Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/DzR8WMveoL2kM_BewYwbjhlYXkk.roa
File: DzR8WMveoL2kM_BewYwbjhlYXkk.roa (raw, json)
Hash identifier: g8ABZQ3+l2TeukGJ+Lwf2c5xLJzEgI+mo9aCzO6jKFI=
Subject key identifier: 0F:34:7C:58:CB:DE:A0:BD:A4:33:F0:5E:C1:8C:1B:8E:19:58:5E:49
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 0155565E
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/DzR8WMveoL2kM_BewYwbjhlYXkk.roa
Signing time: Sat 01 Jan 2022 15:03:34 +0000
ROA not before: Sat 01 Jan 2022 15:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198841
IP address blocks: 91.239.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22369886 (0x155565e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: Jan 1 15:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f347c58cbdea0bda433f05ec18c1b8e19585e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:4e:de:b2:37:d8:c1:dc:0c:19:5c:9b:c3:
7b:d0:dd:a8:78:ca:39:ca:78:2b:a1:11:00:bc:0d:
a8:a0:69:ac:cc:06:3d:03:4e:52:67:60:ec:8d:a7:
66:c9:c9:68:31:0e:e3:1e:22:08:43:d2:d2:8c:cb:
ae:1a:2f:7d:66:99:5a:5c:5a:a9:43:97:e8:1d:39:
d6:39:10:cd:4f:05:5d:31:71:b7:c9:84:03:0a:41:
c1:00:3f:46:b8:79:3e:d7:a2:85:b5:8e:0e:47:14:
c7:a6:90:8b:7e:fc:c7:1a:19:ee:5e:b6:b3:3f:91:
72:b5:c3:3e:ae:29:9e:19:39:46:00:76:06:f0:36:
88:b7:ca:d0:17:6f:f3:88:d7:f2:f4:83:0c:bb:87:
6f:20:62:81:f2:d4:f6:89:68:a7:9d:aa:1a:59:5f:
af:0d:6c:db:0c:4c:6c:e6:ef:57:c2:3a:71:35:c7:
8c:10:7a:97:c7:66:df:84:13:66:d2:f9:7d:5f:4e:
39:e5:0d:0e:ee:80:2a:9f:0f:14:80:fe:ef:7c:22:
60:0f:52:bd:e2:3d:e8:bc:96:71:7d:81:e1:45:08:
d9:2d:66:82:fc:0b:df:e3:a6:ad:84:3e:41:5f:8e:
6f:13:2f:5c:a8:5c:1a:11:5d:56:93:44:fd:71:4c:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:7C:58:CB:DE:A0:BD:A4:33:F0:5E:C1:8C:1B:8E:19:58:5E:49
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/DzR8WMveoL2kM_BewYwbjhlYXkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.243.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e1:19:48:0e:4d:18:76:72:4e:7d:ae:16:85:0e:35:dc:d7:
28:e6:09:c2:42:a4:06:6b:3a:2d:d2:ed:23:13:67:3a:c6:ae:
8a:e3:d4:a4:a8:c4:87:bf:b1:f4:ac:6b:a5:e8:77:9b:38:57:
f4:77:20:34:cb:0e:1b:ff:d6:88:9c:6d:bb:93:e9:75:48:22:
35:bb:b3:86:03:90:9d:a5:4d:a2:59:47:41:8f:4a:a3:b3:58:
9c:72:a4:2f:9f:04:2c:98:62:85:20:cb:ac:4b:77:31:5c:41:
eb:00:fe:34:a3:bb:25:d1:bb:ce:de:8d:52:ca:60:d2:6b:50:
43:0a:9e:b5:85:b5:f8:4b:66:12:0e:be:69:5d:76:c9:ba:12:
66:eb:dc:42:2d:3c:bd:4d:43:5a:39:fe:dc:f2:a0:62:f5:5f:
f4:81:fd:3e:50:a8:dd:69:85:07:4e:53:ab:5a:19:e3:b9:5f:
3d:f8:04:24:c3:42:84:aa:20:29:32:d3:3e:69:ff:22:c2:73:
4e:82:3e:e9:71:ec:cd:4a:8c:d2:bc:02:fc:2a:00:b4:65:07:
a3:80:fe:ea:71:cf:f0:35:8b:8a:30:e5:a6:3d:1d:e3:e5:e2:
90:c7:47:6e:a0:a6:a5:c6:04:b4:31:30:0e:67:33:60:5f:0b:
6a:49:0a:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVVWXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzU5NTQ5ZjZkZDJiODMxNDRiODgwYzIzZjA2ZmJhM2IyNWQzOTg2MB4XDTIyMDEw
MTE1MDMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGYzNDdjNThjYmRl
YTBiZGE0MzNmMDVlYzE4YzFiOGUxOTU4NWU0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3ZTt6yN9jB3AwZXJvDe9DdqHjKOcp4K6ERALwNqKBprMwG
PQNOUmdg7I2nZsnJaDEO4x4iCEPS0ozLrhovfWaZWlxaqUOX6B051jkQzU8FXTFx
t8mEAwpBwQA/Rrh5PteihbWODkcUx6aQi378xxoZ7l62sz+RcrXDPq4pnhk5RgB2
BvA2iLfK0Bdv84jX8vSDDLuHbyBigfLU9olop52qGllfrw1s2wxMbObvV8I6cTXH
jBB6l8dm34QTZtL5fV9OOeUNDu6AKp8PFID+73wiYA9SveI96LyWcX2B4UUI2S1m
gvwL3+OmrYQ+QV+ObxMvXKhcGhFdVpNE/XFMLIkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPNHxYy96gvaQz8F7BjBuOGVheSTAfBgNVHSMEGDAWgBT8WVSfbdK4MUS4
gMI/Bvujsl05hjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19GbFVuMjNTdURGRXVJRENQd2I3bzdKZE9ZWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvOTY0MDM1LTM4MWEtNDFiMC05ZmRkLWY2NWQzM2E5OTI2Yi8x
L0R6UjhXTXZlb0wya01fQmV3WXdiamhsWVhray5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
OTY0MDM1LTM4MWEtNDFiMC05ZmRkLWY2NWQzM2E5OTI2Yi8xL19GbFVuMjNTdURG
RXVJRENQd2I3bzdKZE9ZWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvv8zANBgkqhkiG9w0BAQsFAAOC
AQEAc+EZSA5NGHZyTn2uFoUONdzXKOYJwkKkBms6LdLtIxNnOsauiuPUpKjEh7+x
9Kxrpeh3mzhX9HcgNMsOG//WiJxtu5PpdUgiNbuzhgOQnaVNollHQY9Ko7NYnHKk
L58ELJhihSDLrEt3MVxB6wD+NKO7JdG7zt6NUspg0mtQQwqetYW1+EtmEg6+aV12
yboSZuvcQi08vU1DWjn+3PKgYvVf9IH9PlCo3WmFB05Tq1oZ47lfPfgEJMNChKog
KTLTPmn/IsJzToI+6XHszUqM0rwC/CoAtGUHo4D+6nHP8DWLijDlpj0d4+XikMdH
bqCmpcYEtDEwDmczYF8LakkKRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:39 2024 by rpki-client on console-fra.rpki-client.org