Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/V2nANB0IeRurS6s_OYVSvLuaXwU.roa
File: V2nANB0IeRurS6s_OYVSvLuaXwU.roa (raw, json)
Hash identifier: IxwIWBtYxEEPoQvmhfinxPVtlz5zFmjFSqaFrmvvYVI=
Subject key identifier: 57:69:C0:34:1D:08:79:1B:AB:4B:AB:3F:39:85:52:BC:BB:9A:5F:05
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018A4763D108D00E7C11AABC7F7F7B9296AD
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/V2nANB0IeRurS6s_OYVSvLuaXwU.roa
Signing time: Wed 30 Aug 2023 17:00:38 +0000
ROA not before: Wed 30 Aug 2023 17:00:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.252.0/22 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:63:d1:08:d0:0e:7c:11:aa:bc:7f:7f:7b:92:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 30 17:00:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5769c0341d08791bab4bab3f398552bcbb9a5f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:9f:9d:c7:7a:6f:ee:e5:4a:d3:e5:4a:49:
57:05:81:b2:ad:00:1e:82:f8:75:89:04:e5:de:c2:
ec:53:3c:c4:b4:53:2a:d1:3d:2a:5f:a3:dc:ee:c8:
be:e9:f5:cb:ce:67:4e:cb:73:e2:73:70:e5:6c:19:
fd:70:f9:b7:90:54:aa:08:cc:66:68:d4:b6:b7:95:
c6:ea:f0:2a:1d:56:d4:d3:40:9c:cc:ba:aa:fd:07:
99:4a:5f:88:e0:35:06:fa:e9:00:74:2e:a5:39:30:
40:54:82:e0:6f:da:be:ff:db:56:6a:5a:b5:ad:1e:
27:6d:32:ce:b8:1c:2f:e7:ef:56:81:55:3b:04:46:
71:37:5f:aa:2d:89:03:54:5a:0f:fe:d5:77:3c:09:
f4:da:ec:e0:42:05:5c:db:43:68:64:da:32:db:54:
25:af:64:c8:0c:2d:20:6b:66:5b:eb:2a:9f:9c:70:
cc:18:b2:fa:6a:ac:d0:52:9e:97:ec:88:18:f0:d6:
a6:d9:1b:79:c2:27:19:10:e1:d9:34:30:d4:3e:0e:
d0:38:b6:7e:44:1e:c5:3e:13:ed:27:69:f1:f6:a3:
2b:d7:ea:2b:4c:79:58:96:b6:47:26:1a:5d:f5:8f:
57:f8:3c:b0:14:3d:13:d8:b5:87:5d:f4:57:97:ed:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:C0:34:1D:08:79:1B:AB:4B:AB:3F:39:85:52:BC:BB:9A:5F:05
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/V2nANB0IeRurS6s_OYVSvLuaXwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:28:3e:dc:a4:9f:d9:2b:cf:e3:d6:a5:19:1c:e7:a1:f2:33:
09:25:44:48:28:64:5a:3d:93:dd:80:c4:8f:7c:9c:86:2e:a3:
43:81:82:3d:3e:7e:48:68:3b:34:84:46:73:7a:fb:b6:75:13:
ab:6a:c5:14:0b:b2:c9:3e:bb:08:a8:c9:1d:a4:b1:66:78:46:
ba:a1:b2:4a:6b:a1:e3:f5:bb:9c:1e:86:70:0b:3e:df:36:f3:
c2:9d:5c:d0:77:84:82:25:e7:ab:7a:ae:a6:09:68:bd:dd:0b:
5d:b1:57:47:52:ee:f9:cf:c7:c7:58:0a:83:d5:a1:d6:32:c4:
d7:66:69:97:fd:85:1f:88:4a:7e:14:e2:c6:70:95:03:8e:8a:
c7:84:60:48:ca:f9:39:82:56:a5:47:85:41:fa:bf:a8:0f:b2:
bb:1f:d5:dd:7e:7b:04:ee:60:71:8f:da:b3:79:d4:ff:30:f2:
f0:95:d1:8e:0c:e3:7d:f4:24:7e:b7:71:ac:ac:44:d6:4c:41:
de:7a:86:ba:87:f0:14:8c:87:73:4c:9d:05:f4:4c:68:9f:3d:
bc:87:db:be:e6:46:02:31:34:1c:93:fb:f7:8b:f7:45:53:cc:
10:59:44:b9:86:b7:e5:ec:7e:c1:0f:9f:be:fc:9d:7c:60:b4:
14:86:37:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpHY9EI0A58Eaq8f397kpatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjMwODMwMTcwMDM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY5YzAzNDFkMDg3OTFiYWI0YmFiM2YzOTg1NTJiY2JiOWE1ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmGfncd6b+7lStPlSklXBYGyrQAe
gvh1iQTl3sLsUzzEtFMq0T0qX6Pc7si+6fXLzmdOy3Pic3DlbBn9cPm3kFSqCMxm
aNS2t5XG6vAqHVbU00CczLqq/QeZSl+I4DUG+ukAdC6lOTBAVILgb9q+/9tWalq1
rR4nbTLOuBwv5+9WgVU7BEZxN1+qLYkDVFoP/tV3PAn02uzgQgVc20NoZNoy21Ql
r2TIDC0ga2Zb6yqfnHDMGLL6aqzQUp6X7IgY8Nam2Rt5wicZEOHZNDDUPg7QOLZ+
RB7FPhPtJ2nx9qMr1+orTHlYlrZHJhpd9Y9X+DywFD0T2LWHXfRXl+1ylQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFdpwDQdCHkbq0urPzmFUry7ml8FMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvVjJuQU5CMEllUnVyUzZzX09ZVlN2THVhWHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW5N8AwQC
1HT8MA0GCSqGSIb3DQEBCwUAA4IBAQCzKD7cpJ/ZK8/j1qUZHOeh8jMJJURIKGRa
PZPdgMSPfJyGLqNDgYI9Pn5IaDs0hEZzevu2dROrasUUC7LJPrsIqMkdpLFmeEa6
obJKa6Hj9bucHoZwCz7fNvPCnVzQd4SCJeereq6mCWi93QtdsVdHUu75z8fHWAqD
1aHWMsTXZmmX/YUfiEp+FOLGcJUDjorHhGBIyvk5glalR4VB+r+oD7K7H9XdfnsE
7mBxj9qzedT/MPLwldGODON99CR+t3GsrETWTEHeeoa6h/AUjIdzTJ0F9Exonz28
h9u+5kYCMTQck/v3i/dFU8wQWUS5hrfl7H7BD5++/J18YLQUhjev
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:39 2025 by rpki-client