Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/q9Z22UrjCrqyJfXPwnp9XoImuVc.roa
File: q9Z22UrjCrqyJfXPwnp9XoImuVc.roa (raw, json)
Hash identifier: 91jUirUFFs7FjUYY/cPHxkzhMDF6q/gJHBwPNc0j4E8=
Subject key identifier: AB:D6:76:D9:4A:E3:0A:BA:B2:25:F5:CF:C2:7A:7D:5E:82:26:B9:57
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 05ADA82D
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/q9Z22UrjCrqyJfXPwnp9XoImuVc.roa
Signing time: Sat 01 Jan 2022 13:05:02 +0000
ROA not before: Sat 01 Jan 2022 13:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201749
IP address blocks: 93.191.112.0/24 maxlen: 24
93.191.113.0/24 maxlen: 24
93.191.115.0/24 maxlen: 24
93.191.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95266861 (0x5ada82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jan 1 13:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abd676d94ae30abab225f5cfc27a7d5e8226b957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:e2:c7:89:33:0c:34:24:27:1e:6a:42:ab:
b5:e2:91:3c:87:e0:8c:d2:a2:c3:2c:e1:58:f5:73:
0e:cb:97:a4:c4:66:cd:d2:55:27:e6:03:58:c9:f9:
ea:26:08:0d:09:95:59:6c:05:e8:f7:56:f8:c7:f2:
96:31:50:af:13:28:48:b6:22:3a:5a:0e:80:e8:c5:
d1:2a:88:d1:08:3d:05:19:30:30:80:d4:03:14:e5:
05:9e:97:76:64:c0:c0:7b:93:90:9f:f8:c6:26:f7:
a5:d3:77:93:35:bf:d8:21:27:bb:f3:e5:9e:3b:c1:
b4:4d:68:b4:93:8c:04:3a:ae:c0:f4:f9:d1:15:e7:
27:1e:e9:9e:8f:f9:f0:e4:08:92:10:fe:ff:68:cb:
bd:f3:34:b7:e4:40:03:42:f3:77:7e:1c:7a:19:78:
4e:eb:73:e6:59:d2:a1:a9:9b:89:02:d3:72:4d:32:
2a:c3:68:e7:55:0a:f5:9b:4e:76:84:f3:51:f0:17:
ea:ac:ee:ef:dc:8e:56:97:7b:a8:e5:e9:ca:5e:d3:
19:c3:c1:e6:ee:eb:d7:dd:ae:5e:d5:18:c4:ea:36:
6f:35:bc:06:c8:67:9d:12:2e:aa:59:7a:82:e9:2b:
6a:79:8c:d1:3e:d0:a7:d6:14:b2:4d:3f:17:e5:ae:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D6:76:D9:4A:E3:0A:BA:B2:25:F5:CF:C2:7A:7D:5E:82:26:B9:57
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/q9Z22UrjCrqyJfXPwnp9XoImuVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ca:90:86:be:2c:b9:61:1c:d5:6a:3b:05:03:1e:f5:88:73:
09:7e:06:e0:ae:1b:9f:e0:9d:40:b6:b3:9d:db:33:b6:66:78:
d2:4a:57:46:69:0d:67:e0:16:58:16:fd:94:f0:1e:d7:d1:8a:
b7:c3:e0:d6:e0:ce:4c:8f:bb:eb:68:f3:78:d5:ca:25:ea:bc:
ae:ac:6e:92:ae:44:c7:bb:71:6b:56:df:4a:83:54:50:b6:3b:
b5:c0:bc:c4:18:b7:42:4c:8f:10:08:69:49:72:94:56:44:e6:
f9:f3:1c:5f:db:4b:fe:cd:5f:b0:9d:0e:38:a9:39:9e:09:3e:
90:e4:0c:ac:07:71:3d:2b:78:f2:f8:55:6d:25:d0:25:f3:a6:
b9:77:8b:e0:a5:15:da:4f:ff:2c:de:5a:c2:6a:20:03:38:18:
00:f6:ae:7e:10:11:7b:0a:ca:85:37:19:48:1c:ce:a5:4a:bb:
74:49:41:b1:3a:28:3f:fa:e0:22:ac:a4:67:e5:c1:38:d6:1d:
b3:b3:b0:50:7a:1f:fb:a1:fe:dc:9e:81:dc:fd:a7:eb:3e:a0:
cb:e9:73:e3:53:11:03:d4:d5:f2:cf:ad:4d:da:cf:11:0e:ff:
06:29:7c:2c:c5:ce:c9:45:d0:bc:6a:a1:ba:34:22:d7:30:58:
5f:bf:bf:7c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBa2oLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Njk3YzQ2ZWFmYTEwZWM1ZDkwN2JiMDVlMzcxMjNiNjkyYWI0OTRjMB4XDTIyMDEw
MTEzMDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJkNjc2ZDk0YWUz
MGFiYWIyMjVmNWNmYzI3YTdkNWU4MjI2Yjk1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyV4seJMww0JCceakKrteKRPIfgjNKiwyzhWPVzDsuXpMRm
zdJVJ+YDWMn56iYIDQmVWWwF6PdW+MfyljFQrxMoSLYiOloOgOjF0SqI0Qg9BRkw
MIDUAxTlBZ6XdmTAwHuTkJ/4xib3pdN3kzW/2CEnu/PlnjvBtE1otJOMBDquwPT5
0RXnJx7pno/58OQIkhD+/2jLvfM0t+RAA0Lzd34cehl4Tutz5lnSoambiQLTck0y
KsNo51UK9ZtOdoTzUfAX6qzu79yOVpd7qOXpyl7TGcPB5u7r192uXtUYxOo2bzW8
BshnnRIuqll6gukranmM0T7Qp9YUsk0/F+WuXYsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSr1nbZSuMKurIl9c/Cen1egia5VzAfBgNVHSMEGDAWgBQWl8Rur6EOxdkH
uwXjcSO2kqtJTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZwZkVicS1oRHNYWkI3c0Y0M0VqdHBLclNVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvZDA5OTJkLTkzZmEtNDg0Ni1hNDk1LTc2NTIyYzIwN2M1NS8x
L3E5WjIyVXJqQ3JxeUpmWFB3bnA5WG9JbXVWYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
ZDA5OTJkLTkzZmEtNDg0Ni1hNDk1LTc2NTIyYzIwN2M1NS8xL0ZwZkVicS1oRHNY
WkI3c0Y0M0VqdHBLclNVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAl2/cDANBgkqhkiG9w0BAQsFAAOC
AQEAOsqQhr4suWEc1Wo7BQMe9YhzCX4G4K4bn+CdQLazndsztmZ40kpXRmkNZ+AW
WBb9lPAe19GKt8Pg1uDOTI+762jzeNXKJeq8rqxukq5Ex7txa1bfSoNUULY7tcC8
xBi3QkyPEAhpSXKUVkTm+fMcX9tL/s1fsJ0OOKk5ngk+kOQMrAdxPSt48vhVbSXQ
JfOmuXeL4KUV2k//LN5awmogAzgYAPaufhARewrKhTcZSBzOpUq7dElBsTooP/rg
IqykZ+XBONYds7OwUHof+6H+3J6B3P2n6z6gy+lz41MRA9TV8s+tTdrPEQ7/Bil8
LMXOyUXQvGqhujQi1zBYX7+/fA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:04 2025 by rpki-client