Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/M9Fi97WqLP9zMcI_FG992jwVqIE.roa
File: M9Fi97WqLP9zMcI_FG992jwVqIE.roa (raw, json)
Hash identifier: pskjEerrQ2Ls9gj8QaESnGbIghrtmfSdEuTGrBkEPDg=
Subject key identifier: 33:D1:62:F7:B5:AA:2C:FF:73:31:C2:3F:14:6F:7D:DA:3C:15:A8:81
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 0D9B3818
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/M9Fi97WqLP9zMcI_FG992jwVqIE.roa
Signing time: Sat 01 Jan 2022 10:02:07 +0000
ROA not before: Sat 01 Jan 2022 10:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34121
IP address blocks: 91.201.184.0/24 maxlen: 24
91.201.185.0/24 maxlen: 24
91.201.186.0/24 maxlen: 24
91.201.184.0/22 maxlen: 22
91.201.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228276248 (0xd9b3818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Jan 1 10:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d162f7b5aa2cff7331c23f146f7dda3c15a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:7d:98:90:63:28:c3:db:43:66:14:1e:4d:
bb:37:27:cb:a0:0f:6a:eb:a2:9f:65:57:da:7d:44:
1a:20:76:82:3d:75:1c:75:a4:87:74:7d:1c:bb:02:
4e:ff:35:6c:bf:cb:5a:b8:63:ed:79:7d:78:fa:4b:
60:4e:d0:13:ee:5e:8d:10:85:ea:24:e0:28:83:b8:
a4:6b:0c:76:e5:b4:ee:55:02:70:5a:54:3b:fc:25:
9a:6b:79:a2:6d:ef:85:e5:72:eb:99:e5:23:65:d4:
0a:22:86:20:90:29:55:31:2a:a9:5e:03:a1:68:dd:
a7:29:80:02:3d:8f:fd:38:44:6f:f3:3f:4b:4f:23:
8a:de:2e:81:84:c2:ab:aa:ff:21:dd:c0:b9:bf:e2:
dc:ab:f2:16:34:4f:46:51:d4:d6:73:89:b8:e1:a3:
9f:94:6a:93:20:ff:a1:55:9a:ed:f6:f4:64:c8:2f:
51:63:92:6d:1d:03:1e:0a:84:4d:c3:46:17:fe:37:
a6:e6:40:3b:d6:00:f1:74:c2:53:bb:c5:68:fa:45:
25:e9:84:b9:1f:3c:57:c5:f1:35:b9:58:d3:08:52:
97:04:27:ec:91:98:c1:17:a6:a6:57:df:53:8f:32:
8f:0f:e3:13:5a:85:3e:02:cb:e7:96:cc:fd:40:44:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:62:F7:B5:AA:2C:FF:73:31:C2:3F:14:6F:7D:DA:3C:15:A8:81
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/M9Fi97WqLP9zMcI_FG992jwVqIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:83:9f:95:83:6b:a3:0b:6c:17:b7:67:59:fd:73:17:d0:13:
5c:14:5b:32:45:c2:30:b3:86:29:ba:41:cf:e5:05:ad:d9:6f:
aa:c0:f2:59:6b:42:53:60:62:e8:f1:93:de:28:ce:90:8a:fa:
22:ee:37:16:0e:1a:52:9b:2d:68:91:82:c1:3f:06:1f:7c:fa:
d2:da:5d:46:9d:bc:71:53:97:f6:79:82:ce:74:d3:f4:f8:0e:
73:43:4f:31:b6:4e:d1:5a:05:b3:98:74:c3:e9:94:a9:ff:0b:
e3:e7:a0:37:dc:02:8b:80:e6:ad:62:40:ef:53:65:88:dc:ca:
26:11:ae:16:cc:d9:04:30:75:2e:c3:4b:50:3b:11:11:a7:65:
fa:39:4b:5b:5e:8b:52:4e:91:21:80:b2:31:ff:ee:89:a2:9c:
4c:65:af:c0:d3:1f:ff:64:c0:88:35:fc:a4:0f:cc:96:79:64:
e2:c1:39:c3:ff:63:27:03:f5:90:81:66:17:ad:1c:51:67:3e:
9c:f2:01:49:61:fc:ab:c5:4d:67:0d:92:b1:22:fc:90:4b:30:
a7:05:51:64:7e:b3:7a:9d:4b:c8:6f:38:cb:b0:fb:27:91:b3:
92:be:9f:a6:7b:23:72:06:cc:fc:92:15:1b:4d:82:ae:ca:05:
b9:ed:b8:55
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDZs4GDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZDEyZTBjNzc3NDE5MWE1NWMzZDE5MzFmYmYyMDAwNDMzNWZkMjFjMB4XDTIyMDEw
MTEwMDIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNkMTYyZjdiNWFh
MmNmZjczMzFjMjNmMTQ2ZjdkZGEzYzE1YTg4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALL5fZiQYyjD20NmFB5Nuzcny6APauuin2VX2n1EGiB2gj11
HHWkh3R9HLsCTv81bL/LWrhj7Xl9ePpLYE7QE+5ejRCF6iTgKIO4pGsMduW07lUC
cFpUO/wlmmt5om3vheVy65nlI2XUCiKGIJApVTEqqV4DoWjdpymAAj2P/ThEb/M/
S08jit4ugYTCq6r/Id3Aub/i3KvyFjRPRlHU1nOJuOGjn5RqkyD/oVWa7fb0ZMgv
UWOSbR0DHgqETcNGF/43puZAO9YA8XTCU7vFaPpFJemEuR88V8XxNblY0whSlwQn
7JGYwRemplffU48yjw/jE1qFPgLL55bM/UBEjnkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQz0WL3taos/3Mxwj8Ub33aPBWogTAfBgNVHSMEGDAWgBQNEuDHd0GRpVw9
GTH78gAEM1/SHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RSTGd4M2RCa2FWY1BSa3gtX0lBQkROZjBody5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvOTJiNTQ4LWZkYmEtNGNkNC04MzYxLTNjZDk1MmJhMDA1ZC8x
L005Rmk5N1dxTFA5ek1jSV9GRzk5Mmp3VnFJRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
OTJiNTQ4LWZkYmEtNGNkNC04MzYxLTNjZDk1MmJhMDA1ZC8xL0RSTGd4M2RCa2FW
Y1BSa3gtX0lBQkROZjBody5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvJuDANBgkqhkiG9w0BAQsFAAOC
AQEAeIOflYNrowtsF7dnWf1zF9ATXBRbMkXCMLOGKbpBz+UFrdlvqsDyWWtCU2Bi
6PGT3ijOkIr6Iu43Fg4aUpstaJGCwT8GH3z60tpdRp28cVOX9nmCznTT9PgOc0NP
MbZO0VoFs5h0w+mUqf8L4+egN9wCi4DmrWJA71NliNzKJhGuFszZBDB1LsNLUDsR
Eadl+jlLW16LUk6RIYCyMf/uiaKcTGWvwNMf/2TAiDX8pA/Mlnlk4sE5w/9jJwP1
kIFmF60cUWc+nPIBSWH8q8VNZw2SsSL8kEswpwVRZH6zep1LyG84y7D7J5Gzkr6f
pnsjcgbM/JIVG02CrsoFue24VQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:26 2024 by rpki-client on console-fra.rpki-client.org