Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/Td9Xim5PGxwMzc73fQ_yyL_l2ug.roa
File: Td9Xim5PGxwMzc73fQ_yyL_l2ug.roa (raw, json)
Hash identifier: xml9eL/0NLF3LPaUCyhGYUmGGzjRp8PQQ9V1Se6ILeQ=
Subject key identifier: 4D:DF:57:8A:6E:4F:1B:1C:0C:CD:CE:F7:7D:0F:F2:C8:BF:E5:DA:E8
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0E19E75E
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/Td9Xim5PGxwMzc73fQ_yyL_l2ug.roa
Signing time: Sat 01 Jan 2022 14:05:45 +0000
ROA not before: Sat 01 Jan 2022 14:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57508
IP address blocks: 91.220.110.0/24 maxlen: 24
185.221.232.0/22 maxlen: 22
2001:67c:2aac::/48 maxlen: 48
2a0c:7000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236578654 (0xe19e75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jan 1 14:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ddf578a6e4f1b1c0ccdcef77d0ff2c8bfe5dae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:61:10:f0:ea:43:4a:27:77:81:af:b2:b6:
82:4e:36:3c:74:16:d9:3a:76:77:4c:a4:69:ca:91:
e7:f4:d9:32:fc:e0:e9:80:6d:45:5a:1f:d2:55:58:
e2:cd:dd:27:78:1a:2a:89:ab:1d:08:01:28:55:d0:
1c:24:e6:c9:b4:bd:5e:1c:32:18:bb:89:0f:3d:b1:
82:53:3f:65:20:30:5e:14:97:d0:d8:c5:21:38:f4:
14:49:fa:25:8a:5a:75:18:09:a1:98:6a:8a:52:28:
7b:2f:5d:02:07:e6:34:78:98:68:84:1b:79:2b:d5:
81:63:d7:61:48:4a:fb:3a:43:59:5b:46:53:81:2a:
42:2e:6e:4d:fd:44:90:d2:69:68:f8:7f:41:b0:58:
9a:03:a1:08:a0:c5:0b:1a:1d:85:a7:6e:d2:6c:cb:
f2:42:20:f6:ad:30:30:14:c6:a9:ca:2c:a3:21:c6:
d6:0b:b2:10:69:cc:49:00:fc:4a:d7:08:77:7d:a6:
d7:74:25:0d:37:cf:b5:3a:fc:b9:9d:0e:e7:73:5c:
a7:bf:f3:c0:01:e9:6a:da:40:17:02:95:f6:18:a1:
2b:d0:eb:c0:aa:46:be:7a:9b:26:0d:a7:f0:86:0f:
23:ab:8d:2d:17:35:37:fe:17:a4:bf:ce:12:b6:07:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:57:8A:6E:4F:1B:1C:0C:CD:CE:F7:7D:0F:F2:C8:BF:E5:DA:E8
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/Td9Xim5PGxwMzc73fQ_yyL_l2ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.110.0/24
185.221.232.0/22
IPv6:
2001:67c:2aac::/48
2a0c:7000::/29
Signature Algorithm: sha256WithRSAEncryption
46:3a:7e:5a:8f:45:36:86:37:28:26:c7:f5:73:c9:bf:ef:12:
31:d1:56:53:8a:91:66:72:4f:ac:d2:ef:17:7b:29:30:f9:32:
99:38:61:76:5a:68:ce:91:98:2d:db:3f:9d:56:5b:d1:f1:f8:
1a:be:2a:a8:ba:28:e9:7c:c9:bb:0d:69:d3:25:e1:b3:3a:e1:
22:f0:bd:bc:8a:0d:3f:4f:2e:4f:d0:fb:c4:09:23:2e:6d:53:
53:aa:f3:a9:83:9b:c4:a8:9f:50:bc:7b:13:e2:77:4d:a6:ec:
a4:ce:15:81:fa:ea:48:c4:7a:96:11:f0:3b:7f:95:11:a3:4e:
e6:13:ed:9a:1b:5a:d4:2f:80:49:5c:6c:95:8f:ab:92:af:b6:
7f:aa:8b:16:15:50:28:7f:77:04:b0:d2:8c:52:07:57:4e:09:
91:07:31:44:42:95:d3:07:cf:04:1f:6b:18:20:03:23:b9:a0:
36:ce:b6:3d:98:8e:5c:d1:f1:94:f9:82:70:ae:a7:e3:68:81:
14:49:68:0c:ea:37:50:09:c9:17:ce:9c:d3:71:05:01:d0:fd:
92:be:7f:85:13:d6:c8:93:70:4a:4f:27:cb:0c:eb:76:04:fc:
e2:e0:b5:92:e0:1b:59:66:a4:04:65:7f:e8:61:ff:88:69:a6:
c5:3b:01:24
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEDhnnXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2MwZDViMTA2YjgxYTkyOTI0ZWEyYmM1MTM5ZmJiNWVlMTE4NmRkMB4XDTIyMDEw
MTE0MDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGRkZjU3OGE2ZTRm
MWIxYzBjY2RjZWY3N2QwZmYyYzhiZmU1ZGFlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7sYRDw6kNKJ3eBr7K2gk42PHQW2Tp2d0ykacqR5/TZMvzg
6YBtRVof0lVY4s3dJ3gaKomrHQgBKFXQHCTmybS9XhwyGLuJDz2xglM/ZSAwXhSX
0NjFITj0FEn6JYpadRgJoZhqilIoey9dAgfmNHiYaIQbeSvVgWPXYUhK+zpDWVtG
U4EqQi5uTf1EkNJpaPh/QbBYmgOhCKDFCxodhadu0mzL8kIg9q0wMBTGqcosoyHG
1guyEGnMSQD8StcId32m13QlDTfPtTr8uZ0O53Ncp7/zwAHpatpAFwKV9hihK9Dr
wKpGvnqbJg2n8IYPI6uNLRc1N/4XpL/OErYHFp0CAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRN31eKbk8bHAzNzvd9D/LIv+Xa6DAfBgNVHSMEGDAWgBTTwNWxBrgakpJO
orxROfu17hGG3TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4RFZzUWE0R3BLU1RxSzhVVG43dGU0Umh0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvMTlmNGQ0LTVjMWUtNDIxZi05ZjU2LWJjNTEwNGEzODVlMi8x
L1RkOVhpbTVQR3h3TXpjNzNmUV95eUxfbDJ1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
MTlmNGQ0LTVjMWUtNDIxZi05ZjU2LWJjNTEwNGEzODVlMi8xLzA4RFZzUWE0R3BL
U1RxSzhVVG43dGU0Umh0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwEgQCAAEwDAMEAFvcbgMEArnd6DAWBAIAAjAQAwcA
IAEGfCqsAwUDKgxwADANBgkqhkiG9w0BAQsFAAOCAQEARjp+Wo9FNoY3KCbH9XPJ
v+8SMdFWU4qRZnJPrNLvF3spMPkymThhdlpozpGYLds/nVZb0fH4Gr4qqLoo6XzJ
uw1p0yXhszrhIvC9vIoNP08uT9D7xAkjLm1TU6rzqYObxKifULx7E+J3TabspM4V
gfrqSMR6lhHwO3+VEaNO5hPtmhta1C+ASVxslY+rkq+2f6qLFhVQKH93BLDSjFIH
V04JkQcxREKV0wfPBB9rGCADI7mgNs62PZiOXNHxlPmCcK6n42iBFEloDOo3UAnJ
F86c03EFAdD9kr5/hRPWyJNwSk8nywzrdgT84uC1kuAbWWakBGV/6GH/iGmmxTsB
JA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:30 2023 by rpki-client on console-fra.rpki-client.org