d2274f24ed65c8cc3c78e035e74ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:b1:35:79:ed:40:9c:db:ac:bd:00:d5:da:
f8:ab:5a:8c:4f:dc:a3:da:46:74:b4:d3:df:a0:fe:
f8:c2:17:47:ec:10:d9:65:dd:0e:db:35:85:90:2c:
76:35:a4:7b:57:a4:e4:38:2a:8e:f5:cd:ae:56:b9:
da:d8:11:08:a1:80:9c:f9:9a:1a:12:81:b9:4e:85:
4a:9b:c2:95:08:59:a8:44:f4:14:e3:b6:e4:11:a6:
e6:40:4e:6e:32:a5:0a:8d:16:65:31:51:df:64:ca:
4c:7b:96:60:c2:b9:cd:1f:fc:b4:7f:7a:2c:e5:09:
80:c8:7b:91:49:25:47:6b:47:22:c1:3e:51:53:54:
09:9d:4c:d6:75:ce:27:11:2d:90:73:fc:9e:19:9a:
41:6e:0f:9c:e0:40:03:e6:2f:57:4c:ab:b6:42:b9:
48:07:a9:72:1f:14:26:b9:9b:6d:81:28:3a:7d:54:
29:de:92:88:eb:3d:5c:39:67:8a:47:85:09:fa:76:
89:78:07:47:d3:06:c3:52:b4:de:f6:de:b6:ed:11:
25:63:e9:80:ae:b1:6c:c6:66:a7:67:90:fb:df:bb:
38:44:80:bd:37:af:25:03:04:92:5a:36:0c:6b:49:
d9:9d:a2:6f:ad:fd:c3:ff:cb:2e:fb:e8:0e:22:5e:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:0F:F4:9D:22:74:F2:4E:D6:5C:8C:C3:C7:8E:03:5E:74:FF:38
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/jUoP9J0idPJO1lyMw8eOA150_zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.162.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ab:02:f8:e2:0b:9a:f4:72:ea:eb:34:21:39:1f:f9:e7:ec:
70:de:69:53:33:e7:f3:3b:33:58:20:00:d5:29:bf:33:74:fe:
43:82:bc:eb:24:f7:4a:b2:2f:4c:00:62:5e:b4:46:c6:4a:6c:
84:7b:a3:3e:55:14:7f:20:15:8c:cb:af:37:70:30:46:4b:87:
6f:78:a9:8c:53:b3:f5:1a:21:be:64:94:ee:d2:a0:25:85:b3:
d8:90:d0:6f:bd:90:4e:0b:02:ce:bf:fd:e9:67:48:b4:95:02:
7c:c4:7f:a8:7b:07:f2:48:fe:1c:25:2c:f6:ab:66:7a:97:ea:
9e:4e:84:ad:a4:1a:2a:78:0d:78:2f:37:1c:2a:32:ff:b9:2a:
ac:e4:ad:9a:42:7f:99:be:3e:1f:7c:d2:21:ec:58:70:e6:ca:
ea:23:3b:a8:c8:a7:43:64:8b:e0:45:eb:09:7d:0f:98:18:95:
f5:07:77:67:e7:35:e2:ca:d1:77:e8:80:8d:70:a5:54:43:ad:
0c:58:53:3c:17:6a:f9:75:59:ca:b8:13:d8:fc:5d:c8:68:47:
be:c4:1c:f6:e2:d2:8a:03:6f:1e:64:d3:3d:e4:21:08:03:be:
2c:2a:46:f4:d0:12:5a:92:94:6d:91:e8:76:ea:b5:af:4d:eb:
52:cc:bc:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN5aLuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Mjc4YTc2OGM5MTBiYWRjZDVjNGFlZjdjMTcyYTlmMDYxNTQ3ZThjMB4XDTIyMDEw
MTEyNTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQ0YTBmZjQ5ZDIy
NzRmMjRlZDY1YzhjYzNjNzhlMDM1ZTc0ZmYzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqWsTV57UCc26y9ANXa+KtajE/co9pGdLTT36D++MIXR+wQ
2WXdDts1hZAsdjWke1ek5DgqjvXNrla52tgRCKGAnPmaGhKBuU6FSpvClQhZqET0
FOO25BGm5kBObjKlCo0WZTFR32TKTHuWYMK5zR/8tH96LOUJgMh7kUklR2tHIsE+
UVNUCZ1M1nXOJxEtkHP8nhmaQW4PnOBAA+YvV0yrtkK5SAepch8UJrmbbYEoOn1U
Kd6SiOs9XDlnikeFCfp2iXgHR9MGw1K03vbetu0RJWPpgK6xbMZmp2eQ+9+7OESA
vTevJQMEklo2DGtJ2Z2ib639w//LLvvoDiJecI0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSNSg/0nSJ08k7WXIzDx44DXnT/ODAfBgNVHSMEGDAWgBRieKdoyRC63NXE
rvfBcqnwYVR+jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1luaW5hTWtRdXR6VnhLNzN3WEtwOEdGVWZvdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvNDJkZmMwLWE3NjQtNGQ1ZC1hNjM0LTM0NTRmNDkwZmQ5Ni8x
L2pVb1A5SjBpZFBKTzFseU13OGVPQTE1MF96Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
NDJkZmMwLWE3NjQtNGQ1ZC1hNjM0LTM0NTRmNDkwZmQ5Ni8xL1luaW5hTWtRdXR6
VnhLNzN3WEtwOEdGVWZvdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvfojANBgkqhkiG9w0BAQsFAAOC
AQEANKsC+OILmvRy6us0ITkf+efscN5pUzPn8zszWCAA1Sm/M3T+Q4K86yT3SrIv
TABiXrRGxkpshHujPlUUfyAVjMuvN3AwRkuHb3ipjFOz9RohvmSU7tKgJYWz2JDQ
b72QTgsCzr/96WdItJUCfMR/qHsH8kj+HCUs9qtmepfqnk6EraQaKngNeC83HCoy
/7kqrOStmkJ/mb4+H3zSIexYcObK6iM7qMinQ2SL4EXrCX0PmBiV9Qd3Z+c14srR
d+iAjXClVEOtDFhTPBdq+XVZyrgT2PxdyGhHvsQc9uLSigNvHmTTPeQhCAO+LCpG
9NASWpKUbZHoduq1r03rUsy87Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org