Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/IZp_EbAv0oZfas_j8d2d7_-5xbk.roa
File: IZp_EbAv0oZfas_j8d2d7_-5xbk.roa (raw, json)
Hash identifier: Ssi1EUOP/QTGQdHJW3QGgleHAv3PdClKO+/5QmzvH6M=
Subject key identifier: 21:9A:7F:11:B0:2F:D2:86:5F:6A:CF:E3:F1:DD:9D:EF:FF:B9:C5:B9
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 015278B7
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/IZp_EbAv0oZfas_j8d2d7_-5xbk.roa
Signing time: Sat 01 Jan 2022 03:01:13 +0000
ROA not before: Sat 01 Jan 2022 03:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44524
IP address blocks: 91.199.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22182071 (0x15278b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jan 1 03:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=219a7f11b02fd2865f6acfe3f1dd9defffb9c5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:e0:40:30:89:69:63:c4:13:3f:fc:9e:00:
70:1d:5d:75:06:56:4d:d9:2e:50:39:26:86:0b:43:
07:ea:4f:e7:a7:1d:97:f7:09:73:f7:25:30:7b:b7:
34:0c:c5:00:7f:56:e1:eb:77:7d:72:70:ab:bd:5d:
9a:d1:7f:68:fb:14:42:53:63:a3:99:2e:99:96:a4:
4b:b2:22:dd:16:ff:cd:bd:6e:77:81:2f:80:dd:9c:
36:18:cd:7c:ee:22:be:cd:8b:03:a4:f4:79:72:88:
0e:20:a6:f9:06:dd:9a:8e:e2:2f:6a:62:1c:c5:11:
bb:73:36:fc:e0:01:d9:33:c1:f4:d2:d8:b9:2d:26:
1e:d5:14:3e:20:c5:4a:27:5b:d5:41:b6:2d:f8:db:
55:ef:57:34:52:a8:c8:80:07:5d:1c:92:0f:3c:8d:
f9:92:ff:08:f5:bf:b4:99:53:f0:03:76:74:b7:81:
00:e3:ba:8e:35:4f:12:6a:f8:16:aa:19:71:53:4a:
78:fa:21:c1:c4:0e:0e:e5:f1:15:34:e8:3d:ba:cc:
18:16:eb:25:3b:c1:91:44:7e:ce:a8:d3:8f:d0:f8:
78:4c:18:c3:bc:a3:44:ae:fe:32:cc:00:c0:dd:88:
ca:b2:b3:55:4a:38:6d:8c:db:af:24:63:e1:85:c8:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:7F:11:B0:2F:D2:86:5F:6A:CF:E3:F1:DD:9D:EF:FF:B9:C5:B9
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/IZp_EbAv0oZfas_j8d2d7_-5xbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fa:5e:24:01:fb:cc:f2:73:bd:ac:0c:e0:e8:7b:30:9b:e4:
a3:4d:47:56:d2:20:f7:43:df:b5:fc:4e:6f:73:9f:83:0c:34:
e2:18:12:1c:eb:2b:7e:5d:79:34:e9:6b:ec:07:32:74:cc:4a:
6e:1d:6d:fa:30:77:5d:60:2a:e7:3c:8b:e5:77:13:2e:4e:f3:
b0:07:fc:46:2a:4c:a0:45:09:27:e0:f2:8b:54:e7:63:a6:af:
db:95:88:81:87:7a:05:73:9b:b3:77:dc:24:b7:df:b3:2e:96:
01:16:9c:8d:eb:47:36:b4:22:20:2e:5d:f3:78:d7:5c:89:a3:
fb:cb:eb:b7:44:8f:1e:c1:2f:d4:7a:f0:7e:ef:85:5f:31:29:
09:00:21:b9:24:bd:72:be:7f:08:54:b0:54:2d:28:00:9b:07:
01:f3:16:c9:9a:6a:0e:d0:6c:be:9a:fc:f9:72:26:33:f5:4b:
1d:39:3d:2b:5f:d6:26:a7:f8:8d:01:65:e1:a2:09:1e:0a:91:
e8:57:ae:83:5e:15:f7:e9:58:3d:4a:84:13:74:6e:1b:c2:de:
90:71:2d:87:a9:fd:b2:37:18:fe:38:0c:1a:08:a5:f7:0f:3e:
8e:57:ea:11:7b:0e:8a:c2:da:8f:fe:34:ed:c5:09:5c:bf:b4:
d4:b4:36:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVJ4tzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWFlMWE2MDU4YmJkY2QwODM1MDY4ZTNiNGY5ZGU1MWYyYmQ5MDU3MB4XDTIyMDEw
MTAzMDExM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjE5YTdmMTFiMDJm
ZDI4NjVmNmFjZmUzZjFkZDlkZWZmZmI5YzViOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMpa4EAwiWljxBM//J4AcB1ddQZWTdkuUDkmhgtDB+pP56cd
l/cJc/clMHu3NAzFAH9W4et3fXJwq71dmtF/aPsUQlNjo5kumZakS7Ii3Rb/zb1u
d4EvgN2cNhjNfO4ivs2LA6T0eXKIDiCm+Qbdmo7iL2piHMURu3M2/OAB2TPB9NLY
uS0mHtUUPiDFSidb1UG2LfjbVe9XNFKoyIAHXRySDzyN+ZL/CPW/tJlT8AN2dLeB
AOO6jjVPEmr4FqoZcVNKePohwcQODuXxFTToPbrMGBbrJTvBkUR+zqjTj9D4eEwY
w7yjRK7+MswAwN2IyrKzVUo4bYzbryRj4YXIIGECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQhmn8RsC/Shl9qz+Px3Z3v/7nFuTAfBgNVHSMEGDAWgBQKrhpgWLvc0INQ
aOO0+d5R8r2QVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NxNGFZRmk3M05DRFVHamp0UG5lVWZLOWtGYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvOWMwYjJlLTdiZTktNGJjNC05MzIwLWIyMjQ3YjNhNTJkOC8x
L0lacF9FYkF2MG9aZmFzX2o4ZDJkN18tNXhiay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
OWMwYjJlLTdiZTktNGJjNC05MzIwLWIyMjQ3YjNhNTJkOC8xL0NxNGFZRmk3M05D
RFVHamp0UG5lVWZLOWtGYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHjjANBgkqhkiG9w0BAQsFAAOC
AQEAqPpeJAH7zPJzvawM4Oh7MJvko01HVtIg90PftfxOb3Ofgww04hgSHOsrfl15
NOlr7AcydMxKbh1t+jB3XWAq5zyL5XcTLk7zsAf8RipMoEUJJ+Dyi1TnY6av25WI
gYd6BXObs3fcJLffsy6WARacjetHNrQiIC5d83jXXImj+8vrt0SPHsEv1Hrwfu+F
XzEpCQAhuSS9cr5/CFSwVC0oAJsHAfMWyZpqDtBsvpr8+XImM/VLHTk9K1/WJqf4
jQFl4aIJHgqR6Feug14V9+lYPUqEE3RuG8LekHEth6n9sjcY/jgMGgil9w8+jlfq
EXsOisLaj/407cUJXL+01LQ2HA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:38 2025 by rpki-client