Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0l76QsPMEKxcHPepf-k9Nzo-gUc.roa
File: 0l76QsPMEKxcHPepf-k9Nzo-gUc.roa (raw, json)
Hash identifier: DB4+SHpJRwf8OErSb66Uz7ec4DEcFgzKmH59hxnQn90=
Subject key identifier: D2:5E:FA:42:C3:CC:10:AC:5C:1C:F7:A9:7F:E9:3D:37:3A:3E:81:47
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14A441A5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0l76QsPMEKxcHPepf-k9Nzo-gUc.roa
Signing time: Sun 10 Apr 2022 08:13:46 +0000
ROA not before: Sun 10 Apr 2022 08:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 91.242.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346309029 (0x14a441a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 10 08:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25efa42c3cc10ac5c1cf7a97fe93d373a3e8147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:f6:76:fb:b1:6b:e2:02:01:42:13:f0:ab:
78:5f:bb:a1:31:26:35:38:f6:4f:12:bb:e8:e2:73:
14:88:a2:7b:80:80:ed:a2:84:07:82:3f:48:04:b8:
e5:6c:e8:af:ae:9b:02:e3:d0:1a:8d:6f:e1:cc:f9:
b8:ca:bf:1d:ff:5b:71:11:18:d0:5a:9a:d2:74:bc:
2c:fe:a9:10:b7:cc:01:ef:6e:59:cc:ad:30:4f:78:
66:04:d8:18:93:99:21:c4:23:85:9c:d2:21:18:12:
8b:aa:01:a8:cd:6f:5b:3a:47:bf:17:a2:b9:3e:ab:
8d:2b:3b:52:8d:a0:6f:a0:ee:fe:af:5d:be:70:47:
3b:8c:88:ad:bb:15:19:bd:7e:a2:44:f3:80:60:59:
0b:cb:84:5f:82:00:13:0a:e3:e7:51:b2:88:a1:a0:
f9:61:a8:f2:9d:57:99:4b:5c:57:5b:77:34:aa:7a:
b2:cb:94:0b:03:b4:b2:a9:66:4e:25:99:2c:7d:66:
2e:74:8f:c0:32:f4:54:ca:d8:3e:6d:d1:bd:50:4d:
8a:dd:8b:16:4b:0b:87:8f:6e:1c:30:b6:5c:2f:1b:
bc:aa:60:45:b0:ad:b5:e0:3a:62:25:67:41:d0:93:
29:36:b5:01:cc:86:e3:ec:7a:85:5c:c2:79:c7:00:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:FA:42:C3:CC:10:AC:5C:1C:F7:A9:7F:E9:3D:37:3A:3E:81:47
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0l76QsPMEKxcHPepf-k9Nzo-gUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
27:de:6e:90:c6:e6:b1:66:38:70:8a:2a:3e:cb:f4:17:0f:c4:
3d:17:c3:a0:37:ab:20:c4:10:4a:f0:d1:dc:e9:92:07:ea:f5:
5c:52:1f:e0:f1:44:af:0c:fa:c6:47:1e:d0:28:da:49:c8:0b:
4a:5a:7e:45:35:09:c0:66:e1:a2:d7:f7:ee:8f:88:1d:97:be:
92:81:b6:a6:55:86:cd:23:b4:3e:2e:c9:a7:2f:cc:66:0b:07:
78:82:5a:9c:ae:09:05:ad:a3:1c:4f:4d:d2:52:88:d5:09:a1:
40:7b:8a:8f:f7:7c:24:3f:30:ad:e5:69:e3:50:61:e1:86:af:
67:46:88:34:82:b2:a4:1b:f8:ab:9b:1e:9f:64:95:ac:7b:d1:
c1:da:0b:3c:81:3e:d0:22:29:d7:e6:0d:52:12:42:6f:8f:71:
a5:ee:87:5a:92:f5:20:b2:65:75:c1:08:52:f4:fb:c1:2f:b0:
84:c7:b3:7e:6b:30:3a:16:8a:de:73:bb:e5:29:d5:28:c1:de:
84:f6:16:d6:a1:2e:11:17:22:2d:06:36:50:ac:85:d1:b2:91:
0b:74:9e:8b:ca:c2:d2:49:ec:56:d1:d2:a5:81:fc:b3:b7:a2:
a4:34:19:21:8d:da:2b:be:53:e1:cb:c7:92:63:b5:48:ec:93:
a1:fa:70:69
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFKRBpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDQx
MDA4MTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI1ZWZhNDJjM2Nj
MTBhYzVjMWNmN2E5N2ZlOTNkMzczYTNlODE0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJNS9nb7sWviAgFCE/CreF+7oTEmNTj2TxK76OJzFIiie4CA
7aKEB4I/SAS45Wzor66bAuPQGo1v4cz5uMq/Hf9bcREY0Fqa0nS8LP6pELfMAe9u
WcytME94ZgTYGJOZIcQjhZzSIRgSi6oBqM1vWzpHvxeiuT6rjSs7Uo2gb6Du/q9d
vnBHO4yIrbsVGb1+okTzgGBZC8uEX4IAEwrj51GyiKGg+WGo8p1XmUtcV1t3NKp6
ssuUCwO0sqlmTiWZLH1mLnSPwDL0VMrYPm3RvVBNit2LFksLh49uHDC2XC8bvKpg
RbCtteA6YiVnQdCTKTa1AcyG4+x6hVzCeccAoKkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTSXvpCw8wQrFwc96l/6T03Oj6BRzAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
LzBsNzZRc1BNRUt4Y0hQZXBmLWs5TnpvLWdVYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvyUTANBgkqhkiG9w0BAQsFAAOC
AQEAJ95ukMbmsWY4cIoqPsv0Fw/EPRfDoDerIMQQSvDR3OmSB+r1XFIf4PFErwz6
xkce0CjaScgLSlp+RTUJwGbhotf37o+IHZe+koG2plWGzSO0Pi7Jpy/MZgsHeIJa
nK4JBa2jHE9N0lKI1QmhQHuKj/d8JD8wreVp41Bh4YavZ0aINIKypBv4q5sen2SV
rHvRwdoLPIE+0CIp1+YNUhJCb49xpe6HWpL1ILJldcEIUvT7wS+whMezfmswOhaK
3nO75SnVKMHehPYW1qEuERciLQY2UKyF0bKRC3Sei8rC0knsVtHSpYH8s7eipDQZ
IY3aK75T4cvHkmO1SOyTofpwaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org