Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/I1J0OnbNttsrW-s4b9V9HNpT79s.roa
File: I1J0OnbNttsrW-s4b9V9HNpT79s.roa (raw, json)
Hash identifier: lUPTLTQUn0hWSyfuII/3OP3nvuRgoTFiBm7jj0TLoiE=
Subject key identifier: 23:52:74:3A:76:CD:B6:DB:2B:5B:EB:38:6F:D5:7D:1C:DA:53:EF:DB
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 133629A9
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/I1J0OnbNttsrW-s4b9V9HNpT79s.roa
Signing time: Sat 01 Jan 2022 15:01:42 +0000
ROA not before: Sat 01 Jan 2022 15:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49636
IP address blocks: 91.213.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322316713 (0x133629a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Jan 1 15:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2352743a76cdb6db2b5beb386fd57d1cda53efdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:aa:5d:b6:2e:bc:83:45:14:26:f5:3c:3a:
1b:8a:46:dc:ba:49:ce:77:97:31:8b:d5:48:63:12:
75:af:81:c9:19:9b:19:17:18:f2:64:47:8c:f4:b9:
c9:7f:ae:25:7c:f6:41:95:9b:7a:d1:4f:f2:0e:7e:
50:90:bc:85:27:f0:5d:a0:6e:62:45:3e:42:cf:c0:
04:cc:b7:62:48:1e:2d:d7:1a:43:bf:9d:17:ac:63:
b2:33:90:f7:5f:18:39:04:41:a3:ce:54:d3:57:ad:
72:c9:57:c3:33:34:24:e8:e5:2d:4b:cb:d3:cb:1b:
cf:8a:cd:fe:64:6f:78:a3:0e:64:ae:79:ae:b6:08:
93:cb:fc:d6:ea:49:b4:2a:05:1c:92:df:bd:0d:30:
b3:2f:b8:cf:c1:ed:cf:f2:40:fa:f2:e8:1b:9a:f3:
4f:5e:68:8b:a3:de:78:34:7f:4b:6d:a9:be:88:76:
c3:72:d6:21:35:10:ca:6e:27:d8:65:da:45:38:5c:
92:2b:4e:e7:e7:b5:fc:cd:bd:8f:98:1c:6a:13:ac:
e8:49:56:ce:3c:ea:e1:9c:21:08:83:ae:0f:95:da:
47:fb:e9:6e:76:73:94:bb:b9:92:fa:42:f0:f0:d4:
d6:f0:f9:af:0d:3b:17:d0:21:95:4c:05:d4:eb:69:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:52:74:3A:76:CD:B6:DB:2B:5B:EB:38:6F:D5:7D:1C:DA:53:EF:DB
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/I1J0OnbNttsrW-s4b9V9HNpT79s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.80.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:fe:52:40:4b:fd:ec:35:7c:29:c4:01:ec:d7:03:54:92:
e6:af:eb:95:0c:a0:17:75:85:66:5b:94:fc:21:e7:c8:14:4f:
ce:cc:da:7f:63:9f:fa:62:2b:3d:64:1d:32:8c:9b:25:21:1b:
82:81:f7:7f:b2:62:17:a2:1b:69:a0:6c:c7:10:aa:2b:ec:bb:
fe:27:32:84:b7:fa:74:3c:9c:10:ed:7e:e7:86:ba:30:89:ea:
59:da:08:08:24:02:e8:f3:3e:1d:7e:dd:de:88:eb:17:13:20:
1c:f8:fc:a6:5b:95:b8:a0:de:01:57:6f:1a:5e:7a:3b:26:ec:
e1:6c:c1:b8:e0:18:d9:cb:8f:15:c0:47:04:49:c4:7f:85:07:
91:a5:e9:7b:92:33:cd:b1:36:88:e9:f3:85:43:41:19:d6:37:
19:e7:e5:98:c2:fc:c0:37:cf:e3:0e:f6:65:7f:74:59:90:f4:
12:13:1c:f1:2d:f6:26:5c:07:23:77:12:73:09:e3:b6:65:75:
f3:d2:c2:3a:cc:54:16:e4:93:7f:8e:bf:08:7e:9f:18:e2:1f:
2f:3e:cc:d9:16:8c:e1:58:70:1f:fa:31:bd:ae:ab:e2:0e:42:
3c:fe:24:18:48:cb:90:f4:7b:cb:bf:9d:c6:16:e1:a6:e2:a9:
46:b8:f3:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEzYpqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YThmNGIwMjllMjllZWRmMjdkNDVjZDRkMzkwMTA4MzI2YmUyNmYwMB4XDTIyMDEw
MTE1MDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjM1Mjc0M2E3NmNk
YjZkYjJiNWJlYjM4NmZkNTdkMWNkYTUzZWZkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJvWql22LryDRRQm9Tw6G4pG3LpJzneXMYvVSGMSda+ByRmb
GRcY8mRHjPS5yX+uJXz2QZWbetFP8g5+UJC8hSfwXaBuYkU+Qs/ABMy3YkgeLdca
Q7+dF6xjsjOQ918YOQRBo85U01etcslXwzM0JOjlLUvL08sbz4rN/mRveKMOZK55
rrYIk8v81upJtCoFHJLfvQ0wsy+4z8Htz/JA+vLoG5rzT15oi6PeeDR/S22pvoh2
w3LWITUQym4n2GXaRThckitO5+e1/M29j5gcahOs6ElWzjzq4ZwhCIOuD5XaR/vp
bnZzlLu5kvpC8PDU1vD5rw07F9AhlUwF1OtpVU8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQjUnQ6ds222ytb6zhv1X0c2lPv2zAfBgNVHSMEGDAWgBSaj0sCninu3yfU
XNTTkBCDJr4m8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21vOUxBcDRwN3Q4bjFGelUwNUFRZ3lhLUp2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvMTk0NTg5LTZjNmUtNDdjZS05NzMzLTEzOTUyNjQzZjExNC8x
L0kxSjBPbmJOdHRzclctczRiOVY5SE5wVDc5cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
MTk0NTg5LTZjNmUtNDdjZS05NzMzLTEzOTUyNjQzZjExNC8xL21vOUxBcDRwN3Q4
bjFGelUwNUFRZ3lhLUp2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvVUDANBgkqhkiG9w0BAQsFAAOC
AQEAk8D+UkBL/ew1fCnEAezXA1SS5q/rlQygF3WFZluU/CHnyBRPzszaf2Of+mIr
PWQdMoybJSEbgoH3f7JiF6IbaaBsxxCqK+y7/icyhLf6dDycEO1+54a6MInqWdoI
CCQC6PM+HX7d3ojrFxMgHPj8pluVuKDeAVdvGl56Oybs4WzBuOAY2cuPFcBHBEnE
f4UHkaXpe5IzzbE2iOnzhUNBGdY3GeflmML8wDfP4w72ZX90WZD0EhMc8S32JlwH
I3cScwnjtmV189LCOsxUFuSTf46/CH6fGOIfLz7M2RaM4VhwH/oxva6r4g5CPP4k
GEjLkPR7y7+dxhbhpuKpRrjzMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org