Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oaXoHloD-AHobxaTxWD-TomojvY.roa
File: oaXoHloD-AHobxaTxWD-TomojvY.roa (raw, json)
Hash identifier: CjYJC5K5SpKXQ5y3/BABp1GhfdVgtY2G83kfHku3vNA=
Subject key identifier: A1:A5:E8:1E:5A:03:F8:01:E8:6F:16:93:C5:60:FE:4E:89:A8:8E:F6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0182D08201EB217148A1259BF39B5D8FD80B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oaXoHloD-AHobxaTxWD-TomojvY.roa
Signing time: Wed 24 Aug 2022 15:39:17 +0000
ROA not before: Wed 24 Aug 2022 15:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 91.245.90.0/23 maxlen: 23
176.103.121.0/24 maxlen: 24
64.43.75.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:82:01:eb:21:71:48:a1:25:9b:f3:9b:5d:8f:d8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 24 15:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a5e81e5a03f801e86f1693c560fe4e89a88ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:d5:c5:bd:b6:4b:bc:4f:36:66:a2:fc:c2:
9a:09:2e:43:9c:aa:a8:0b:0a:43:5a:b8:03:9a:1f:
55:f5:31:b1:8e:6d:18:26:16:2e:8d:92:44:14:75:
1c:f2:2c:9e:9d:1f:01:1a:3f:46:48:4a:ac:5a:ee:
33:11:96:1b:55:e7:22:6c:45:2a:a2:a9:d4:9c:dd:
e6:19:ed:e2:5d:7b:b6:8d:09:82:6a:5e:56:17:5b:
ec:24:0a:b1:8e:82:92:1c:57:32:3b:82:9a:fd:3f:
57:88:26:3c:53:88:1c:cc:c0:ed:ad:f0:71:b4:8c:
cf:52:0d:87:c2:5a:1c:5c:e2:12:17:61:f4:90:42:
97:3a:18:33:5a:e0:51:67:7c:3b:32:2b:25:bb:fc:
e9:64:41:74:e5:4c:82:a2:85:2b:a5:ed:dd:0f:67:
eb:0e:42:48:9b:f1:bf:93:c1:45:13:29:56:33:8b:
de:74:34:01:43:e5:4d:ed:5c:d7:64:9c:d0:0b:69:
69:32:61:62:63:df:f9:c5:22:96:51:e4:7c:9b:6c:
a6:3b:8a:14:38:54:22:13:ad:4a:b5:79:37:2b:bb:
9d:55:0a:22:30:93:f4:fb:2d:84:dd:75:82:85:d9:
30:b9:8d:84:b4:fc:17:b7:58:a6:d1:e7:b7:5a:e2:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:E8:1E:5A:03:F8:01:E8:6F:16:93:C5:60:FE:4E:89:A8:8E:F6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oaXoHloD-AHobxaTxWD-TomojvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.75.0/24
91.234.120.0/23
91.245.90.0/23
176.103.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:72:1c:30:5d:db:56:eb:f3:af:e5:39:81:9f:b3:3f:b5:c9:
e4:92:7e:f8:51:88:67:14:fc:d0:1b:37:d2:a4:64:97:31:a8:
5a:11:09:4e:a6:8a:77:24:19:64:e7:b0:50:bf:6d:a5:22:6c:
75:88:3c:f4:d6:2e:48:01:cf:85:14:0f:a9:54:75:49:80:d4:
48:b0:fd:8b:59:36:ea:b0:d0:1b:2e:fe:d6:16:6d:c2:aa:45:
df:ef:01:e7:ed:56:47:b5:79:38:be:50:a0:bd:4a:15:cf:39:
30:c6:8f:44:d5:90:d0:23:01:16:6e:d2:b8:9a:a3:3a:9c:5a:
86:8f:9d:27:79:a1:0e:d0:24:f9:49:7e:80:9e:69:50:56:95:
22:3b:48:d4:00:1a:e1:4e:5a:c2:ad:81:04:27:e3:57:64:7d:
74:ef:2f:0f:09:40:1f:41:03:4a:eb:3c:92:fb:c5:a4:14:69:
11:a8:91:27:a0:eb:63:30:d2:a9:a3:f1:84:92:48:25:a0:23:
ec:6b:32:71:dc:f3:68:b5:e3:80:89:a0:a1:ea:a7:e8:95:4b:
3a:15:77:88:2f:fb:4e:ea:a7:0d:d1:a7:7f:b9:3e:36:de:8b:
1b:ca:81:76:44:3c:fc:7a:d9:93:85:60:fc:2e:03:6f:d9:bf:
59:a7:91:fb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLQggHrIXFIoSWb85tdj9gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjIwODI0MTUzOTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE1ZTgxZTVhMDNmODAxZTg2ZjE2OTNjNTYwZmU0ZTg5YTg4ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzvVxb22S7xPNmai/MKaCS5DnKqo
CwpDWrgDmh9V9TGxjm0YJhYujZJEFHUc8iyenR8BGj9GSEqsWu4zEZYbVecibEUq
oqnUnN3mGe3iXXu2jQmCal5WF1vsJAqxjoKSHFcyO4Ka/T9XiCY8U4gczMDtrfBx
tIzPUg2HwlocXOISF2H0kEKXOhgzWuBRZ3w7Mislu/zpZEF05UyCooUrpe3dD2fr
DkJIm/G/k8FFEylWM4vedDQBQ+VN7VzXZJzQC2lpMmFiY9/5xSKWUeR8m2ymO4oU
OFQiE61KtXk3K7udVQoiMJP0+y2E3XWChdkwuY2EtPwXt1im0ee3WuLvRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKGl6B5aA/gB6G8Wk8Vg/k6JqI72MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvb2FYb0hsb0QtQUhvYnhhVHhXRC1Ub21vanZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQCtLAwQB
W+p4AwQBW/VaAwQAsGd5MA0GCSqGSIb3DQEBCwUAA4IBAQCjchwwXdtW6/Ov5TmB
n7M/tcnkkn74UYhnFPzQGzfSpGSXMahaEQlOpop3JBlk57BQv22lImx1iDz01i5I
Ac+FFA+pVHVJgNRIsP2LWTbqsNAbLv7WFm3CqkXf7wHn7VZHtXk4vlCgvUoVzzkw
xo9E1ZDQIwEWbtK4mqM6nFqGj50neaEO0CT5SX6AnmlQVpUiO0jUABrhTlrCrYEE
J+NXZH107y8PCUAfQQNK6zyS+8WkFGkRqJEnoOtjMNKpo/GEkkgloCPsazJx3PNo
teOAiaCh6qfolUs6FXeIL/tO6qcN0ad/uT423osbyoF2RDz8etmThWD8LgNv2b9Z
p5H7
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org