Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/AWvPLX8wOGadKeBfrCYqdjL0xII.roa
File: AWvPLX8wOGadKeBfrCYqdjL0xII.roa (raw, json)
Hash identifier: WYkTX0Z/Ufpc4EoXQW7mWPQQhSPX36owr76Z4gBpXmk=
Subject key identifier: 01:6B:CF:2D:7F:30:38:66:9D:29:E0:5F:AC:26:2A:76:32:F4:C4:82
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 02B95F
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/AWvPLX8wOGadKeBfrCYqdjL0xII.roa
Signing time: Wed 25 May 2022 09:41:13 +0000
ROA not before: Wed 25 May 2022 09:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57130
IP address blocks: 91.230.241.0/24 maxlen: 24
194.9.22.0/24 maxlen: 24
194.9.23.0/24 maxlen: 24
91.230.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178527 (0x2b95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: May 25 09:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=016bcf2d7f3038669d29e05fac262a7632f4c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:ad:e2:c3:dc:2f:55:c3:73:a3:dd:f2:56:
84:2c:b8:3a:e5:09:fd:81:0d:0d:e3:bd:a6:73:df:
94:17:ef:5c:0f:73:04:65:34:7f:98:98:3e:0b:d7:
9e:5c:e8:3b:9a:46:c5:4c:91:9a:75:82:2f:81:91:
17:66:29:d4:17:23:c1:c7:ba:10:63:a6:50:63:5f:
80:ba:30:4f:43:e4:78:ab:52:ec:22:6f:03:21:4b:
20:b0:39:c7:94:d5:96:d2:4f:9e:9b:8d:41:56:36:
b9:e7:8d:3f:ab:3e:c8:b8:5a:f8:49:80:83:d3:cd:
12:6a:55:3b:cb:50:a8:a9:ec:95:d8:46:0f:12:84:
9b:0d:19:6b:6d:53:e9:d5:f2:ad:21:fc:d3:22:9c:
80:2d:90:c6:c7:4c:b4:69:a7:0d:1a:81:95:9f:ee:
47:82:96:75:ca:5f:8d:45:32:88:f3:93:3e:5c:23:
63:1d:f6:3c:f7:d5:10:f5:07:0e:b9:e9:53:cb:03:
3b:b3:40:b8:d8:8c:03:9d:3e:c2:b9:16:17:3e:3c:
bb:b5:12:b3:d0:39:37:b2:52:b6:2e:a2:10:03:f6:
be:91:d1:a3:62:12:fd:2b:e4:95:f6:7f:d9:72:16:
2c:05:88:90:d5:12:57:f2:5f:6f:46:3f:06:b4:cb:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:CF:2D:7F:30:38:66:9D:29:E0:5F:AC:26:2A:76:32:F4:C4:82
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/AWvPLX8wOGadKeBfrCYqdjL0xII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.240.0/23
194.9.22.0/23
Signature Algorithm: sha256WithRSAEncryption
85:41:12:3d:14:33:0a:25:dd:cc:17:91:fd:81:09:4a:fa:47:
ad:62:ba:a8:e7:22:33:70:f0:3c:a5:ad:ce:6d:aa:e4:75:44:
df:16:83:06:29:db:11:ec:91:13:00:1e:f4:ef:ab:10:7c:0b:
b2:0d:39:19:e1:fc:f6:6b:7e:0a:ab:62:dd:40:b6:c8:72:58:
67:cb:6f:5a:bc:0a:42:cc:cf:16:5c:8f:a1:91:c3:ea:9a:a9:
e1:4c:ca:d9:c8:0e:00:dc:81:9d:93:83:b3:ff:8c:82:d6:f5:
c3:70:b4:41:eb:52:3e:6a:a3:32:9f:3e:e6:18:6b:dc:85:b5:
ed:69:0d:e0:ae:e7:c7:38:f6:87:5c:c7:c0:b3:9a:6a:6a:78:
c8:64:cf:ff:02:a3:14:c2:f7:39:b2:4b:0d:4a:8a:9b:60:44:
b8:85:39:c2:ff:ac:2a:20:27:e9:ab:5e:ad:0a:c8:db:31:4a:
51:5c:7a:34:e5:aa:a9:34:cd:da:91:16:8b:f8:60:48:8e:d2:
69:0e:e4:af:80:ce:f4:30:60:05:85:50:ed:56:14:2c:98:f1:
2e:f7:24:10:23:e8:c0:4a:d1:76:0b:c1:fd:0b:f2:94:79:58:
c1:a9:f2:d6:de:4d:7f:14:d2:00:68:4c:31:fd:6f:bb:74:ac:
df:6d:c8:60
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDArlfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUz
Y2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5MmVmZjIwHhcNMjIwNTI1
MDk0MTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMTZiY2YyZDdmMzAz
ODY2OWQyOWUwNWZhYzI2MmE3NjMyZjRjNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwmKt4sPcL1XDc6Pd8laELLg65Qn9gQ0N472mc9+UF+9cD3ME
ZTR/mJg+C9eeXOg7mkbFTJGadYIvgZEXZinUFyPBx7oQY6ZQY1+AujBPQ+R4q1Ls
Im8DIUsgsDnHlNWW0k+em41BVja5540/qz7IuFr4SYCD080SalU7y1CoqeyV2EYP
EoSbDRlrbVPp1fKtIfzTIpyALZDGx0y0aacNGoGVn+5HgpZ1yl+NRTKI85M+XCNj
HfY899UQ9QcOuelTywM7s0C42IwDnT7CuRYXPjy7tRKz0Dk3slK2LqIQA/a+kdGj
YhL9K+SV9n/ZchYsBYiQ1RJX8l9vRj8GtMtblwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFAFrzy1/MDhmnSngX6wmKnYy9MSCMB8GA1UdIwQYMBaAFOPOBp38W2CIdtZC
SjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1NjkxLzEv
QVd2UExYOHdPR2FkS2VCZnJDWXFkakwweElJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81
NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgy
MWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+bwAwQBwgkWMA0GCSqGSIb3DQEB
CwUAA4IBAQCFQRI9FDMKJd3MF5H9gQlK+ketYrqo5yIzcPA8pa3ObarkdUTfFoMG
KdsR7JETAB7076sQfAuyDTkZ4fz2a34Kq2LdQLbIclhny29avApCzM8WXI+hkcPq
mqnhTMrZyA4A3IGdk4Oz/4yC1vXDcLRB61I+aqMynz7mGGvchbXtaQ3grufHOPaH
XMfAs5pqanjIZM//AqMUwvc5sksNSoqbYES4hTnC/6wqICfpq16tCsjbMUpRXHo0
5aqpNM3akRaL+GBIjtJpDuSvgM70MGAFhVDtVhQsmPEu9yQQI+jAStF2C8H9C/KU
eVjBqfLW3k1/FNIAaEwx/W+7dKzfbchg
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:32 2025 by rpki-client