Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Qz7oA0kc1Q0U2cTUQ6eLdjJizRQ.roa
File: Qz7oA0kc1Q0U2cTUQ6eLdjJizRQ.roa (raw, json)
Hash identifier: NIRYTf1v1mqE1a0uYa9oAUwa5CBju4mP0fOLyY+rxR8=
Subject key identifier: 43:3E:E8:03:49:1C:D5:0D:14:D9:C4:D4:43:A7:8B:76:32:62:CD:14
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018262E4447F3B239036F7F8810563A6947A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Qz7oA0kc1Q0U2cTUQ6eLdjJizRQ.roa
Signing time: Wed 03 Aug 2022 08:48:23 +0000
ROA not before: Wed 03 Aug 2022 08:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.226.58.0/23 maxlen: 24
91.226.56.0/23 maxlen: 24
87.237.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:e4:44:7f:3b:23:90:36:f7:f8:81:05:63:a6:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 3 08:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=433ee803491cd50d14d9c4d443a78b763262cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:61:a4:70:98:3f:57:a7:3a:27:58:38:37:
4d:83:6a:88:8f:03:05:80:4c:ad:62:5d:aa:cb:36:
e6:1f:19:25:88:06:ab:7e:a4:a7:bb:2a:21:ab:91:
8c:f9:73:a4:86:bc:1c:c0:64:3c:31:98:b4:79:b2:
70:d2:dd:8f:d7:75:d6:e8:f0:fb:c5:fb:c0:f8:95:
2f:0c:72:bf:0d:68:77:8e:46:4c:a7:08:cb:b0:f4:
51:7f:9a:9e:ff:55:71:9b:89:7e:3b:7b:49:74:2e:
82:fe:5b:cc:85:54:3a:4c:e6:5f:4f:a3:e9:8a:c3:
4d:dc:ab:d8:cc:ef:65:f4:8d:26:6f:00:cf:69:7e:
46:4d:37:f5:7f:28:f5:96:d6:99:5a:15:de:bf:48:
07:f5:42:f4:30:8e:b2:dd:84:8a:6e:f9:64:dd:14:
e0:1a:7a:ea:0e:ac:56:78:40:31:90:39:47:46:66:
6c:77:89:16:1a:2b:0b:a4:4e:f6:04:75:ce:a3:de:
57:96:97:49:e0:63:cc:88:70:aa:19:60:11:65:f7:
e6:ff:78:80:47:90:f3:82:22:0f:0f:29:b4:e4:e0:
e0:64:95:24:61:21:b7:87:88:8d:1a:e5:a4:7b:a2:
63:da:cd:02:b1:80:8b:cf:f9:50:65:a2:f4:e1:f5:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:E8:03:49:1C:D5:0D:14:D9:C4:D4:43:A7:8B:76:32:62:CD:14
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Qz7oA0kc1Q0U2cTUQ6eLdjJizRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
91.226.56.0/22
Signature Algorithm: sha256WithRSAEncryption
35:06:26:64:07:fa:0a:10:7c:1f:74:bb:2a:16:82:2b:47:6d:
e1:07:c3:c2:c6:55:57:d5:63:7d:67:92:1d:3b:f2:0e:60:4d:
03:e1:5f:ac:2b:9b:ef:7c:50:11:e3:ec:8f:a4:b7:92:e0:d2:
ce:08:3a:99:34:a9:34:91:91:9f:6a:55:27:0f:05:ed:00:a4:
ac:44:d7:3c:53:fe:60:ac:d5:c9:7b:b5:63:14:4a:53:f3:87:
a5:17:dc:3d:cc:d5:42:8c:90:06:51:c5:e3:ea:ae:f4:44:72:
0c:64:2e:ee:a4:8c:8f:d9:02:fa:16:84:b3:0c:9c:ca:f8:34:
4a:e1:ff:c0:bd:f8:fb:5a:62:2c:89:84:ec:57:5f:14:99:22:
76:55:84:12:06:b6:e4:3d:4c:ad:18:10:47:a3:96:2a:3f:7c:
92:b4:e2:27:4a:67:02:ca:02:97:3d:14:0f:4e:db:bd:18:25:
48:a1:27:4b:dc:09:9d:b1:75:7f:14:19:28:fb:b5:93:d7:01:
78:60:89:38:5c:5c:08:e1:88:d8:3a:e8:08:91:22:3b:9b:2d:
03:6f:cb:54:65:a3:ce:54:b6:1c:e6:ff:11:43:86:b4:74:fa:
30:8e:41:54:89:d5:b9:1c:e5:c2:01:c4:fc:fa:60:bb:be:91:
0b:ee:48:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJi5ER/OyOQNvf4gQVjppR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIwODAzMDg0ODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzNlZTgwMzQ5MWNkNTBkMTRkOWM0ZDQ0M2E3OGI3NjMyNjJjZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5FhpHCYP1enOidYODdNg2qIjwMF
gEytYl2qyzbmHxkliAarfqSnuyohq5GM+XOkhrwcwGQ8MZi0ebJw0t2P13XW6PD7
xfvA+JUvDHK/DWh3jkZMpwjLsPRRf5qe/1Vxm4l+O3tJdC6C/lvMhVQ6TOZfT6Pp
isNN3KvYzO9l9I0mbwDPaX5GTTf1fyj1ltaZWhXev0gH9UL0MI6y3YSKbvlk3RTg
GnrqDqxWeEAxkDlHRmZsd4kWGisLpE72BHXOo95XlpdJ4GPMiHCqGWARZffm/3iA
R5DzgiIPDym05ODgZJUkYSG3h4iNGuWke6Jj2s0CsYCLz/lQZaL04fWTNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEM+6ANJHNUNFNnE1EOni3YyYs0UMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvUXo3b0Ewa2MxUTBVMmNUVVE2ZUxkakppelJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+2nAwQC
W+I4MA0GCSqGSIb3DQEBCwUAA4IBAQA1BiZkB/oKEHwfdLsqFoIrR23hB8PCxlVX
1WN9Z5IdO/IOYE0D4V+sK5vvfFAR4+yPpLeS4NLOCDqZNKk0kZGfalUnDwXtAKSs
RNc8U/5grNXJe7VjFEpT84elF9w9zNVCjJAGUcXj6q70RHIMZC7upIyP2QL6FoSz
DJzK+DRK4f/Avfj7WmIsiYTsV18UmSJ2VYQSBrbkPUytGBBHo5YqP3yStOInSmcC
ygKXPRQPTtu9GCVIoSdL3AmdsXV/FBko+7WT1wF4YIk4XFwI4YjYOugIkSI7my0D
b8tUZaPOVLYc5v8RQ4a0dPowjkFUidW5HOXCAcT8+mC7vpEL7khc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org