Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/49kpoM_M2e9iRre80o6UyV4Gkgk.roa
File: 49kpoM_M2e9iRre80o6UyV4Gkgk.roa (raw, json)
Hash identifier: w2HYw2dZKnxAZ0EijtcOuk4Mpz1QPSc5AYLpm1nLGjE=
Subject key identifier: E3:D9:29:A0:CF:CC:D9:EF:62:46:B7:BC:D2:8E:94:C9:5E:06:92:09
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05D07A91
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/49kpoM_M2e9iRre80o6UyV4Gkgk.roa
Signing time: Fri 04 Feb 2022 09:53:37 +0000
ROA not before: Fri 04 Feb 2022 09:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97548945 (0x5d07a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 4 09:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d929a0cfccd9ef6246b7bcd28e94c95e069209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:7e:90:3d:37:f3:f2:7d:39:57:e7:52:ae:
58:4b:ef:28:5c:b8:17:0d:f7:d8:23:66:4b:89:d9:
cd:13:5b:ff:a8:22:ef:f4:a7:c6:b5:dd:16:32:5c:
40:95:7e:5b:60:1c:77:0d:74:21:0b:dd:67:ed:4d:
7a:60:b4:37:86:4d:d8:b8:38:8b:67:46:7e:7e:63:
38:24:18:a3:4c:8e:1f:1a:74:9c:d9:a9:3a:ed:1b:
95:1b:3d:83:de:cf:a2:b7:6d:3d:93:a5:27:77:8e:
2f:49:e7:50:ca:85:90:c3:8a:97:5f:6d:2e:0a:59:
93:ab:d4:5c:0f:b9:da:60:9f:0f:17:20:c7:72:88:
56:8d:aa:3b:a3:40:14:76:8f:16:2f:8b:78:07:4b:
bc:48:30:ad:5a:1b:36:69:12:bb:e7:ef:82:19:79:
4c:93:60:5f:73:d9:a2:b4:5d:96:e1:1a:e9:b2:f6:
ba:58:92:4b:10:66:de:19:be:d1:9c:f4:37:25:5c:
65:76:81:d9:77:5f:25:5a:46:99:5f:ca:78:9c:15:
25:19:82:71:46:ec:21:c6:96:51:43:c3:c0:18:6c:
6a:1c:6c:4b:a3:f8:5b:31:0c:17:d8:5e:74:ef:26:
aa:e7:a1:1e:86:c2:d6:8d:b7:37:46:10:63:b8:70:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:29:A0:CF:CC:D9:EF:62:46:B7:BC:D2:8E:94:C9:5E:06:92:09
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/49kpoM_M2e9iRre80o6UyV4Gkgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e6:86:d0:bd:5b:26:97:54:05:e6:da:41:8b:44:d0:b3:60:
b8:35:40:b8:73:a1:99:50:9d:60:d4:e5:6e:99:aa:1f:04:f7:
f7:b6:ab:bf:cd:8e:9d:02:de:af:e5:41:fe:1c:72:ba:5d:57:
51:bf:09:32:ce:ac:3b:ee:b5:87:74:02:35:6b:73:d3:73:64:
34:64:95:c9:2a:1e:64:09:b6:27:43:a8:0e:cb:28:37:8a:c3:
5f:b8:b2:ac:06:05:4f:7d:61:c6:9b:e2:fe:3e:38:8e:4e:05:
0d:91:f5:3b:ef:1b:bc:d0:dd:3c:67:8e:d1:16:b3:53:4a:69:
c5:c9:55:50:ec:e2:eb:c2:fd:88:d2:6e:27:41:61:bc:4a:ce:
e1:68:6f:c2:48:06:e6:a6:57:09:88:79:88:08:23:ac:6f:78:
53:6a:22:1a:2f:d6:e8:7d:f9:22:d1:87:c6:96:9f:a4:36:ef:
03:7c:85:ef:49:5a:21:2c:84:a4:22:29:8b:44:a5:15:23:d0:
c4:60:7f:fa:e4:9b:81:11:48:bb:ab:02:af:9c:47:b8:d7:ba:
a7:c5:7d:09:24:82:8e:56:a6:b3:33:ee:f9:07:9f:bb:52:0e:
28:29:92:6e:11:c3:d2:e3:e8:47:10:cd:8c:1a:4e:46:9b:f8:
eb:be:f9:80
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBdB6kTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MB4XDTIyMDIw
NDA5NTMzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNkOTI5YTBjZmNj
ZDllZjYyNDZiN2JjZDI4ZTk0Yzk1ZTA2OTIwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8nfpA9N/PyfTlX51KuWEvvKFy4Fw332CNmS4nZzRNb/6gi
7/SnxrXdFjJcQJV+W2Acdw10IQvdZ+1NemC0N4ZN2Lg4i2dGfn5jOCQYo0yOHxp0
nNmpOu0blRs9g97PordtPZOlJ3eOL0nnUMqFkMOKl19tLgpZk6vUXA+52mCfDxcg
x3KIVo2qO6NAFHaPFi+LeAdLvEgwrVobNmkSu+fvghl5TJNgX3PZorRdluEa6bL2
uliSSxBm3hm+0Zz0NyVcZXaB2XdfJVpGmV/KeJwVJRmCcUbsIcaWUUPDwBhsahxs
S6P4WzEMF9hedO8mquehHobC1o23N0YQY7hwansCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTj2Smgz8zZ72JGt7zSjpTJXgaSCTAfBgNVHSMEGDAWgBTnzziEt4AHol2+
LizvDMc7aZIfiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8x
LzQ5a3BvTV9NMmU5aVJyZTgwbzZVeVY0R2tnay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZK
ZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvkDAMEAF6aJDANBgkqhkiG9w0B
AQsFAAOCAQEAM+aG0L1bJpdUBebaQYtE0LNguDVAuHOhmVCdYNTlbpmqHwT397ar
v82OnQLer+VB/hxyul1XUb8JMs6sO+61h3QCNWtz03NkNGSVySoeZAm2J0OoDsso
N4rDX7iyrAYFT31hxpvi/j44jk4FDZH1O+8bvNDdPGeO0RazU0ppxclVUOzi68L9
iNJuJ0FhvErO4WhvwkgG5qZXCYh5iAgjrG94U2oiGi/W6H35ItGHxpafpDbvA3yF
70laISyEpCIpi0SlFSPQxGB/+uSbgRFIu6sCr5xHuNe6p8V9CSSCjlamszPu+Qef
u1IOKCmSbhHD0uPoRxDNjBpORpv46775gA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org