Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/A4AMIfdAou82ey86aSywK0L_4ws.roa
File: A4AMIfdAou82ey86aSywK0L_4ws.roa (raw, json)
Hash identifier: HhupLJG42d/gWJ80OMWSern+i5pwcx+x8uGHOx8NqN0=
Subject key identifier: 03:80:0C:21:F7:40:A2:EF:36:7B:2F:3A:69:2C:B0:2B:42:FF:E3:0B
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0741EAED
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/A4AMIfdAou82ey86aSywK0L_4ws.roa
Signing time: Sat 01 Jan 2022 04:55:25 +0000
ROA not before: Sat 01 Jan 2022 04:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15439
IP address blocks: 91.195.152.0/24 maxlen: 24
91.195.152.0/23 maxlen: 23
91.195.153.0/24 maxlen: 24
91.200.20.0/22 maxlen: 22
91.200.20.0/23 maxlen: 23
91.200.22.0/23 maxlen: 23
193.58.71.0/24 maxlen: 24
193.58.70.0/23 maxlen: 23
193.58.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121760493 (0x741eaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 1 04:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03800c21f740a2ef367b2f3a692cb02b42ffe30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:45:4c:54:20:de:78:00:c3:05:88:ba:cc:
76:72:56:ee:9d:5a:90:de:7a:30:c0:22:85:da:3e:
a7:ad:8f:19:71:a7:6f:c7:7e:dd:94:19:39:b2:b8:
87:b6:8c:53:72:e0:c9:0c:4c:8b:5a:2a:ad:74:87:
16:db:32:2c:b1:40:6f:e7:52:50:9c:45:ee:79:b3:
be:95:05:2a:33:37:7d:a5:11:97:fb:f7:4f:6f:45:
fb:26:7c:75:27:26:7e:52:74:59:da:e6:8e:f1:11:
bc:19:dc:dc:31:a5:83:69:ca:f5:fa:7f:9d:8a:b2:
9b:ea:e6:c8:bf:9d:6d:bc:c9:ef:db:d2:4d:b2:3c:
99:18:19:15:c7:10:d9:ef:62:8e:07:25:25:13:50:
cb:d7:99:85:23:0b:60:fe:58:98:50:4d:43:43:f4:
7c:e6:50:6c:18:23:69:e4:56:e8:3e:4c:6b:f2:25:
de:4a:26:8c:3b:bd:61:bb:9f:92:3c:5b:e9:84:53:
f3:c2:9a:c5:86:f1:e3:fa:90:28:02:6b:49:35:14:
45:62:4d:51:5c:b8:13:30:26:c1:f1:36:2d:de:30:
c1:df:34:76:54:71:4e:af:0a:9e:ef:9c:62:1e:30:
f4:7a:cf:3c:bc:e7:b4:3b:84:d3:de:ca:11:ba:d2:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:0C:21:F7:40:A2:EF:36:7B:2F:3A:69:2C:B0:2B:42:FF:E3:0B
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/A4AMIfdAou82ey86aSywK0L_4ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.152.0/23
91.200.20.0/22
193.58.70.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:45:66:25:91:ae:82:70:b6:7a:19:67:e4:23:82:03:e5:00:
a8:3d:cc:cc:b0:1a:57:23:1e:7a:b4:43:ca:1a:68:f7:95:e8:
57:6f:e4:97:8b:de:c5:28:86:07:94:bd:6a:27:7f:36:9e:4e:
8d:f4:c3:57:96:2d:4f:da:28:13:76:2c:42:82:37:1f:65:1d:
d2:23:43:73:45:bf:d3:e0:00:69:d9:2c:be:b8:6c:88:43:44:
96:8e:e7:fc:80:66:ab:14:5e:11:37:c3:08:61:58:fa:70:54:
47:fd:4d:97:e6:47:ac:3f:1a:cb:9e:52:93:75:39:59:a0:6c:
6b:c7:c3:94:66:06:6e:65:fd:1f:30:db:6d:c4:10:92:e7:65:
39:b7:a8:1d:5b:32:ac:ce:39:70:59:d0:82:b8:d0:81:80:ca:
a8:c2:4d:69:8f:31:ab:d2:28:2a:bc:a8:ac:b6:00:44:5f:7f:
3f:36:de:cd:b8:a1:32:85:13:f2:b2:62:96:0b:05:8d:32:01:
8e:73:c3:cb:e7:fa:e8:70:b1:1a:11:32:9e:9b:26:30:cc:d7:
9d:7d:b6:a1:5c:84:64:ef:f8:09:0d:69:57:0b:ec:9d:a6:89:
9b:3b:9d:78:c0:32:52:dd:a2:41:46:86:b8:05:00:64:42:90:
61:8c:46:85
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB0Hq7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTJjNmUwOWMxOTJjNTU4MGE0YTFkMjk0MTUwZDYyMzdhYjg5MjVkMB4XDTIyMDEw
MTA0NTUyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM4MDBjMjFmNzQw
YTJlZjM2N2IyZjNhNjkyY2IwMmI0MmZmZTMwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVCRUxUIN54AMMFiLrMdnJW7p1akN56MMAihdo+p62PGXGn
b8d+3ZQZObK4h7aMU3LgyQxMi1oqrXSHFtsyLLFAb+dSUJxF7nmzvpUFKjM3faUR
l/v3T29F+yZ8dScmflJ0WdrmjvERvBnc3DGlg2nK9fp/nYqym+rmyL+dbbzJ79vS
TbI8mRgZFccQ2e9ijgclJRNQy9eZhSMLYP5YmFBNQ0P0fOZQbBgjaeRW6D5Ma/Il
3komjDu9Ybufkjxb6YRT88KaxYbx4/qQKAJrSTUURWJNUVy4EzAmwfE2Ld4wwd80
dlRxTq8Knu+cYh4w9HrPPLzntDuE097KEbrSp9cCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQDgAwh90Ci7zZ7LzppLLArQv/jCzAfBgNVHSMEGDAWgBSZLG4JwZLFWApK
HSlBUNYjeriSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21TeHVDY0dTeFZnS1NoMHBRVkRXSTNxNGtsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvOTNkZDQzLTk5MzMtNDJjYS1hZmMyLTJjMTg5MWNhY2FjNy8x
L0E0QU1JZmRBb3U4MmV5ODZhU3l3SzBMXzR3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
OTNkZDQzLTk5MzMtNDJjYS1hZmMyLTJjMTg5MWNhY2FjNy8xL21TeHVDY0dTeFZn
S1NoMHBRVkRXSTNxNGtsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVvDmAMEAlvIFAMEAcE6RjANBgkq
hkiG9w0BAQsFAAOCAQEAPUVmJZGugnC2ehln5COCA+UAqD3MzLAaVyMeerRDyhpo
95XoV2/kl4vexSiGB5S9aid/Np5OjfTDV5YtT9ooE3YsQoI3H2Ud0iNDc0W/0+AA
adksvrhsiENElo7n/IBmqxReETfDCGFY+nBUR/1Nl+ZHrD8ay55Sk3U5WaBsa8fD
lGYGbmX9HzDbbcQQkudlObeoHVsyrM45cFnQgrjQgYDKqMJNaY8xq9IoKryorLYA
RF9/PzbezbihMoUT8rJilgsFjTIBjnPDy+f66HCxGhEynpsmMMzXnX22oVyEZO/4
CQ1pVwvsnaaJmzudeMAyUt2iQUaGuAUAZEKQYYxGhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:03 2024 by rpki-client on console-fra.rpki-client.org