Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IJ1nHFmpEQl5zkKKkB7VOeyk_e4.roa
File: IJ1nHFmpEQl5zkKKkB7VOeyk_e4.roa (raw, json)
Hash identifier: DnVvygAtcrQDHlhSTLwILmjdXOaAbSm0FeLRYnZhqwM=
Subject key identifier: 20:9D:67:1C:59:A9:11:09:79:CE:42:8A:90:1E:D5:39:EC:A4:FD:EE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0184BEDF608B59FA995FDB8ED209EE8C5C6C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IJ1nHFmpEQl5zkKKkB7VOeyk_e4.roa
Signing time: Mon 28 Nov 2022 15:33:41 +0000
ROA not before: Mon 28 Nov 2022 15:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 91.226.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:df:60:8b:59:fa:99:5f:db:8e:d2:09:ee:8c:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 28 15:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=209d671c59a9110979ce428a901ed539eca4fdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:55:d5:80:fd:27:fd:48:a1:2e:f9:18:35:
6c:fc:6e:8e:ca:32:5b:ed:d6:8a:d1:4c:3d:f4:d8:
31:17:f0:9a:02:b2:ec:da:92:65:54:89:c0:f9:11:
8e:16:67:64:5b:ae:cf:24:1a:14:09:bc:54:eb:4d:
76:b7:38:e8:85:63:70:c5:5a:ef:95:a9:2b:e9:fa:
6e:52:bc:b6:4e:a5:92:87:12:85:20:80:34:10:03:
23:cd:55:bb:77:9d:ef:78:8f:64:98:41:b7:be:5d:
a5:76:9d:d0:57:cd:c4:b0:6b:92:39:dc:84:87:5a:
2f:e4:b7:48:08:83:b3:19:ad:81:98:18:ff:72:70:
23:cd:9e:b6:83:91:af:a5:a2:f7:6d:42:d9:bf:f9:
64:f0:25:67:6e:ee:42:d6:44:b1:0d:e2:d3:dd:1d:
9a:51:0a:16:b2:99:75:a7:30:4c:a7:f4:14:5e:a6:
57:27:9a:27:59:78:53:10:17:a4:ac:82:26:44:a0:
c2:e5:5d:35:d1:90:cd:c9:e9:9a:6f:f7:b6:f0:e2:
a2:dc:3b:48:17:d1:57:bd:ed:c9:8f:85:90:b4:42:
d6:a1:b6:55:d0:0d:31:9b:09:56:1e:3e:29:9e:1b:
62:56:41:6b:80:74:57:62:2e:c3:7a:30:d4:5f:20:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:67:1C:59:A9:11:09:79:CE:42:8A:90:1E:D5:39:EC:A4:FD:EE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IJ1nHFmpEQl5zkKKkB7VOeyk_e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:55:fd:24:7a:33:aa:17:70:fc:4e:48:a6:8d:7c:d0:0e:8d:
b9:72:c3:3f:a9:fd:77:2e:fb:28:14:86:17:ab:4b:69:fd:ec:
93:54:22:f9:16:a4:3b:4a:30:14:4e:1c:e8:44:54:e8:bc:23:
0d:6f:f7:03:84:5b:a7:8b:cc:53:e1:8f:ac:d2:29:48:b0:d2:
d5:f0:ee:3e:5b:76:a0:cc:98:6a:34:80:e9:24:29:ef:3a:bb:
84:f4:08:89:10:d9:cb:c1:7e:cc:f2:a4:30:43:3e:25:20:02:
24:36:f1:b9:3a:94:70:da:7c:eb:56:24:cd:a9:9c:e3:a3:65:
9f:93:b1:f5:00:5d:19:3d:40:66:c0:de:76:9c:1c:63:8f:a7:
57:66:94:ca:f2:8e:88:4e:9a:62:74:2e:3d:8a:30:03:87:0b:
01:c8:95:10:fc:1f:9e:e6:a4:c7:3e:db:51:22:d7:d6:ab:73:
12:5c:91:03:9f:e7:3d:e0:da:04:bb:ab:50:3d:44:03:2a:7f:
a8:26:c9:82:64:fe:bf:a2:b4:a7:3e:f5:89:f9:55:d3:52:60:
a8:59:77:87:f9:bc:8a:d3:62:18:bf:d7:fc:62:f8:ea:75:90:
b2:5a:eb:2f:8a:67:bc:9f:b2:fe:b3:e7:77:c1:ae:09:4a:22:
8e:8d:4f:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS+32CLWfqZX9uO0gnujFxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIxMTI4MTUzMzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDlkNjcxYzU5YTkxMTA5NzljZTQyOGE5MDFlZDUzOWVjYTRmZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRV1YD9J/1IoS75GDVs/G6OyjJb
7daK0Uw99NgxF/CaArLs2pJlVInA+RGOFmdkW67PJBoUCbxU6012tzjohWNwxVrv
lakr6fpuUry2TqWShxKFIIA0EAMjzVW7d53veI9kmEG3vl2ldp3QV83EsGuSOdyE
h1ov5LdICIOzGa2BmBj/cnAjzZ62g5GvpaL3bULZv/lk8CVnbu5C1kSxDeLT3R2a
UQoWspl1pzBMp/QUXqZXJ5onWXhTEBekrIImRKDC5V010ZDNyemab/e28OKi3DtI
F9FXve3Jj4WQtELWobZV0A0xmwlWHj4pnhtiVkFrgHRXYi7DejDUXyCNkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCdZxxZqREJec5CipAe1TnspP3uMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvSUoxbkhGbXBFUWw1emtLS2tCN1ZPZXlrX2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+I6MA0G
CSqGSIb3DQEBCwUAA4IBAQA7Vf0kejOqF3D8TkimjXzQDo25csM/qf13LvsoFIYX
q0tp/eyTVCL5FqQ7SjAUThzoRFTovCMNb/cDhFuni8xT4Y+s0ilIsNLV8O4+W3ag
zJhqNIDpJCnvOruE9AiJENnLwX7M8qQwQz4lIAIkNvG5OpRw2nzrViTNqZzjo2Wf
k7H1AF0ZPUBmwN52nBxjj6dXZpTK8o6ITppidC49ijADhwsByJUQ/B+e5qTHPttR
ItfWq3MSXJEDn+c94NoEu6tQPUQDKn+oJsmCZP6/orSnPvWJ+VXTUmCoWXeH+byK
02IYv9f8YvjqdZCyWusvime8n7L+s+d3wa4JSiKOjU/s
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org