Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/Jz0Umh4ALepuM5hZHJO0r8h5exk.roa
File: Jz0Umh4ALepuM5hZHJO0r8h5exk.roa (raw, json)
Hash identifier: YFyk+graWAqQf/l1wUA/8UdGYuT2PLNYEP/b28Gbizw=
Subject key identifier: 27:3D:14:9A:1E:00:2D:EA:6E:33:98:59:1C:93:B4:AF:C8:79:7B:19
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0349A951
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/Jz0Umh4ALepuM5hZHJO0r8h5exk.roa
Signing time: Sat 01 Jan 2022 14:06:15 +0000
ROA not before: Sat 01 Jan 2022 14:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 91.234.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55159121 (0x349a951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jan 1 14:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=273d149a1e002dea6e3398591c93b4afc8797b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:99:e8:cb:86:95:22:6e:71:1f:e0:83:52:ef:
a3:40:86:0a:18:0c:02:18:5f:e8:5f:ca:c5:81:95:
f3:8d:bf:43:8d:3c:7c:c6:f6:e0:33:cc:1d:85:3f:
94:1e:11:e2:76:b0:f1:26:d0:b6:a1:90:be:00:aa:
9c:60:9d:23:42:2c:83:c3:f6:20:fb:d4:0b:5a:58:
bc:9f:8b:5b:20:70:7f:b5:cc:97:6f:f4:c6:83:7b:
97:84:3c:16:03:bf:0d:b5:b6:d6:78:e4:4b:9b:06:
f2:5b:6b:b0:89:75:21:b0:3b:75:aa:f6:9f:f0:f8:
40:e0:28:38:5b:69:5d:88:b8:0c:3f:fa:ff:a8:7a:
1a:e7:fc:74:4b:b2:0d:50:f4:4a:a6:88:a5:2e:98:
a8:d2:35:06:0b:5f:40:a8:47:39:0d:d4:b0:a3:4a:
6a:34:29:b7:bf:7c:f9:3e:67:18:03:a0:f1:79:19:
10:e2:51:70:6b:04:66:fa:f7:b2:63:ca:b1:17:0a:
9a:94:dc:e4:a2:2d:45:a6:ae:50:6b:91:f3:16:8a:
cf:a4:39:71:1b:97:1d:58:99:f2:a1:75:0c:11:5c:
6b:bb:a1:b8:94:b0:6c:82:dd:da:75:5b:7d:78:1d:
6d:2d:7f:e2:3f:be:4a:e9:e6:b3:42:d5:60:08:d9:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:14:9A:1E:00:2D:EA:6E:33:98:59:1C:93:B4:AF:C8:79:7B:19
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/Jz0Umh4ALepuM5hZHJO0r8h5exk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:85:aa:62:a5:0a:65:47:d3:34:57:fe:10:90:8a:07:e7:3d:
d1:ca:40:e4:b0:57:b6:5f:cb:10:84:8b:6a:5d:7d:4d:4a:18:
d7:08:1e:c1:c2:4a:69:d4:84:c8:76:66:d6:3b:ca:f4:df:66:
86:0d:69:78:59:11:98:64:94:f9:e9:12:06:f7:8a:bd:63:3b:
7b:5a:6f:b7:dd:93:90:19:13:20:4d:8c:c8:5f:ad:3f:cd:56:
36:10:d3:28:f1:27:fb:2e:87:9b:ea:07:55:4d:de:8e:7d:18:
e7:e8:f4:03:a8:fd:04:fb:42:c0:90:22:b0:15:42:8f:b8:1e:
11:b7:9b:2a:1e:4e:27:20:9a:94:a4:b8:38:13:65:bf:f5:17:
3a:7f:8b:1e:5d:f7:1b:85:0c:9a:3d:a4:80:75:d1:47:1f:3b:
7b:aa:54:10:15:8c:b2:05:d6:e6:9d:7a:60:93:53:4b:ae:1e:
a2:7f:0f:f0:94:5c:ff:33:be:70:e8:05:1a:03:38:09:56:50:
b9:e6:91:3c:6a:57:6f:57:22:ae:35:83:aa:fc:1c:cc:9b:f1:
ca:f2:63:49:03:9c:38:70:72:70:04:b5:86:85:c5:ca:a9:64:
55:a8:2d:d2:ef:85:91:6f:c6:88:58:91:65:92:57:d2:9e:eb:
88:86:4c:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA0mpUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZTcxODBjNGJhZDNjZjQyNWE1MDY3MmUxY2I3YTlkMmFjNzhlMjBjMB4XDTIyMDEw
MTE0MDYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjczZDE0OWExZTAw
MmRlYTZlMzM5ODU5MWM5M2I0YWZjODc5N2IxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO+Z6MuGlSJucR/gg1Lvo0CGChgMAhhf6F/KxYGV842/Q408
fMb24DPMHYU/lB4R4naw8SbQtqGQvgCqnGCdI0Isg8P2IPvUC1pYvJ+LWyBwf7XM
l2/0xoN7l4Q8FgO/DbW21njkS5sG8ltrsIl1IbA7dar2n/D4QOAoOFtpXYi4DD/6
/6h6Guf8dEuyDVD0SqaIpS6YqNI1BgtfQKhHOQ3UsKNKajQpt798+T5nGAOg8XkZ
EOJRcGsEZvr3smPKsRcKmpTc5KItRaauUGuR8xaKz6Q5cRuXHViZ8qF1DBFca7uh
uJSwbILd2nVbfXgdbS1/4j++Sunms0LVYAjZiecCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQnPRSaHgAt6m4zmFkck7SvyHl7GTAfBgNVHSMEGDAWgBTOcYDEutPPQlpQ
Zy4ct6nSrHjiDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3puR0F4THJUejBKYVVHY3VITGVwMHF4NDRndy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvZDdkNWNkLTc5YTktNGM4Mi04ZmM0LTA0NmQyZTJhZGNkNS8x
L0p6MFVtaDRBTGVwdU01aFpISk8wcjhoNWV4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
ZDdkNWNkLTc5YTktNGM4Mi04ZmM0LTA0NmQyZTJhZGNkNS8xL3puR0F4THJUejBK
YVVHY3VITGVwMHF4NDRndy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvqCTANBgkqhkiG9w0BAQsFAAOC
AQEAWoWqYqUKZUfTNFf+EJCKB+c90cpA5LBXtl/LEISLal19TUoY1wgewcJKadSE
yHZm1jvK9N9mhg1peFkRmGSU+ekSBveKvWM7e1pvt92TkBkTIE2MyF+tP81WNhDT
KPEn+y6Hm+oHVU3ejn0Y5+j0A6j9BPtCwJAisBVCj7geEbebKh5OJyCalKS4OBNl
v/UXOn+LHl33G4UMmj2kgHXRRx87e6pUEBWMsgXW5p16YJNTS64eon8P8JRc/zO+
cOgFGgM4CVZQueaRPGpXb1cirjWDqvwczJvxyvJjSQOcOHBycAS1hoXFyqlkVagt
0u+FkW/GiFiRZZJX0p7riIZMIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:59 2024 by rpki-client on console-ams.rpki-client.org