Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K7xHqggFqHtwmAYB6SJE1AuAJ8o.roa
File: K7xHqggFqHtwmAYB6SJE1AuAJ8o.roa (raw, json)
Hash identifier: 40qnUac2IxP1FW4vD8mMTOw5GsIhXPjUDPc31+sh8dg=
Subject key identifier: 2B:BC:47:AA:08:05:A8:7B:70:98:06:01:E9:22:44:D4:0B:80:27:CA
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14F4567D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K7xHqggFqHtwmAYB6SJE1AuAJ8o.roa
Signing time: Wed 04 May 2022 08:23:05 +0000
ROA not before: Wed 04 May 2022 08:23:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43094
IP address blocks: 91.242.84.0/23 maxlen: 23
91.242.104.0/21 maxlen: 21
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
91.242.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351557245 (0x14f4567d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 4 08:23:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bbc47aa0805a87b70980601e92244d40b8027ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:04:52:8d:b0:27:e3:95:cf:1d:46:33:90:
b1:39:90:6c:a9:5a:fe:5a:a3:47:93:a6:13:36:a9:
f3:2b:7b:5a:4b:45:54:9d:3d:4c:e6:5c:03:6e:e6:
83:a7:a2:65:42:68:7c:f9:d9:5c:20:f4:d6:18:ac:
f6:33:ea:68:4f:4c:67:71:a7:b1:54:94:32:9b:1a:
97:8e:a0:25:d4:d5:3b:e3:31:3d:a4:3b:a2:e8:ce:
e2:99:ff:5f:30:30:42:eb:69:c5:87:f8:a7:7f:d6:
9c:64:9d:fb:c1:02:d8:30:c4:14:be:3d:38:ec:f4:
2e:b5:a6:4e:a0:b6:ae:66:ec:11:69:68:05:1c:74:
12:4f:05:ba:8f:e0:39:e6:5c:77:f6:f9:91:21:90:
5d:f4:ca:9a:60:20:31:e0:78:d0:3b:60:1f:88:7e:
a3:62:48:92:5a:2e:19:6a:93:9e:b1:90:73:e1:55:
80:df:3b:4a:2e:e1:aa:b5:4f:63:f4:af:a2:d9:8c:
d2:b9:88:5e:ac:17:57:e6:e1:3f:99:4b:b9:0e:89:
88:4d:3b:12:d3:d3:6f:2a:2a:e7:46:9e:6e:11:52:
45:ac:ea:c6:f2:69:0c:e9:55:cf:14:b8:c6:50:9f:
6f:43:52:38:d1:1c:43:2b:88:15:02:0d:35:4c:9e:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:47:AA:08:05:A8:7B:70:98:06:01:E9:22:44:D4:0B:80:27:CA
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/K7xHqggFqHtwmAYB6SJE1AuAJ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.78.0/23
91.242.84.0/23
91.242.104.0-91.242.127.255
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:3a:20:69:d9:f0:86:00:d1:de:15:1c:f0:30:d4:34:ee:
96:a4:a3:60:fc:dd:2e:5d:86:9e:7e:3d:72:09:18:68:03:76:
3a:26:41:95:8f:1c:a9:df:33:40:38:28:ef:05:0b:13:1f:fe:
d5:ca:78:6c:20:f9:62:1d:4e:95:69:34:b5:5b:e9:3a:f1:68:
e9:cb:2f:a8:54:81:b6:87:50:9d:13:ac:67:0f:c6:6b:d1:9f:
dc:c5:5e:20:74:19:9a:f5:24:e9:92:50:3f:00:ed:dd:ec:b9:
08:8b:eb:92:17:3f:df:e6:12:67:db:46:3f:96:84:dd:0a:42:
e5:7e:e0:65:5c:c3:07:92:cd:08:8f:03:f5:62:4f:6d:95:31:
a2:65:00:83:e9:6d:9a:cc:d7:d7:b9:99:c0:05:36:66:14:4a:
c2:28:bf:50:f1:87:40:87:b3:57:ec:7b:3d:e3:83:53:f8:b2:
16:ac:1c:58:f6:96:97:58:28:30:bf:31:ff:08:3e:cb:ce:b5:
9f:d7:a7:6a:75:9d:ea:46:dd:80:60:a8:43:26:94:16:d7:d0:
21:10:3e:41:e1:a3:72:98:f8:95:57:0e:03:0c:50:bd:15:92:
3a:ff:aa:8a:62:83:42:e8:8b:6c:fe:af:a9:a4:bf:7d:05:c4:
ee:43:c4:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEFPRWfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDUw
NDA4MjMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmJiYzQ3YWEwODA1
YTg3YjcwOTgwNjAxZTkyMjQ0ZDQwYjgwMjdjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMOBFKNsCfjlc8dRjOQsTmQbKla/lqjR5OmEzap8yt7WktF
VJ09TOZcA27mg6eiZUJofPnZXCD01his9jPqaE9MZ3GnsVSUMpsal46gJdTVO+Mx
PaQ7oujO4pn/XzAwQutpxYf4p3/WnGSd+8EC2DDEFL49OOz0LrWmTqC2rmbsEWlo
BRx0Ek8Fuo/gOeZcd/b5kSGQXfTKmmAgMeB40DtgH4h+o2JIklouGWqTnrGQc+FV
gN87Si7hqrVPY/SvotmM0rmIXqwXV+bhP5lLuQ6JiE07EtPTbyoq50aebhFSRazq
xvJpDOlVzxS4xlCfb0NSONEcQyuIFQINNUyeO+MCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBQrvEeqCAWoe3CYBgHpIkTUC4AnyjAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L0s3eEhxZ2dGcUh0d21BWUI2U0pFMUF1QUo4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAVvyTgMEAVvyVDAMAwQDW/JoAwQH
W/IAAwQAwnKQMA0GCSqGSIb3DQEBCwUAA4IBAQCgOjogadnwhgDR3hUc8DDUNO6W
pKNg/N0uXYaefj1yCRhoA3Y6JkGVjxyp3zNAOCjvBQsTH/7VynhsIPliHU6VaTS1
W+k68Wjpyy+oVIG2h1CdE6xnD8Zr0Z/cxV4gdBma9STpklA/AO3d7LkIi+uSFz/f
5hJn20Y/loTdCkLlfuBlXMMHks0IjwP1Yk9tlTGiZQCD6W2azNfXuZnABTZmFErC
KL9Q8YdAh7NX7Hs944NT+LIWrBxY9paXWCgwvzH/CD7LzrWf16dqdZ3qRt2AYKhD
JpQW19AhED5B4aNymPiVVw4DDFC9FZI6/6qKYoNC6Its/q+ppL99BcTuQ8Tn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org