Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/xdiPGdULf1I_6ixnRfkxtJZPpcY.roa
File: xdiPGdULf1I_6ixnRfkxtJZPpcY.roa (raw, json)
Hash identifier: NWDapunVlRxUD/4WwtuPbD3FjH+2c9XT9AhHt+mv0GQ=
Subject key identifier: C5:D8:8F:19:D5:0B:7F:52:3F:EA:2C:67:45:F9:31:B4:96:4F:A5:C6
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 0560
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/xdiPGdULf1I_6ixnRfkxtJZPpcY.roa
Signing time: Thu 03 Mar 2022 10:21:23 +0000
ROA not before: Thu 03 Mar 2022 10:21:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47271
IP address blocks: 91.209.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Mar 3 10:21:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5d88f19d50b7f523fea2c6745f931b4964fa5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:e5:e1:5a:92:ae:c7:b4:8d:81:a6:df:76:
26:5d:20:2e:d3:87:75:de:18:07:68:53:9d:d8:37:
11:a6:20:8b:dd:db:6c:ba:a7:6a:ca:fe:d3:73:44:
42:7f:7d:51:07:65:d5:1a:3b:ac:44:6d:24:24:20:
a5:d3:ba:b5:4e:57:0f:b9:05:78:7f:83:ee:c7:70:
d2:fa:cf:bc:14:b3:c8:5c:dd:48:0e:4a:7a:0f:9f:
ad:5a:22:15:59:2a:8e:bd:d0:97:cb:e0:84:2c:92:
0e:72:d3:ee:42:f4:2b:90:c8:45:9f:27:e5:28:e4:
4b:e8:07:85:64:d5:f3:9e:26:54:05:41:d6:11:02:
91:ec:9f:19:11:f9:1b:64:0f:1a:97:08:4f:c9:52:
b2:7a:43:12:b1:83:35:17:1c:dd:3b:15:81:8c:4b:
71:99:79:6c:af:6e:d0:74:2d:02:77:a3:18:46:58:
d6:2a:30:82:2d:80:fd:27:9d:cf:6d:2f:61:18:73:
ba:6c:cd:4f:2e:c9:f2:d9:f1:b8:7a:c2:02:53:ea:
77:09:21:b5:4c:c4:9a:d8:59:51:49:2e:57:20:12:
08:81:13:64:9b:1c:aa:3e:57:51:13:de:f3:07:58:
b5:17:24:1e:9b:1d:51:69:7c:43:f9:bc:e5:8c:f0:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:8F:19:D5:0B:7F:52:3F:EA:2C:67:45:F9:31:B4:96:4F:A5:C6
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/xdiPGdULf1I_6ixnRfkxtJZPpcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c0:68:7f:6c:da:73:a2:9a:5e:db:df:26:03:3f:6d:5d:e5:
91:d5:86:10:e4:0f:71:e0:86:b3:a8:0d:f6:7d:19:c9:6c:ef:
16:2a:3a:2c:76:03:08:88:64:4c:35:a7:63:8f:55:98:a1:8c:
a4:58:04:42:4f:ee:e3:34:d3:ab:13:b6:d7:e1:35:2d:c8:a5:
dd:1f:e6:2c:b6:d0:3a:2b:82:02:aa:7e:a1:82:db:7e:24:36:
4e:0c:05:c2:39:aa:44:cb:f9:21:80:ec:08:c9:e2:f9:48:77:
dc:8b:9b:3b:d7:ce:2b:ec:2a:63:39:5d:d9:45:20:5c:1b:36:
19:89:10:1d:0d:7a:54:ba:47:fa:70:a0:15:51:f5:c0:25:81:
b6:4d:95:f5:aa:fc:33:58:16:2f:55:27:c8:1d:31:c9:7f:90:
1d:a0:b7:93:0c:a0:ff:a5:ac:7c:7c:89:01:d2:70:05:70:33:
16:3a:a6:94:24:8b:91:90:3f:e2:74:f8:8f:00:62:da:7e:ab:
bf:fb:54:e2:a8:7f:f5:ce:1a:d3:54:56:e0:6c:29:4d:d7:7a:
5e:3c:23:3a:1d:03:60:65:24:3f:12:33:e3:87:95:3b:a6:7f:
4c:0a:86:ed:6a:11:b3:c7:dc:89:b6:9e:f1:fd:12:4d:c3:3f:
8c:7b:24:02
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzc3
YmQxMGY3ZDkwNmMxMzFjOGM5ZTJmYzczMTY0MTZkZjRhZTIyNDAeFw0yMjAzMDMx
MDIxMjNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGM1ZDg4ZjE5ZDUwYjdm
NTIzZmVhMmM2NzQ1ZjkzMWI0OTY0ZmE1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYHuXhWpKux7SNgabfdiZdIC7Th3XeGAdoU53YNxGmIIvd22y6
p2rK/tNzREJ/fVEHZdUaO6xEbSQkIKXTurVOVw+5BXh/g+7HcNL6z7wUs8hc3UgO
SnoPn61aIhVZKo690JfL4IQskg5y0+5C9CuQyEWfJ+Uo5EvoB4Vk1fOeJlQFQdYR
ApHsnxkR+RtkDxqXCE/JUrJ6QxKxgzUXHN07FYGMS3GZeWyvbtB0LQJ3oxhGWNYq
MIItgP0nnc9tL2EYc7pszU8uyfLZ8bh6wgJT6ncJIbVMxJrYWVFJLlcgEgiBE2Sb
HKo+V1ET3vMHWLUXJB6bHVFpfEP5vOWM8IAHAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUxdiPGdULf1I/6ixnRfkxtJZPpcYwHwYDVR0jBBgwFoAUN3vRD32QbBMcjJ4v
xzFkFt9K4iQwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9O
M3ZSRDMyUWJCTWNqSjR2eHpGa0Z0OUs0aVEuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzE3LzIwODEyOS1kMDg2LTQ5ZDQtOWRjNy01YTlhYzdmMzkwMjMvMS94
ZGlQR2RVTGYxSV82aXhuUmZreHRKWlBwY1kucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzIw
ODEyOS1kMDg2LTQ5ZDQtOWRjNy01YTlhYzdmMzkwMjMvMS9OM3ZSRDMyUWJCTWNq
SjR2eHpGa0Z0OUs0aVEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb0QMwDQYJKoZIhvcNAQELBQADggEB
AADAaH9s2nOiml7b3yYDP21d5ZHVhhDkD3HghrOoDfZ9Gcls7xYqOix2AwiIZEw1
p2OPVZihjKRYBEJP7uM006sTttfhNS3Ipd0f5iy20DorggKqfqGC234kNk4MBcI5
qkTL+SGA7AjJ4vlId9yLmzvXzivsKmM5XdlFIFwbNhmJEB0NelS6R/pwoBVR9cAl
gbZNlfWq/DNYFi9VJ8gdMcl/kB2gt5MMoP+lrHx8iQHScAVwMxY6ppQki5GQP+J0
+I8AYtp+q7/7VOKof/XOGtNUVuBsKU3Xel48IzodA2BlJD8SM+OHlTumf0wKhu1q
EbPH3Im2nvH9Ek3DP4x7JAI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org