Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L-FBKyRfU-ugf_tkyu6UFS9zqqI.roa
File: L-FBKyRfU-ugf_tkyu6UFS9zqqI.roa (raw, json)
Hash identifier: gPidqx7iCJkuMPQ1zl2gQW8v4JZCioK42WhUA3poSag=
Subject key identifier: 2F:E1:41:2B:24:5F:53:EB:A0:7F:FB:64:CA:EE:94:15:2F:73:AA:A2
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05C88F5C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L-FBKyRfU-ugf_tkyu6UFS9zqqI.roa
Signing time: Tue 01 Feb 2022 12:11:33 +0000
ROA not before: Tue 01 Feb 2022 12:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97029980 (0x5c88f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 1 12:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe1412b245f53eba07ffb64caee94152f73aaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:8b:99:61:b5:92:c1:2e:6a:e4:ab:a6:e3:
9f:e6:d2:6e:be:5d:8c:d9:a5:28:6c:d1:4e:a3:a4:
44:a0:e9:83:41:84:ca:36:84:07:ad:a5:5a:76:ca:
b0:0f:76:a9:f2:cf:69:c7:39:45:17:12:15:70:18:
3c:e8:03:99:1b:ac:0e:2c:85:4d:4b:3a:73:8f:f6:
fc:99:de:ea:d1:3c:8a:3f:58:7a:b9:77:33:34:4d:
de:74:fc:5e:b7:da:2f:5e:13:ff:0f:ed:30:5a:1c:
60:00:cf:1b:fb:f2:31:f9:f3:62:e3:d8:c1:b4:bf:
96:2b:34:43:c8:8e:f6:a5:c1:1f:b0:42:9e:02:6e:
bf:5c:f7:b1:2c:72:dd:b6:08:84:8a:13:e7:e0:68:
64:3a:0d:c9:25:66:ea:6b:3a:b2:18:20:83:18:10:
0c:26:36:2d:e9:e0:f4:5a:41:53:49:b0:04:d3:4b:
a4:48:8c:36:fe:f1:76:fa:fb:ac:0d:3d:18:53:d1:
16:38:53:76:c5:66:a8:a9:65:b8:80:fb:8d:32:5f:
86:2a:f6:d4:ef:ce:9e:47:3f:5b:cd:83:a5:54:c5:
03:ff:4a:60:34:8b:25:e9:63:ca:40:00:43:7e:c8:
42:54:d8:db:5a:54:36:9f:fc:36:d8:8a:b3:ad:13:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:41:2B:24:5F:53:EB:A0:7F:FB:64:CA:EE:94:15:2F:73:AA:A2
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L-FBKyRfU-ugf_tkyu6UFS9zqqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:be:a8:58:c9:00:5c:2a:98:2b:e7:e3:05:e2:92:df:ee:e1:
0d:20:ef:f4:1a:e0:15:a2:38:7a:ef:48:25:21:6c:d8:87:e6:
5d:e8:95:ef:a2:87:34:4d:fe:a2:19:f7:1a:f9:46:8c:a9:94:
23:5e:b1:6c:36:b3:ba:96:5c:55:86:31:f6:94:2e:84:4d:54:
cd:4d:4b:be:fe:d5:6d:af:7e:9d:10:2d:3c:6b:d2:38:21:d8:
51:b4:25:ec:8a:ec:cb:f1:e4:81:28:be:70:f9:3d:95:05:b1:
38:03:f3:32:ff:6c:29:b0:d2:e5:76:8a:4d:91:36:75:e3:df:
4a:2e:e5:bf:4d:11:a5:11:59:c2:47:29:fe:54:30:a4:43:36:
0a:d4:a1:4f:9c:ba:86:56:df:0b:9c:bc:38:b4:86:e4:fe:e4:
21:e8:2d:99:f7:c1:5a:bb:75:4c:42:b4:a3:15:01:cf:a9:d4:
05:8e:4f:d0:ad:95:cf:e5:1a:cd:9f:2b:39:d8:81:ca:86:f0:
b9:56:44:5b:00:81:9b:12:cb:55:3f:12:78:b2:9e:1d:a5:d6:
4e:a6:de:f7:13:f4:c3:24:ec:3b:b9:f4:93:bc:34:1a:8d:0d:
81:ce:50:d8:be:4a:d5:2b:90:10:f5:14:2a:b6:53:a0:ca:15:
f4:e4:86:2a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBciPXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MB4XDTIyMDIw
MTEyMTEzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZlMTQxMmIyNDVm
NTNlYmEwN2ZmYjY0Y2FlZTk0MTUyZjczYWFhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbNi5lhtZLBLmrkq6bjn+bSbr5djNmlKGzRTqOkRKDpg0GE
yjaEB62lWnbKsA92qfLPacc5RRcSFXAYPOgDmRusDiyFTUs6c4/2/Jne6tE8ij9Y
erl3MzRN3nT8XrfaL14T/w/tMFocYADPG/vyMfnzYuPYwbS/lis0Q8iO9qXBH7BC
ngJuv1z3sSxy3bYIhIoT5+BoZDoNySVm6ms6shgggxgQDCY2Leng9FpBU0mwBNNL
pEiMNv7xdvr7rA09GFPRFjhTdsVmqKlluID7jTJfhir21O/Onkc/W82DpVTFA/9K
YDSLJeljykAAQ37IQlTY21pUNp/8NtiKs60TI1UCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQv4UErJF9T66B/+2TK7pQVL3OqojAfBgNVHSMEGDAWgBTnzziEt4AHol2+
LizvDMc7aZIfiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8x
L0wtRkJLeVJmVS11Z2ZfdGt5dTZVRlM5enFxSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZK
ZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvkDAMEAVvkDjANBgkqhkiG9w0B
AQsFAAOCAQEAoL6oWMkAXCqYK+fjBeKS3+7hDSDv9BrgFaI4eu9IJSFs2IfmXeiV
76KHNE3+ohn3GvlGjKmUI16xbDazupZcVYYx9pQuhE1UzU1Lvv7Vba9+nRAtPGvS
OCHYUbQl7Irsy/HkgSi+cPk9lQWxOAPzMv9sKbDS5XaKTZE2dePfSi7lv00RpRFZ
wkcp/lQwpEM2CtShT5y6hlbfC5y8OLSG5P7kIegtmffBWrt1TEK0oxUBz6nUBY5P
0K2Vz+UazZ8rOdiByobwuVZEWwCBmxLLVT8SeLKeHaXWTqbe9xP0wyTsO7n0k7w0
Go0Ngc5Q2L5K1SuQEPUUKrZToMoV9OSGKg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org