Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/enu_8k1FbnNu7wROKAY0mQ34yw4.roa
File: enu_8k1FbnNu7wROKAY0mQ34yw4.roa (raw, json)
Hash identifier: YM6amMVi0Q1tFYFmhnFHHe7j3uHIIV/4TfyDlNGIme8=
Subject key identifier: 7A:7B:BF:F2:4D:45:6E:73:6E:EF:04:4E:28:06:34:99:0D:F8:CB:0E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0184CDBA78EDB5D940DED020876027CAD174
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/enu_8k1FbnNu7wROKAY0mQ34yw4.roa
Signing time: Thu 01 Dec 2022 12:47:40 +0000
ROA not before: Thu 01 Dec 2022 12:47:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 91.228.14.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:ba:78:ed:b5:d9:40:de:d0:20:87:60:27:ca:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Dec 1 12:47:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a7bbff24d456e736eef044e280634990df8cb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:65:dd:06:21:11:a2:31:ce:3c:03:c9:5f:
4a:5d:9b:d3:d8:a0:18:06:c0:44:2d:18:7c:57:1c:
c3:3a:b9:5a:60:14:b0:56:4b:13:e1:a7:ff:17:71:
72:6c:c1:38:21:07:41:69:67:fa:3a:d7:7d:9e:78:
cd:d3:43:da:68:4d:78:24:ae:56:77:8b:40:75:16:
29:7c:70:f4:5a:dd:50:ed:7b:53:56:c0:db:04:8d:
04:b2:9f:63:37:b8:78:40:73:55:54:ab:1a:62:22:
e5:40:b1:d1:da:0c:ef:b7:97:a6:9e:2f:4e:9b:ef:
83:f3:d9:37:01:4c:dd:33:7f:a1:b4:70:fb:57:e6:
6c:1a:03:aa:9b:b9:cb:89:3b:fa:68:a3:27:57:c5:
62:3c:db:1b:d9:c9:59:5c:7e:1a:4c:b3:2b:f8:5a:
65:d2:66:a2:8d:24:71:5a:04:c7:13:9b:0c:c3:28:
bd:54:7c:e4:b1:77:6c:81:47:c9:dc:8d:6f:f4:47:
38:a3:a5:86:d8:51:db:c6:b0:ca:86:6f:4f:10:77:
9f:b1:8d:aa:d5:e6:1f:a7:98:e2:ce:72:e0:20:49:
68:a5:61:30:18:3f:6f:1f:27:30:f7:48:6d:1c:44:
ff:82:a2:b7:fe:44:3e:59:34:d8:8e:70:90:70:9a:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:BF:F2:4D:45:6E:73:6E:EF:04:4E:28:06:34:99:0D:F8:CB:0E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/enu_8k1FbnNu7wROKAY0mQ34yw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ad:73:8f:4b:e8:7d:85:c0:1f:68:c9:5b:8e:c3:88:98:e6:
5f:45:75:ee:8f:a2:db:95:9d:20:11:99:98:84:85:19:fd:b3:
8d:8f:48:97:e0:fb:31:95:65:53:65:a8:70:4b:60:89:78:ed:
f1:e0:53:50:12:d7:77:04:36:3e:80:66:97:f7:aa:be:91:35:
c4:26:42:8c:71:a1:6c:73:72:9e:bc:a7:f1:5b:eb:b2:ba:2e:
35:4a:5c:e4:28:af:c4:18:4f:fd:18:25:f9:46:1c:a7:d4:53:
00:02:f1:91:98:f7:3f:4f:07:fe:34:65:16:e7:04:27:de:1a:
5f:65:a3:e5:aa:50:86:c6:14:e5:ef:cd:8f:57:bd:45:07:40:
83:c7:e4:db:ab:5d:3b:9d:fd:2d:2b:e4:71:be:06:6b:08:d2:
57:c2:97:6d:d3:97:13:1e:50:05:f5:0e:5d:da:ae:ca:94:14:
73:de:fd:79:ac:8f:cc:21:b2:b8:e9:ac:4c:9b:f1:0a:71:fc:
67:ef:b7:d5:5b:bf:30:5f:92:a7:0e:f2:98:7b:61:65:fb:e3:
b4:81:38:18:ee:72:2b:33:45:0b:a4:51:88:77:5a:5f:eb:b9:
be:e9:07:79:d9:2d:a3:44:fe:54:4c:61:09:59:fb:6e:69:af:
60:2a:00:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTNunjttdlA3tAgh2AnytF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjIxMjAxMTI0NzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdiYmZmMjRkNDU2ZTczNmVlZjA0NGUyODA2MzQ5OTBkZjhjYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqRl3QYhEaIxzjwDyV9KXZvT2KAY
BsBELRh8VxzDOrlaYBSwVksT4af/F3FybME4IQdBaWf6Otd9nnjN00PaaE14JK5W
d4tAdRYpfHD0Wt1Q7XtTVsDbBI0Esp9jN7h4QHNVVKsaYiLlQLHR2gzvt5emni9O
m++D89k3AUzdM3+htHD7V+ZsGgOqm7nLiTv6aKMnV8ViPNsb2clZXH4aTLMr+Fpl
0maijSRxWgTHE5sMwyi9VHzksXdsgUfJ3I1v9Ec4o6WG2FHbxrDKhm9PEHefsY2q
1eYfp5jiznLgIElopWEwGD9vHycw90htHET/gqK3/kQ+WTTYjnCQcJoNUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHp7v/JNRW5zbu8ETigGNJkN+MsOMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvZW51XzhrMUZibk51N3dST0tBWTBtUTM0eXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+QOAwQA
XpolMA0GCSqGSIb3DQEBCwUAA4IBAQCgrXOPS+h9hcAfaMlbjsOImOZfRXXuj6Lb
lZ0gEZmYhIUZ/bONj0iX4PsxlWVTZahwS2CJeO3x4FNQEtd3BDY+gGaX96q+kTXE
JkKMcaFsc3KevKfxW+uyui41SlzkKK/EGE/9GCX5Rhyn1FMAAvGRmPc/Twf+NGUW
5wQn3hpfZaPlqlCGxhTl782PV71FB0CDx+Tbq107nf0tK+RxvgZrCNJXwpdt05cT
HlAF9Q5d2q7KlBRz3v15rI/MIbK46axMm/EKcfxn77fVW78wX5KnDvKYe2Fl++O0
gTgY7nIrM0ULpFGId1pf67m+6Qd52S2jRP5UTGEJWftuaa9gKgCw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org