Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/1-h0RIPOvQp7ykaiIWlSHCmCoWP8.roa
File: 1-h0RIPOvQp7ykaiIWlSHCmCoWP8.roa (raw, json)
Hash identifier: vp+TBde0OpDUYyw7HdUV7TcknOhYsEk+92yTOBD55o8=
Subject key identifier: FA:1D:11:20:F3:AF:42:9E:F2:91:A8:88:5A:54:87:0A:60:A8:58:FF
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 018570427B7838B642B0DA45A4B466C2B866
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/1-h0RIPOvQp7ykaiIWlSHCmCoWP8.roa
Signing time: Mon 02 Jan 2023 02:14:43 +0000
ROA not before: Mon 02 Jan 2023 02:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44697
IP address blocks: 91.199.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:7b:78:38:b6:42:b0:da:45:a4:b4:66:c2:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Jan 2 02:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1d1120f3af429ef291a8885a54870a60a858ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:69:e2:bc:ab:23:de:de:b6:22:4b:bf:3a:
f4:e4:cb:05:99:b1:a7:f4:e4:4f:cd:38:21:ab:b1:
6d:cc:4d:8f:1f:c6:9f:02:89:63:ab:cf:87:9b:4a:
91:2b:26:d9:2c:76:f1:fe:ae:dd:dd:34:ef:ff:bc:
b7:e7:98:6b:e2:22:73:27:ad:96:59:5f:bf:2b:ab:
b5:00:46:9d:d4:d8:e9:59:d1:53:c7:ec:c0:0e:ce:
73:3b:05:35:48:ce:3f:49:a1:c2:62:9d:a4:aa:21:
f6:ad:5c:d5:75:8b:c3:c1:ec:57:52:86:0c:d2:b0:
07:af:e4:3f:5f:68:3b:01:d0:9a:ca:d4:08:45:62:
63:a6:56:85:4e:61:ee:95:1e:8e:5d:56:56:43:d4:
d6:c6:18:45:c4:44:83:77:b5:4a:00:e4:fe:38:ec:
ec:fc:23:06:f7:14:f5:2a:1a:1a:30:66:be:b1:22:
e5:4a:7b:43:f3:fc:a3:f5:1f:cf:07:7c:f4:7d:e0:
e4:f7:a4:09:70:ef:88:d6:7e:38:d7:f5:10:0d:4b:
73:c0:9a:50:b6:33:06:50:cb:bd:99:f7:2d:b0:df:
7f:82:28:82:81:fe:04:f5:64:08:8a:37:c7:17:6e:
3a:60:c0:8f:b1:ff:59:48:11:b1:eb:05:77:03:bc:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:11:20:F3:AF:42:9E:F2:91:A8:88:5A:54:87:0A:60:A8:58:FF
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/1-h0RIPOvQp7ykaiIWlSHCmCoWP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.183.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4a:40:34:d0:11:7b:33:5c:e6:a6:d7:33:ff:4e:6a:38:27:
a2:a3:f5:7c:2b:e8:86:ac:79:53:8c:bd:74:a8:70:1e:8a:e6:
dd:f6:bb:82:f9:31:73:37:b5:90:74:25:5a:0d:23:49:bd:c9:
b2:05:e6:98:eb:2b:3a:2c:0a:15:47:ce:31:2f:fa:37:03:3c:
5a:ad:59:c0:1f:66:75:e8:ae:60:05:d4:c1:f7:8f:6c:92:9f:
53:89:a0:22:00:3d:f7:b4:86:7f:49:f1:c4:ea:2f:11:1f:5c:
75:fc:3e:7a:cd:1e:97:a4:39:97:f9:41:9f:c3:9f:e3:73:7a:
72:81:36:70:01:11:ca:c4:c2:9b:f5:88:92:8c:8c:aa:cf:5e:
26:b3:b0:ab:a4:91:36:fa:2b:8d:17:99:43:32:af:8a:e7:91:
26:bb:8c:bb:29:b2:ec:8a:f5:aa:d2:af:f6:48:d2:91:15:e7:
f5:bb:6e:11:72:35:4f:09:5b:af:32:99:03:1b:b5:69:c8:04:
34:18:dc:1b:13:03:a2:75:00:f2:4a:2f:c8:f1:97:df:88:1a:
74:8e:7d:8d:c4:2d:74:11:c0:4a:3a:09:fd:22:77:03:61:80:
c7:da:12:61:a2:1d:a8:9c:c8:88:35:fd:7d:8f:d8:70:49:6d:
97:53:b8:25
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwQnt4OLZCsNpFpLRmwrhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk
MDk2OWUwHhcNMjMwMTAyMDIxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTFkMTEyMGYzYWY0MjllZjI5MWE4ODg1YTU0ODcwYTYwYTg1OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01dp4ryrI97etiJLvzr05MsFmbGn
9ORPzTghq7FtzE2PH8afAoljq8+Hm0qRKybZLHbx/q7d3TTv/7y355hr4iJzJ62W
WV+/K6u1AEad1NjpWdFTx+zADs5zOwU1SM4/SaHCYp2kqiH2rVzVdYvDwexXUoYM
0rAHr+Q/X2g7AdCaytQIRWJjplaFTmHulR6OXVZWQ9TWxhhFxESDd7VKAOT+OOzs
/CMG9xT1KhoaMGa+sSLlSntD8/yj9R/PB3z0feDk96QJcO+I1n441/UQDUtzwJpQ
tjMGUMu9mfctsN9/giiCgf4E9WQIijfHF246YMCPsf9ZSBGx6wV3A7zPlwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPodESDzr0Ke8pGoiFpUhwpgqFj/MB8GA1UdIwQY
MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt
M2EwMDMxMzVhYWQxLzEvMS1oMFJJUE92UXA3eWthaUlXbFNIQ21Db1dQOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjAvNzE1ZTFjLTU1MTItNGViNC05YmEzLTNhMDAzMTM1YWFk
MS8xL1dzUmRtaG9pUVdnejNsbWw1aG5SSUpiUWxwNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHtzAN
BgkqhkiG9w0BAQsFAAOCAQEACEpANNARezNc5qbXM/9OajgnoqP1fCvohqx5U4y9
dKhwHorm3fa7gvkxcze1kHQlWg0jSb3JsgXmmOsrOiwKFUfOMS/6NwM8Wq1ZwB9m
deiuYAXUwfePbJKfU4mgIgA997SGf0nxxOovER9cdfw+es0el6Q5l/lBn8Of43N6
coE2cAERysTCm/WIkoyMqs9eJrOwq6SRNvorjReZQzKviueRJruMuymy7Ir1qtKv
9kjSkRXn9btuEXI1TwlbrzKZAxu1acgENBjcGxMDonUA8kovyPGX34gadI59jcQt
dBHASjoJ/SJ3A2GAx9oSYaIdqJzIiDX9fY/YcEltl1O4JQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:24 2025 by rpki-client