Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hH33TxLmAF04j7jaRbhsCbMGQnE.roa
File: hH33TxLmAF04j7jaRbhsCbMGQnE.roa (raw, json)
Hash identifier: TRvdY8KzE1e1Q3PRTxS6uButvYZRifVBGkhCPV8FfRY=
Subject key identifier: 84:7D:F7:4F:12:E6:00:5D:38:8F:B8:DA:45:B8:6C:09:B3:06:42:71
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 057AF9DD
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hH33TxLmAF04j7jaRbhsCbMGQnE.roa
Signing time: Sat 01 Jan 2022 02:51:40 +0000
ROA not before: Sat 01 Jan 2022 02:51:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 91.228.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91945437 (0x57af9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 1 02:51:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=847df74f12e6005d388fb8da45b86c09b3064271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:fb:15:e6:87:74:fd:68:d8:1f:0b:11:58:
35:2f:13:19:c3:48:3e:52:f5:57:b1:d5:7a:4a:ed:
d6:f4:4d:18:c5:9c:62:d2:07:92:69:91:96:5b:bf:
43:3c:ae:c3:ff:d7:82:14:d0:03:e5:8e:77:98:ac:
ba:7c:76:b8:24:e1:9d:c3:93:3e:95:16:62:23:2c:
28:15:a6:f6:56:56:c6:92:65:50:b0:bb:e7:2b:a3:
d9:ad:2d:5a:ef:2f:39:de:45:c9:0b:30:47:0a:ac:
8f:d7:f3:40:7c:c4:7a:a1:83:53:32:32:ac:23:57:
1d:51:c9:40:a8:a8:5d:6f:51:8f:ad:58:e7:d2:5c:
03:3f:98:66:b6:15:8f:2d:05:e0:99:e7:21:93:54:
91:77:df:be:d0:37:36:17:8b:8d:a5:cd:d7:f9:1e:
75:af:d3:b6:0e:41:d1:a2:2d:fc:21:cd:77:12:87:
40:ef:d3:35:d9:79:06:f9:cb:67:fd:2e:ba:a8:34:
a8:62:7a:e4:0e:18:71:7f:31:3d:2e:4c:c9:8b:29:
af:04:b7:34:2c:d0:b4:ac:b7:77:76:5c:48:18:a7:
70:c0:a3:c6:78:21:41:02:b1:04:99:b4:26:fc:c4:
f9:93:3f:86:61:df:3e:99:e6:58:12:fe:8a:65:1e:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:F7:4F:12:E6:00:5D:38:8F:B8:DA:45:B8:6C:09:B3:06:42:71
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/hH33TxLmAF04j7jaRbhsCbMGQnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:56:c6:55:55:c6:e8:35:86:4a:ae:49:a4:93:b3:47:49:6b:
d6:f6:5d:43:fa:e9:62:b8:f3:fa:a8:c4:aa:23:24:f4:ec:d5:
ae:44:3a:9c:e5:bb:ee:d1:cd:ff:10:9d:3d:bc:d2:26:ba:b4:
19:bb:ca:78:e5:3a:ea:47:9f:63:67:e4:50:04:0b:32:11:11:
06:c2:9c:b6:e7:16:09:70:64:07:1b:ee:a8:d3:e2:12:e3:b9:
9d:e6:72:4a:a4:94:58:2a:cc:0c:10:3f:3d:2d:f2:0d:10:bc:
b0:7e:e4:57:f5:94:b4:66:9c:40:a6:c8:b3:ac:a4:96:73:fa:
8a:81:fb:51:05:68:02:57:7e:7c:02:b2:03:4d:1f:78:83:ca:
d4:82:09:d6:67:03:68:6f:1c:17:4d:1b:5e:26:6e:01:c7:bc:
fd:aa:34:55:8c:b2:20:ed:6b:29:5e:e7:1e:d5:46:97:0a:4b:
63:35:87:f5:27:4e:b6:20:8a:9e:f4:16:ab:e8:82:84:ed:c8:
58:33:ed:ba:9a:3d:5b:0a:5e:b3:20:2b:1f:43:7b:5b:e7:fa:
2d:73:a0:fb:ac:39:25:db:2b:4e:3a:56:0c:18:7b:3b:aa:e5:
a5:46:9d:e0:4c:28:b5:03:8b:02:2a:3a:17:98:74:e0:b0:f5:
f8:a4:aa:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXr53TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MB4XDTIyMDEw
MTAyNTE0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ3ZGY3NGYxMmU2
MDA1ZDM4OGZiOGRhNDViODZjMDliMzA2NDI3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJe9+xXmh3T9aNgfCxFYNS8TGcNIPlL1V7HVekrt1vRNGMWc
YtIHkmmRllu/Qzyuw//XghTQA+WOd5isunx2uCThncOTPpUWYiMsKBWm9lZWxpJl
ULC75yuj2a0tWu8vOd5FyQswRwqsj9fzQHzEeqGDUzIyrCNXHVHJQKioXW9Rj61Y
59JcAz+YZrYVjy0F4JnnIZNUkXffvtA3NheLjaXN1/keda/Ttg5B0aIt/CHNdxKH
QO/TNdl5BvnLZ/0uuqg0qGJ65A4YcX8xPS5MyYsprwS3NCzQtKy3d3ZcSBincMCj
xnghQQKxBJm0JvzE+ZM/hmHfPpnmWBL+imUekQ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSEffdPEuYAXTiPuNpFuGwJswZCcTAfBgNVHSMEGDAWgBTnzziEt4AHol2+
LizvDMc7aZIfiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8x
L2hIMzNUeExtQUYwNGo3amFSYmhzQ2JNR1FuRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZK
ZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvkDjANBgkqhkiG9w0BAQsFAAOC
AQEADVbGVVXG6DWGSq5JpJOzR0lr1vZdQ/rpYrjz+qjEqiMk9OzVrkQ6nOW77tHN
/xCdPbzSJrq0GbvKeOU66kefY2fkUAQLMhERBsKctucWCXBkBxvuqNPiEuO5neZy
SqSUWCrMDBA/PS3yDRC8sH7kV/WUtGacQKbIs6yklnP6ioH7UQVoAld+fAKyA00f
eIPK1IIJ1mcDaG8cF00bXiZuAce8/ao0VYyyIO1rKV7nHtVGlwpLYzWH9SdOtiCK
nvQWq+iChO3IWDPtupo9WwpesyArH0N7W+f6LXOg+6w5JdsrTjpWDBh7O6rlpUad
4EwotQOLAio6F5h04LD1+KSqHw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org