Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/482yYhLJ2GJqLgU1pcgLQs_Bgj4.roa
File: 482yYhLJ2GJqLgU1pcgLQs_Bgj4.roa (raw, json)
Hash identifier: 53QZdar3pNWI/uhLgVV0Yx4AteArS+/ulN3NubVtxvk=
Subject key identifier: E3:CD:B2:62:12:C9:D8:62:6A:2E:05:35:A5:C8:0B:42:CF:C1:82:3E
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 0182F99895361D9BB6DA710D931D942593E8
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/482yYhLJ2GJqLgU1pcgLQs_Bgj4.roa
Signing time: Thu 01 Sep 2022 15:08:22 +0000
ROA not before: Thu 01 Sep 2022 15:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 91.241.15.0/24 maxlen: 24
91.241.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:98:95:36:1d:9b:b6:da:71:0d:93:1d:94:25:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Sep 1 15:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3cdb26212c9d8626a2e0535a5c80b42cfc1823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:fe:4a:f4:e3:2e:96:d2:22:87:5e:0b:ef:
34:69:79:aa:20:04:ae:cb:ed:c9:87:fc:dd:04:8c:
38:b7:7f:5f:50:fe:16:d2:ec:ac:6f:a3:8a:8f:bb:
fe:bc:b2:c1:2c:6e:43:0d:a3:17:a3:d7:19:53:c1:
7f:bd:eb:6a:f0:8f:c2:73:1c:c9:7a:7b:b5:20:be:
c7:2d:6a:14:bf:1c:a2:68:75:be:db:15:13:6f:f5:
27:e6:90:d8:fa:11:fa:46:57:41:dd:08:6f:86:eb:
84:4e:21:83:2c:f2:3a:9a:27:b4:af:f1:61:61:55:
ce:fb:6d:fa:c0:9a:ac:f5:1a:5e:3c:85:c2:92:0c:
88:cb:d5:50:d9:02:38:29:31:3a:f5:e7:36:6f:99:
e4:3e:e4:ab:e9:8a:92:3f:8d:76:15:95:a0:88:31:
f5:22:84:06:57:ae:07:89:d3:1b:06:88:5b:45:9d:
65:03:95:95:ff:1f:ed:d1:6a:0a:06:bd:4b:c8:cb:
54:b4:2d:58:e7:7e:2b:1e:d4:d5:b2:e2:c1:74:ad:
72:91:41:fc:d6:43:62:ca:c5:06:a2:ef:a4:d2:c6:
b5:02:67:12:6c:de:bb:a8:64:b9:76:0b:be:cf:de:
95:41:3a:8a:53:77:3d:fd:43:93:ff:9f:42:76:b1:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:B2:62:12:C9:D8:62:6A:2E:05:35:A5:C8:0B:42:CF:C1:82:3E
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/482yYhLJ2GJqLgU1pcgLQs_Bgj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.14.0/23
Signature Algorithm: sha256WithRSAEncryption
72:e0:d3:3a:25:d2:bf:4b:aa:09:f7:d3:ac:01:8e:f7:1b:03:
71:c0:69:68:3b:84:cf:09:cb:8e:18:6e:81:06:4b:60:df:89:
61:d4:d3:de:e1:a9:f7:10:c6:3f:05:d5:d1:2a:36:d4:5c:7b:
97:bf:c5:ef:fa:00:09:67:8d:78:f0:b4:69:9a:37:e1:98:e8:
be:3e:0a:4a:cb:01:63:06:b0:eb:7c:03:62:64:6f:f5:16:22:
23:7b:95:60:fb:69:dc:85:51:ed:a6:5d:cd:ae:2f:af:f4:89:
a0:39:df:8b:17:d2:18:34:4f:01:85:4b:04:50:16:e4:8b:00:
9c:ee:e8:cb:b7:88:d6:11:e3:7e:04:13:7e:ca:88:f3:a1:ec:
3d:72:10:43:a5:f5:65:d1:5f:ef:d5:04:ce:8b:61:49:9b:a2:
ab:eb:e9:b3:a9:9d:00:9b:ff:0c:5b:09:a5:25:2a:cb:d2:0e:
08:38:8c:0e:cf:2f:3d:85:7e:34:b7:6e:1d:b3:21:17:da:57:
b0:74:9c:89:4e:e6:71:ff:78:3d:66:18:ff:50:99:5b:5f:04:
eb:e8:3c:f5:23:e4:a2:8c:6d:a6:3c:9d:49:f2:07:48:a2:34:
69:05:98:92:9e:e8:12:81:81:25:8d:50:61:e6:39:9e:96:ee:
69:49:3a:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL5mJU2HZu22nENkx2UJZPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjIwOTAxMTUwODIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2NkYjI2MjEyYzlkODYyNmEyZTA1MzVhNWM4MGI0MmNmYzE4MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm/+SvTjLpbSIodeC+80aXmqIASu
y+3Jh/zdBIw4t39fUP4W0uysb6OKj7v+vLLBLG5DDaMXo9cZU8F/vetq8I/CcxzJ
enu1IL7HLWoUvxyiaHW+2xUTb/Un5pDY+hH6RldB3QhvhuuETiGDLPI6mie0r/Fh
YVXO+236wJqs9RpePIXCkgyIy9VQ2QI4KTE69ec2b5nkPuSr6YqSP412FZWgiDH1
IoQGV64HidMbBohbRZ1lA5WV/x/t0WoKBr1LyMtUtC1Y534rHtTVsuLBdK1ykUH8
1kNiysUGou+k0sa1AmcSbN67qGS5dgu+z96VQTqKU3c9/UOT/59CdrHnBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPNsmISydhiai4FNaXIC0LPwYI+MB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvNDgyeVloTEoyR0pxTGdVMXBjZ0xRc19CZ2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/EOMA0G
CSqGSIb3DQEBCwUAA4IBAQBy4NM6JdK/S6oJ99OsAY73GwNxwGloO4TPCcuOGG6B
Bktg34lh1NPe4an3EMY/BdXRKjbUXHuXv8Xv+gAJZ4148LRpmjfhmOi+PgpKywFj
BrDrfANiZG/1FiIje5Vg+2nchVHtpl3Nri+v9ImgOd+LF9IYNE8BhUsEUBbkiwCc
7ujLt4jWEeN+BBN+yojzoew9chBDpfVl0V/v1QTOi2FJm6Kr6+mzqZ0Am/8MWwml
JSrL0g4IOIwOzy89hX40t24dsyEX2lewdJyJTuZx/3g9Zhj/UJlbXwTr6Dz1I+Si
jG2mPJ1J8gdIojRpBZiSnugSgYEljVBh5jmelu5pSTpJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org