Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa
File: LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa (raw, json)
Hash identifier: QufgRQZx+nMZQhNWlzZOf4LysL52gLg7cYi7KfeVlls=
Subject key identifier: 2C:12:6C:60:78:1E:D9:6A:17:0E:E1:78:BD:61:7E:B1:3D:8D:AA:07
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 0181F74C6D61C4602DF69BCC0AED79BC85E6
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa
Signing time: Wed 13 Jul 2022 11:23:09 +0000
ROA not before: Wed 13 Jul 2022 11:23:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15542
IP address blocks: 91.230.33.0/24 maxlen: 24
91.230.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:4c:6d:61:c4:60:2d:f6:9b:cc:0a:ed:79:bc:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jul 13 11:23:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c126c60781ed96a170ee178bd617eb13d8daa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:53:bd:13:90:57:e3:aa:7b:17:39:e8:2b:
32:cf:33:3d:a2:02:b1:1d:33:12:77:2e:c3:e1:2a:
07:ab:8c:34:b2:f9:88:21:4b:81:bb:8e:f9:f7:a3:
ba:5a:3e:d9:e5:7d:e5:11:5d:6c:25:13:71:97:ce:
b9:de:38:40:46:f7:ce:85:d1:f2:c8:f1:b2:b8:1c:
a9:0c:a6:b0:e3:15:f5:3c:a4:8c:7f:30:78:df:ad:
6c:eb:5e:5f:39:f8:0c:65:bf:b4:1e:de:02:3b:34:
2a:a5:c0:4d:43:09:23:10:36:35:7f:f6:17:87:1d:
42:29:12:fe:d2:7d:b8:d7:c3:fc:66:eb:d4:1f:e1:
6e:af:fa:8f:87:c3:c8:03:bb:91:aa:b2:30:6f:2b:
9d:32:7d:69:1e:c4:3f:e0:24:da:84:2b:79:50:64:
6b:9c:fd:dc:da:ce:6a:39:4d:21:7b:f3:73:c3:cc:
ca:f8:16:52:e5:b5:1a:7b:bd:ac:79:61:a5:b7:be:
79:37:6c:05:fe:ca:64:e0:6b:6d:f9:2b:77:c9:40:
a7:30:7f:4e:a1:28:87:29:d6:41:13:ef:76:c3:33:
10:fc:4c:f8:e9:1b:65:c0:b2:4c:9b:eb:28:a6:7e:
e3:03:6d:71:f4:75:41:8e:5b:b1:14:01:46:17:7d:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:6C:60:78:1E:D9:6A:17:0E:E1:78:BD:61:7E:B1:3D:8D:AA:07
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/LBJsYHge2WoXDuF4vWF-sT2Nqgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.33.0-91.230.35.255
Signature Algorithm: sha256WithRSAEncryption
9b:56:27:98:51:f2:58:9a:6f:ae:e5:43:1a:22:b8:c9:e9:65:
7b:ed:41:5f:69:a2:1b:00:70:13:79:39:e9:e2:c4:da:a6:0b:
25:55:28:97:1d:6b:a4:71:a9:4a:3a:7b:fa:75:ba:15:51:fc:
5e:52:9a:82:71:63:ba:e6:bb:3d:9f:1b:1c:16:39:86:c3:dc:
2d:6c:ed:20:17:03:32:7a:a5:16:a3:5a:ce:9b:a6:c7:c6:9a:
c0:54:ff:0b:38:f5:59:63:d2:ac:39:8d:5a:d1:27:74:c5:b0:
28:32:85:95:dd:5c:b6:2d:a1:c6:02:6b:e5:6e:eb:fd:71:ed:
1b:18:3b:47:09:1d:d3:4a:80:52:55:a0:e3:27:c3:22:54:67:
5f:67:7e:95:c8:d9:c6:64:20:3c:02:36:5e:db:a8:85:e7:52:
df:bd:30:2c:7b:4f:56:97:3f:08:33:25:89:30:f7:14:c7:71:
01:39:2f:ec:e6:b6:fb:b5:68:24:d2:d2:8f:96:66:e2:b2:bb:
d5:f3:a3:d1:cc:53:a8:60:be:79:e6:e0:16:88:78:a0:f7:d6:
d2:54:b4:63:c2:5d:31:65:cd:27:fa:48:ce:3f:37:a6:fc:5f:
a2:d2:0c:f5:d6:c0:63:94:de:64:ad:94:9b:81:4e:b4:24:d2:
8d:e5:db:e9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYH3TG1hxGAt9pvMCu15vIXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx
NzRkMmQwHhcNMjIwNzEzMTEyMzA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzEyNmM2MDc4MWVkOTZhMTcwZWUxNzhiZDYxN2ViMTNkOGRhYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN1TvROQV+Oqexc56CsyzzM9ogKx
HTMSdy7D4SoHq4w0svmIIUuBu47596O6Wj7Z5X3lEV1sJRNxl8653jhARvfOhdHy
yPGyuBypDKaw4xX1PKSMfzB4361s615fOfgMZb+0Ht4COzQqpcBNQwkjEDY1f/YX
hx1CKRL+0n2418P8ZuvUH+Fur/qPh8PIA7uRqrIwbyudMn1pHsQ/4CTahCt5UGRr
nP3c2s5qOU0he/Nzw8zK+BZS5bUae72seWGlt755N2wF/spk4Gtt+St3yUCnMH9O
oSiHKdZBE+92wzMQ/Ez46RtlwLJMm+sopn7jA21x9HVBjluxFAFGF31FtwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCwSbGB4HtlqFw7heL1hfrE9jaoHMB8GA1UdIwQY
MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt
ZWJkMzE0NTQyMmVhLzEvTEJKc1lIZ2UyV29YRHVGNHZXRi1zVDJOcWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh
LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb5iED
BAJb5iAwDQYJKoZIhvcNAQELBQADggEBAJtWJ5hR8liab67lQxoiuMnpZXvtQV9p
ohsAcBN5OenixNqmCyVVKJcda6RxqUo6e/p1uhVR/F5SmoJxY7rmuz2fGxwWOYbD
3C1s7SAXAzJ6pRajWs6bpsfGmsBU/ws49Vlj0qw5jVrRJ3TFsCgyhZXdXLYtocYC
a+Vu6/1x7RsYO0cJHdNKgFJVoOMnwyJUZ19nfpXI2cZkIDwCNl7bqIXnUt+9MCx7
T1aXPwgzJYkw9xTHcQE5L+zmtvu1aCTS0o+WZuKyu9Xzo9HMU6hgvnnm4BaIeKD3
1tJUtGPCXTFlzSf6SM4/N6b8X6LSDPXWwGOU3mStlJuBTrQk0o3l2+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:57 2024 by rpki-client on console-ams.rpki-client.org