Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/sDX1ltWSd8tS9pFMf-CkfOmclas.roa
File: sDX1ltWSd8tS9pFMf-CkfOmclas.roa (raw, json)
Hash identifier: kGgduSNhRBCcOrhkLyuL+C5lN+3mOp7iY0XnoWkbLc4=
Subject key identifier: B0:35:F5:96:D5:92:77:CB:52:F6:91:4C:7F:E0:A4:7C:E9:9C:95:AB
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 036F4170
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/sDX1ltWSd8tS9pFMf-CkfOmclas.roa
Signing time: Sat 01 Jan 2022 05:57:16 +0000
ROA not before: Sat 01 Jan 2022 05:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212285
IP address blocks: 91.243.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57622896 (0x36f4170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Jan 1 05:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b035f596d59277cb52f6914c7fe0a47ce99c95ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:30:ba:7f:52:b6:1d:0f:c9:e4:c1:1f:3c:
b8:3e:c8:c9:29:7b:74:66:a5:fa:3a:a5:c0:c0:62:
72:d1:cb:0e:54:40:bc:37:18:c5:0d:a6:d1:90:12:
f5:df:5a:d2:22:68:bb:73:13:63:e2:6a:65:32:b9:
a9:f9:a7:76:95:e4:3b:0d:de:e7:e0:d3:79:8f:2d:
ec:cb:95:3e:f3:5b:d1:4a:9a:31:5d:47:4c:25:31:
34:26:43:fc:f6:ec:d8:30:1f:f5:37:f8:06:30:b0:
28:bd:f6:0b:55:ef:8b:b2:cc:db:05:21:dc:00:fa:
01:d5:fd:8b:03:10:3b:db:49:95:5b:66:98:71:e5:
57:54:aa:d5:70:f3:b8:9d:aa:10:b7:30:47:e8:c0:
2f:50:6f:40:61:36:37:41:31:8e:7e:9c:be:a0:dc:
f1:b3:a5:c7:fa:a4:a4:e7:eb:ca:60:5f:e8:e1:51:
a8:36:34:ab:d5:f7:e8:4a:6a:3a:a0:c6:75:15:f7:
20:84:3a:49:e9:e4:54:c0:39:b4:dc:41:87:3c:3e:
18:e6:19:04:cd:50:a4:0f:b5:64:df:c4:5a:60:aa:
3f:5e:8f:4b:ed:07:0a:53:a5:a2:d3:3c:de:01:31:
90:fe:14:a1:a7:e6:c7:4d:c3:3d:42:94:df:93:d8:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:F5:96:D5:92:77:CB:52:F6:91:4C:7F:E0:A4:7C:E9:9C:95:AB
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/sDX1ltWSd8tS9pFMf-CkfOmclas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5c:3d:01:4d:f9:86:04:8d:43:09:13:27:f8:da:49:1b:89:
61:a8:a5:69:26:85:b4:f9:25:00:6b:88:26:e4:c2:48:f4:b7:
be:da:6b:53:97:a0:5a:f5:2b:28:52:bd:e3:c7:bc:0a:ee:16:
4d:97:70:ae:cc:c6:3d:3c:18:18:ed:30:0e:c5:94:ab:0a:53:
9b:96:85:7a:2c:32:31:8b:d3:c2:f1:af:10:42:21:21:85:27:
05:e4:c5:30:7a:37:bf:18:c8:4d:3f:96:42:30:54:58:9b:b3:
29:98:00:31:c7:1c:61:5a:23:ee:c3:64:75:6d:0e:0e:45:24:
d9:02:0f:5d:c4:4c:47:10:6d:cc:31:21:43:01:10:59:c3:c6:
c8:fd:90:47:d5:82:de:5c:73:b1:2c:8b:30:fa:94:5e:ce:f2:
48:44:f4:f0:13:ee:14:1a:d1:4a:35:3a:bb:9b:01:3b:66:5b:
81:35:11:46:5c:ed:46:c0:be:0c:f6:e7:f5:d0:57:9b:4b:df:
28:74:6e:ec:67:b4:16:ea:66:17:cd:0b:d3:af:66:e6:fe:63:
7b:af:57:3d:0a:e6:e1:72:8c:2d:c9:86:38:96:0a:81:03:fa:
06:a6:5c:23:fc:25:60:bb:e9:6f:52:af:6b:c9:a1:ef:17:14:
44:4f:1e:9f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA29BcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MTA3MWM4NWEzNDgyOTU4Zjg3ZjAzMmI2NDYzMTk4YzdmZDllYjA3MB4XDTIyMDEw
MTA1NTcxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjAzNWY1OTZkNTky
NzdjYjUyZjY5MTRjN2ZlMGE0N2NlOTljOTVhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJBgMLp/UrYdD8nkwR88uD7IySl7dGal+jqlwMBictHLDlRA
vDcYxQ2m0ZAS9d9a0iJou3MTY+JqZTK5qfmndpXkOw3e5+DTeY8t7MuVPvNb0Uqa
MV1HTCUxNCZD/Pbs2DAf9Tf4BjCwKL32C1Xvi7LM2wUh3AD6AdX9iwMQO9tJlVtm
mHHlV1Sq1XDzuJ2qELcwR+jAL1BvQGE2N0Exjn6cvqDc8bOlx/qkpOfrymBf6OFR
qDY0q9X36EpqOqDGdRX3IIQ6SenkVMA5tNxBhzw+GOYZBM1QpA+1ZN/EWmCqP16P
S+0HClOlotM83gExkP4Uoafmx03DPUKU35PYPuUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSwNfWW1ZJ3y1L2kUx/4KR86ZyVqzAfBgNVHSMEGDAWgBRxBxyFo0gpWPh/
AytkYxmMf9nrBzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NRY2NoYU5JS1ZqNGZ3TXJaR01aakhfWjZ3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvZjg2MWYyLWJmODMtNDI0MS1iYjZhLWFlZmQ4MDg3MjUzMi8x
L3NEWDFsdFdTZDh0UzlwRk1mLUNrZk9tY2xhcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
Zjg2MWYyLWJmODMtNDI0MS1iYjZhLWFlZmQ4MDg3MjUzMi8xL2NRY2NoYU5JS1Zq
NGZ3TXJaR01aakhfWjZ3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvzdDANBgkqhkiG9w0BAQsFAAOC
AQEAr1w9AU35hgSNQwkTJ/jaSRuJYailaSaFtPklAGuIJuTCSPS3vtprU5egWvUr
KFK948e8Cu4WTZdwrszGPTwYGO0wDsWUqwpTm5aFeiwyMYvTwvGvEEIhIYUnBeTF
MHo3vxjITT+WQjBUWJuzKZgAMcccYVoj7sNkdW0ODkUk2QIPXcRMRxBtzDEhQwEQ
WcPGyP2QR9WC3lxzsSyLMPqUXs7ySET08BPuFBrRSjU6u5sBO2ZbgTURRlztRsC+
DPbn9dBXm0vfKHRu7Ge0FupmF80L069m5v5je69XPQrm4XKMLcmGOJYKgQP6BqZc
I/wlYLvpb1Kva8mh7xcURE8enw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:41 2025 by rpki-client