Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/g-jVRuBsMg1rO7tly53k78WpVFU.roa
File: g-jVRuBsMg1rO7tly53k78WpVFU.roa (raw, json)
Hash identifier: 5zLcez4Mu7CsLc41SfM268GewWB2fXrMOPAoWt9vnaY=
Subject key identifier: 83:E8:D5:46:E0:6C:32:0D:6B:3B:BB:65:CB:9D:E4:EF:C5:A9:54:55
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 0185728375C0E411AF582DB35F97A456D380
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/g-jVRuBsMg1rO7tly53k78WpVFU.roa
Signing time: Mon 02 Jan 2023 12:44:55 +0000
ROA not before: Mon 02 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61243
IP address blocks: 91.250.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:75:c0:e4:11:af:58:2d:b3:5f:97:a4:56:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e8d546e06c320d6b3bbb65cb9de4efc5a95455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:b7:58:a9:98:9b:37:78:cc:e9:85:11:fe:
cc:08:05:e0:ca:f0:ae:f6:dd:d7:bf:43:68:e0:2e:
97:ff:03:81:59:11:d6:f6:39:33:6d:5f:6b:84:61:
94:3b:db:a4:89:5f:8a:8e:78:69:86:de:f4:a8:8e:
c9:d4:bf:75:61:c9:d3:8c:ef:b0:f2:75:d5:75:29:
07:3d:cf:95:74:47:5e:5c:9d:05:c2:dc:fa:b2:e5:
74:fc:76:0c:88:83:fa:4e:e4:4f:df:cf:58:1a:e0:
e6:c6:f7:9c:8d:33:4c:d8:19:62:39:6a:20:ad:74:
14:75:54:d6:ca:8e:d8:ff:d8:a2:03:ab:bc:cd:63:
27:80:24:ae:2a:46:bc:c6:b4:79:d9:11:a2:a4:66:
05:d4:19:58:60:45:29:60:44:fc:da:0c:e7:49:65:
71:81:f9:38:90:6f:ee:87:e2:59:7b:5b:ce:1c:e7:
8a:e5:ee:11:f7:d6:06:0c:80:86:8a:30:b4:ea:ae:
ba:3f:76:8a:11:86:70:f2:fc:6a:b1:c2:85:11:dc:
18:d5:97:97:fc:e9:84:7e:04:f5:5e:86:45:03:bb:
02:da:e9:32:5c:71:e3:7e:5b:72:11:47:18:9c:8e:
fe:15:9e:7e:8e:2c:7f:ba:78:6d:3b:38:95:5a:a9:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:D5:46:E0:6C:32:0D:6B:3B:BB:65:CB:9D:E4:EF:C5:A9:54:55
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/g-jVRuBsMg1rO7tly53k78WpVFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7b:93:84:18:74:dc:62:9b:e9:17:00:26:18:e0:51:91:33:
65:b7:cb:88:6b:0f:36:cd:b8:1d:7c:7b:95:88:c4:ef:02:19:
73:40:2c:6c:64:3c:0d:5f:01:71:4f:aa:fb:07:87:71:0a:fd:
3b:7c:cf:0f:91:b8:e5:12:e1:8e:b4:8a:c7:8e:80:28:cf:95:
5d:e8:32:28:a5:9f:ab:cf:ed:ac:b1:42:93:7d:46:8c:9f:26:
e4:5c:4b:e6:31:0f:1c:96:a7:35:81:e7:df:54:fb:e7:1a:ef:
06:31:78:0f:75:a6:f6:72:56:b5:79:13:0d:ba:85:ee:76:f8:
4f:4c:27:1c:46:f6:0a:50:28:53:84:86:8c:ed:88:53:b4:83:
c1:b9:f7:83:79:95:12:84:bb:51:bd:4c:4b:95:91:a7:cf:eb:
d4:bb:cc:6a:a9:fe:b6:93:b6:c9:ca:85:56:3a:fb:7a:e8:66:
69:6d:41:17:13:ab:2b:c2:98:cd:32:11:4c:82:aa:eb:64:5c:
d1:a4:cf:80:74:07:c8:04:cd:d4:8b:69:6e:d1:d1:6f:ef:aa:
85:b3:00:a8:7a:d7:a2:fd:07:bc:df:ed:1a:24:84:92:52:bb:
dc:0b:da:28:cd:8c:e9:fd:64:80:e1:74:64:40:a4:32:82:27:
e0:63:e0:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg3XA5BGvWC2zX5ekVtOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjMwMTAyMTI0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2U4ZDU0NmUwNmMzMjBkNmIzYmJiNjVjYjlkZTRlZmM1YTk1NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nq3WKmYmzd4zOmFEf7MCAXgyvCu
9t3Xv0No4C6X/wOBWRHW9jkzbV9rhGGUO9ukiV+Kjnhpht70qI7J1L91YcnTjO+w
8nXVdSkHPc+VdEdeXJ0Fwtz6suV0/HYMiIP6TuRP389YGuDmxvecjTNM2BliOWog
rXQUdVTWyo7Y/9iiA6u8zWMngCSuKka8xrR52RGipGYF1BlYYEUpYET82gznSWVx
gfk4kG/uh+JZe1vOHOeK5e4R99YGDICGijC06q66P3aKEYZw8vxqscKFEdwY1ZeX
/OmEfgT1XoZFA7sC2ukyXHHjfltyEUcYnI7+FZ5+jix/unhtOziVWqkoLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIPo1UbgbDINazu7Zcud5O/FqVRVMB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvZy1qVlJ1QnNNZzFyTzd0bHk1M2s3OFdwVkZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/r8MA0G
CSqGSIb3DQEBCwUAA4IBAQB9e5OEGHTcYpvpFwAmGOBRkTNlt8uIaw82zbgdfHuV
iMTvAhlzQCxsZDwNXwFxT6r7B4dxCv07fM8PkbjlEuGOtIrHjoAoz5Vd6DIopZ+r
z+2ssUKTfUaMnybkXEvmMQ8clqc1geffVPvnGu8GMXgPdab2cla1eRMNuoXudvhP
TCccRvYKUChThIaM7YhTtIPBufeDeZUShLtRvUxLlZGnz+vUu8xqqf62k7bJyoVW
Ovt66GZpbUEXE6srwpjNMhFMgqrrZFzRpM+AdAfIBM3Ui2lu0dFv76qFswCoetei
/Qe83+0aJISSUrvcC9oozYzp/WSA4XRkQKQygifgY+Bx
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:55 2025 by rpki-client