Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/iLgLWpVXzjye_41JSE6n0r8ezPs.roa
File: iLgLWpVXzjye_41JSE6n0r8ezPs.roa (raw, json)
Hash identifier: tktjhfflboPDIG9Enf+7ap2LWKM5L6oaaDOzBH6zRzE=
Subject key identifier: 88:B8:0B:5A:95:57:CE:3C:9E:FF:8D:49:48:4E:A7:D2:BF:1E:CC:FB
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 018873EA40FD6A647608F035E40645A8AD05
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/iLgLWpVXzjye_41JSE6n0r8ezPs.roa
Signing time: Wed 31 May 2023 22:25:11 +0000
ROA not before: Wed 31 May 2023 22:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203190
IP address blocks: 91.216.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:ea:40:fd:6a:64:76:08:f0:35:e4:06:45:a8:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: May 31 22:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b80b5a9557ce3c9eff8d49484ea7d2bf1eccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:a8:48:7f:c2:ea:f4:2f:34:86:50:a2:bb:
1d:7d:2e:59:8d:e6:98:98:d1:25:6f:ae:1f:e9:66:
e1:ed:07:ed:96:49:78:68:e7:71:7f:80:58:cf:56:
b8:d1:ce:c2:94:1b:a9:d6:2a:ae:86:bf:84:00:90:
c3:35:c8:dc:05:90:fe:67:c2:90:2f:cd:93:08:d0:
db:08:d2:ea:b5:c7:9a:79:23:c7:0f:37:c9:3b:6d:
3e:77:26:75:f5:20:4b:13:5c:93:43:9a:a9:b4:98:
85:c8:62:e2:eb:82:5d:e8:94:3b:26:3a:33:fe:9e:
95:31:73:fa:5a:19:c0:aa:c4:e4:cf:9b:f0:fe:83:
48:3c:3c:d2:14:82:66:8c:00:a4:8a:1a:54:dd:64:
fb:0e:3c:e7:a0:da:b2:39:08:5a:70:fe:93:69:71:
b1:83:43:74:d0:cd:4d:14:8a:00:f7:18:10:39:e4:
c7:27:c9:80:bf:e9:1c:df:c3:17:73:63:11:94:6b:
f8:45:7d:4f:d1:d6:b4:10:2a:3a:6a:e4:cb:e1:ba:
b4:16:f1:8b:c1:a1:40:f9:b7:e7:b4:a0:c4:67:f7:
3f:77:7e:06:b7:c8:86:bf:6a:29:47:0b:be:65:2e:
30:a9:73:40:da:19:54:09:51:fa:e5:88:4d:e5:ad:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:0B:5A:95:57:CE:3C:9E:FF:8D:49:48:4E:A7:D2:BF:1E:CC:FB
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/iLgLWpVXzjye_41JSE6n0r8ezPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.3.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6f:28:8c:42:24:5f:80:c5:91:cd:82:74:a7:f7:50:82:b8:
c0:e9:52:52:7c:20:13:33:fc:ab:2b:e4:dc:34:0b:fb:69:ae:
6e:47:15:91:8c:2f:c0:3f:84:fe:d6:c4:ab:67:61:cc:60:6f:
ca:f8:0d:48:87:08:d9:fd:a6:39:0b:ae:d7:73:c9:22:08:26:
d1:24:aa:48:bc:7a:c8:14:de:3e:6f:06:94:aa:b7:95:05:52:
3a:1d:38:93:2b:f9:9e:e7:2f:b2:25:03:21:92:b8:a0:8b:c0:
38:3b:16:a6:73:ce:59:e7:75:e0:c3:2e:ba:3a:79:57:28:29:
60:6b:6a:fd:a9:6e:47:cb:eb:00:41:29:b6:0e:b0:e9:a2:17:
2c:57:7e:7e:cc:d0:14:0c:0e:4b:85:65:ba:da:14:6a:42:00:
08:0d:0d:7f:30:a5:1d:4a:50:9a:9b:95:42:95:92:0c:b5:db:
78:65:14:15:d2:80:64:41:04:b1:ce:84:19:fe:f3:e9:5b:fe:
3b:9b:fa:e4:42:2f:26:c9:4e:e4:6c:56:22:1b:54:a4:1b:35:
90:a0:ce:7f:fb:1e:07:b7:cd:ff:b5:7b:f6:7c:f1:ec:cf:2b:
1b:f7:d2:a9:fd:cb:89:77:99:c1:3f:8e:d8:65:79:a3:4a:ef:
08:fa:68:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhz6kD9amR2CPA15AZFqK0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NGExNzkxY2IwN2YxZDg2MTIzYzYzZGMzYWRjZmQ3NTRk
YjEwMWIwHhcNMjMwNTMxMjIyNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGI4MGI1YTk1NTdjZTNjOWVmZjhkNDk0ODRlYTdkMmJmMWVjY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivGoSH/C6vQvNIZQorsdfS5ZjeaY
mNElb64f6Wbh7Qftlkl4aOdxf4BYz1a40c7ClBup1iquhr+EAJDDNcjcBZD+Z8KQ
L82TCNDbCNLqtceaeSPHDzfJO20+dyZ19SBLE1yTQ5qptJiFyGLi64Jd6JQ7Jjoz
/p6VMXP6WhnAqsTkz5vw/oNIPDzSFIJmjACkihpU3WT7DjznoNqyOQhacP6TaXGx
g0N00M1NFIoA9xgQOeTHJ8mAv+kc38MXc2MRlGv4RX1P0da0ECo6auTL4bq0FvGL
waFA+bfntKDEZ/c/d34Gt8iGv2opRwu+ZS4wqXNA2hlUCVH65YhN5a3fVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIi4C1qVV848nv+NSUhOp9K/Hsz7MB8GA1UdIwQY
MBaAFIRKF5HLB/HYYSPGPcOtz9dU2xAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQt
NzhiYTZkYzUwMDg2LzEvaUxnTFdwVlh6anllXzQxSlNFNm4wcjhlelBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQtNzhiYTZkYzUwMDg2
LzEvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gDMA0G
CSqGSIb3DQEBCwUAA4IBAQBnbyiMQiRfgMWRzYJ0p/dQgrjA6VJSfCATM/yrK+Tc
NAv7aa5uRxWRjC/AP4T+1sSrZ2HMYG/K+A1IhwjZ/aY5C67Xc8kiCCbRJKpIvHrI
FN4+bwaUqreVBVI6HTiTK/me5y+yJQMhkrigi8A4Oxamc85Z53Xgwy66OnlXKClg
a2r9qW5Hy+sAQSm2DrDpohcsV35+zNAUDA5LhWW62hRqQgAIDQ1/MKUdSlCam5VC
lZIMtdt4ZRQV0oBkQQSxzoQZ/vPpW/47m/rkQi8myU7kbFYiG1SkGzWQoM5/+x4H
t83/tXv2fPHszysb99Kp/cuJd5nBP47YZXmjSu8I+mgf
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:10 2025 by rpki-client