Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/vclxs9bKqKlTjh-GOEl6dVDI2tw.roa
File: vclxs9bKqKlTjh-GOEl6dVDI2tw.roa (raw, json)
Hash identifier: au1T+kXE+HnkBZslhanYbPSRINVDptSt4C6rtfFrETM=
Subject key identifier: BD:C9:71:B3:D6:CA:A8:A9:53:8E:1F:86:38:49:7A:75:50:C8:DA:DC
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 018571BA0FEEAFD0A767BFA7A0C717894623
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/vclxs9bKqKlTjh-GOEl6dVDI2tw.roa
Signing time: Mon 02 Jan 2023 09:04:57 +0000
ROA not before: Mon 02 Jan 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41963
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0f:ee:af:d0:a7:67:bf:a7:a0:c7:17:89:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: Jan 2 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc971b3d6caa8a9538e1f8638497a7550c8dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:a6:ad:df:fe:38:c3:bc:43:1b:a2:09:56:
1f:c1:b8:93:4d:90:7c:d7:19:63:ba:c8:5e:36:ea:
cd:27:56:bb:e5:15:75:fb:8c:ba:c9:29:2c:51:6e:
f1:b0:fa:d9:59:33:d1:1a:e8:9a:97:48:34:31:a1:
84:50:b0:59:a0:41:b9:4a:3c:6d:d8:5c:43:66:01:
3f:b9:23:49:48:99:87:3d:c6:e3:72:ce:b2:51:1f:
35:5d:e9:11:cd:14:a6:c7:5b:bb:68:b7:82:42:10:
35:41:ee:73:0a:c3:93:94:e5:8c:80:ab:81:3c:d2:
a1:59:bf:3c:02:74:de:81:28:54:49:5c:a2:ec:6d:
45:60:9e:5d:2d:a5:75:58:36:45:77:c0:92:06:7b:
e3:cd:43:6d:ec:00:f5:02:fa:3f:70:f0:ef:ce:e3:
e7:d8:ef:b9:aa:d9:4b:f8:6a:50:9b:c0:82:78:e7:
1f:a3:db:ee:7a:81:c6:2e:fe:7f:84:33:43:55:a5:
3a:76:25:10:6d:a4:95:7d:71:8b:c1:c6:dd:47:f0:
4f:81:89:98:00:0c:0c:87:e6:9c:9f:c3:82:c2:fe:
fa:6f:d8:f5:9f:5b:8d:11:7d:dd:c4:c7:59:db:59:
61:b4:49:8f:55:06:6e:af:dd:2d:a2:9a:07:a6:b3:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:71:B3:D6:CA:A8:A9:53:8E:1F:86:38:49:7A:75:50:C8:DA:DC
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/vclxs9bKqKlTjh-GOEl6dVDI2tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0/21
Signature Algorithm: sha256WithRSAEncryption
05:a2:cb:54:e4:75:1b:c4:0f:94:e2:34:b7:e5:65:5a:ba:fb:
26:6e:6b:c1:e2:86:06:d6:aa:e9:85:a6:d8:1d:aa:8b:83:d0:
79:e4:93:c3:a3:c4:93:42:c2:6f:4f:d9:9b:a1:cc:c5:fb:6e:
bc:2b:f8:88:3a:c5:fb:f6:75:4f:5e:4b:a3:0e:98:46:30:55:
91:18:ae:9b:35:2f:60:f2:e6:da:8e:da:ab:d4:0f:25:23:62:
4d:82:a3:9f:d0:6e:3b:d5:e6:b7:46:05:de:3a:2e:11:57:97:
92:e0:18:40:e0:5e:a5:6a:1c:51:f0:6e:30:a9:93:6e:55:c2:
bb:ba:09:bb:e4:3d:8a:05:3f:8a:f9:50:0e:a1:d2:e8:01:8e:
c0:5e:a2:c4:3d:09:32:ba:64:85:90:50:44:64:5b:b3:91:e3:
fa:d5:58:6f:92:19:8d:53:b4:69:46:c9:98:a7:0e:b3:2e:68:
22:b3:91:5e:fc:94:da:a6:e0:1a:c7:a6:a5:90:fb:db:58:5d:
8a:3f:5f:47:db:71:33:1a:0b:16:3e:0c:99:d6:79:3f:d9:46:
96:5e:5b:40:99:91:34:2b:58:34:0d:38:42:d1:5b:d1:81:8f:
4c:46:07:ca:18:d1:c3:c8:5a:e0:16:8c:be:26:71:dc:05:ec:
35:00:14:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxug/ur9CnZ7+noMcXiUYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4
YzJkM2IwHhcNMjMwMTAyMDkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM5NzFiM2Q2Y2FhOGE5NTM4ZTFmODYzODQ5N2E3NTUwYzhkYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTmmrd/+OMO8QxuiCVYfwbiTTZB8
1xljusheNurNJ1a75RV1+4y6ySksUW7xsPrZWTPRGuial0g0MaGEULBZoEG5Sjxt
2FxDZgE/uSNJSJmHPcbjcs6yUR81XekRzRSmx1u7aLeCQhA1Qe5zCsOTlOWMgKuB
PNKhWb88AnTegShUSVyi7G1FYJ5dLaV1WDZFd8CSBnvjzUNt7AD1Avo/cPDvzuPn
2O+5qtlL+GpQm8CCeOcfo9vueoHGLv5/hDNDVaU6diUQbaSVfXGLwcbdR/BPgYmY
AAwMh+acn8OCwv76b9j1n1uNEX3dxMdZ21lhtEmPVQZur90topoHprO26wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3JcbPWyqipU44fhjhJenVQyNrcMB8GA1UdIwQY
MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvdmNseHM5YktxS2xUamgtR09FbDZkVkRJMnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW2a4MA0G
CSqGSIb3DQEBCwUAA4IBAQAFostU5HUbxA+U4jS35WVauvsmbmvB4oYG1qrphabY
HaqLg9B55JPDo8STQsJvT9mboczF+268K/iIOsX79nVPXkujDphGMFWRGK6bNS9g
8ubajtqr1A8lI2JNgqOf0G471ea3RgXeOi4RV5eS4BhA4F6lahxR8G4wqZNuVcK7
ugm75D2KBT+K+VAOodLoAY7AXqLEPQkyumSFkFBEZFuzkeP61VhvkhmNU7RpRsmY
pw6zLmgis5Fe/JTapuAax6alkPvbWF2KP19H23EzGgsWPgyZ1nk/2UaWXltAmZE0
K1g0DThC0VvRgY9MRgfKGNHDyFrgFoy+JnHcBew1ABSA
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:32 2025 by rpki-client