Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/3_YCyz1h8T161Ch5CRgcJdUQwqg.roa
File: 3_YCyz1h8T161Ch5CRgcJdUQwqg.roa (raw, json)
Hash identifier: NhRNbIqX3D2RVRZUYjfBdUsIlmgT/1qPfcJv5shmit8=
Subject key identifier: DF:F6:02:CB:3D:61:F1:3D:7A:D4:28:79:09:18:1C:25:D5:10:C2:A8
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 0184E1E89C27A166B8BF22B7A5A928E54AEE
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/3_YCyz1h8T161Ch5CRgcJdUQwqg.roa
Signing time: Mon 05 Dec 2022 10:50:28 +0000
ROA not before: Mon 05 Dec 2022 10:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47952
IP address blocks: 91.198.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:e8:9c:27:a1:66:b8:bf:22:b7:a5:a9:28:e5:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Dec 5 10:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff602cb3d61f13d7ad4287909181c25d510c2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:61:ac:4e:4f:10:20:07:35:74:17:42:a6:
da:97:31:6d:13:1b:2e:10:d5:b1:66:ac:bf:9d:14:
4f:02:d7:6a:3d:22:c2:49:01:c2:cf:ef:36:1e:7e:
78:45:7b:9c:79:0c:c5:fd:7b:a1:de:3a:70:9c:98:
51:cd:1f:03:f3:59:39:80:3b:00:39:5f:6e:82:02:
d9:00:cf:67:07:f3:56:36:08:66:c4:f0:da:3f:17:
c9:a5:fa:07:92:f2:28:2d:92:b4:0a:ce:47:d0:e9:
41:b4:89:c6:7a:a3:78:8e:a5:ce:12:d8:ea:23:a4:
f9:ad:0e:f8:1c:16:bc:11:91:a9:de:44:3e:49:a0:
96:3a:46:72:16:18:0d:6a:15:25:e6:2c:98:db:1b:
18:1d:b2:59:4c:08:f1:1f:30:f4:58:08:09:d7:83:
06:16:a6:ce:ee:8b:cc:b6:75:62:11:51:01:89:e3:
cb:82:72:9b:7d:03:75:ac:b0:fb:70:5c:3b:3c:50:
64:63:6b:13:18:35:8f:74:a0:70:81:ef:93:98:8a:
0c:6c:04:19:7d:6f:62:65:e1:8b:7e:43:8f:31:14:
f7:6a:31:f0:81:5c:0e:06:92:02:70:3c:e7:ce:90:
b4:0b:4d:5b:a5:30:d9:31:e0:44:63:b0:9f:2e:7f:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F6:02:CB:3D:61:F1:3D:7A:D4:28:79:09:18:1C:25:D5:10:C2:A8
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/3_YCyz1h8T161Ch5CRgcJdUQwqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.64.0/24
Signature Algorithm: sha256WithRSAEncryption
70:dd:36:84:a7:b0:f2:13:32:cb:b6:0e:89:52:0e:89:eb:d9:
12:97:af:ae:8b:c7:c5:29:80:6f:6b:10:d6:1b:76:2c:8c:58:
3b:12:e1:84:26:46:27:5c:96:c7:2b:da:5b:9c:9d:77:57:10:
6b:56:1c:7d:2f:72:72:55:4c:47:b3:26:11:44:22:98:bc:d0:
75:76:06:70:5f:79:22:58:ef:55:1b:37:09:d2:c2:27:b4:ce:
af:d1:11:ad:e8:5d:cd:b7:e1:61:a2:57:b3:f8:5d:d2:b7:f5:
ba:60:7b:25:54:8a:70:54:ee:03:39:f6:d4:73:02:c0:39:e2:
fd:57:62:eb:9b:2b:d4:f5:e3:1b:33:5c:28:88:9c:c0:e7:b1:
81:c7:58:54:99:1f:05:29:ee:86:83:85:10:87:3f:ae:3e:df:
40:ab:ad:c5:63:9c:35:67:e0:db:a9:79:66:5f:17:7b:b3:2b:
c5:02:bc:94:32:50:1d:c1:86:9c:64:3a:59:51:fb:fe:8b:66:
f3:09:74:a2:fc:df:0e:a2:23:d2:d1:64:8c:7b:7e:df:62:10:
4d:ee:6e:a3:34:ea:98:61:60:fc:2f:33:ba:bc:f7:88:b5:89:
19:b6:b8:23:7d:50:27:d1:25:13:5c:ef:ab:b0:37:39:06:17:
be:90:4c:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTh6JwnoWa4vyK3pako5UruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm
MzQ3N2IwHhcNMjIxMjA1MTA1MDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmY2MDJjYjNkNjFmMTNkN2FkNDI4NzkwOTE4MWMyNWQ1MTBjMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCdhrE5PECAHNXQXQqbalzFtExsu
ENWxZqy/nRRPAtdqPSLCSQHCz+82Hn54RXuceQzF/Xuh3jpwnJhRzR8D81k5gDsA
OV9uggLZAM9nB/NWNghmxPDaPxfJpfoHkvIoLZK0Cs5H0OlBtInGeqN4jqXOEtjq
I6T5rQ74HBa8EZGp3kQ+SaCWOkZyFhgNahUl5iyY2xsYHbJZTAjxHzD0WAgJ14MG
FqbO7ovMtnViEVEBiePLgnKbfQN1rLD7cFw7PFBkY2sTGDWPdKBwge+TmIoMbAQZ
fW9iZeGLfkOPMRT3ajHwgVwOBpICcDznzpC0C01bpTDZMeBEY7CfLn9s4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/2Ass9YfE9etQoeQkYHCXVEMKoMB8GA1UdIwQY
MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt
ZjZlOGJiZGJkMzNiLzEvM19ZQ3l6MWg4VDE2MUNoNUNSZ2NKZFVRd3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi
LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZAMA0G
CSqGSIb3DQEBCwUAA4IBAQBw3TaEp7DyEzLLtg6JUg6J69kSl6+ui8fFKYBvaxDW
G3YsjFg7EuGEJkYnXJbHK9pbnJ13VxBrVhx9L3JyVUxHsyYRRCKYvNB1dgZwX3ki
WO9VGzcJ0sIntM6v0RGt6F3Nt+Fholez+F3St/W6YHslVIpwVO4DOfbUcwLAOeL9
V2LrmyvU9eMbM1woiJzA57GBx1hUmR8FKe6Gg4UQhz+uPt9Aq63FY5w1Z+DbqXlm
Xxd7syvFAryUMlAdwYacZDpZUfv+i2bzCXSi/N8OoiPS0WSMe37fYhBN7m6jNOqY
YWD8LzO6vPeItYkZtrgjfVAn0SUTXO+rsDc5Bhe+kEwa
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:59 2025 by rpki-client