Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4LRNiYL-O-WXfbKZxir5xbTvZCc.roa
File: 4LRNiYL-O-WXfbKZxir5xbTvZCc.roa (raw, json)
Hash identifier: 3AKVhjZUnawoLBRdbtGrk6WM2SNWP/sO4H2L2uzWOsE=
Subject key identifier: E0:B4:4D:89:82:FE:3B:E5:97:7D:B2:99:C6:2A:F9:C5:B4:EF:64:27
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0184FCE694F8E77EF010C97611886C4749FB
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4LRNiYL-O-WXfbKZxir5xbTvZCc.roa
Signing time: Sat 10 Dec 2022 16:38:00 +0000
ROA not before: Sat 10 Dec 2022 16:38:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 91.103.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:e6:94:f8:e7:7e:f0:10:c9:76:11:88:6c:47:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Dec 10 16:38:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0b44d8982fe3be5977db299c62af9c5b4ef6427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:ab:b1:d8:a4:d7:cf:0e:ba:37:12:55:58:
c7:3e:76:0b:8b:df:a9:01:8f:5d:09:18:02:03:0a:
f6:b5:e0:20:42:4a:92:44:13:c1:8b:f6:91:a0:c0:
0e:88:67:d1:f2:68:91:9a:be:71:e0:98:c7:3a:85:
e2:bd:71:4d:ff:6e:94:4f:48:74:31:a6:69:4b:cb:
0c:af:9e:70:b5:56:c5:6d:5d:dc:b2:e9:94:b3:a2:
c9:4a:d8:b3:a2:ae:3d:33:66:7c:40:db:1a:c1:02:
8a:e6:07:56:31:fa:ab:6f:41:4f:e4:d8:1b:6c:c8:
f1:17:23:54:b3:76:2d:6d:ef:50:17:53:3c:53:24:
5e:3d:5e:59:d3:27:b8:20:c6:cd:e1:a8:9a:1c:c6:
c0:43:68:46:89:cd:12:8b:c3:89:81:af:bf:25:e3:
91:28:15:d8:07:9f:a5:fa:fd:42:2c:b9:28:c7:33:
de:f8:90:6c:92:e5:f7:03:05:bf:6b:54:3a:4f:26:
04:ef:b0:79:7c:b4:a1:29:14:6b:47:f5:ca:1d:f0:
97:b7:75:05:e8:75:61:7f:89:3a:48:99:a6:ec:a2:
ac:bc:00:3a:ca:fd:cd:4a:1e:7c:1f:16:9d:e4:a4:
c2:6e:e4:da:ed:8a:29:ee:94:8e:88:7f:a6:3e:df:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:4D:89:82:FE:3B:E5:97:7D:B2:99:C6:2A:F9:C5:B4:EF:64:27
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/4LRNiYL-O-WXfbKZxir5xbTvZCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:34:a3:d0:7c:00:76:3b:80:5d:c2:53:85:a7:8e:df:b3:b6:
c8:a2:8b:0b:1e:20:b5:27:55:aa:ea:4b:7a:96:28:cf:c1:52:
3d:2d:d7:bf:1d:22:fd:42:e0:c7:74:93:5b:cf:60:0a:67:a4:
95:4d:fb:d4:e3:ae:26:4a:74:35:23:f3:d3:78:fe:8e:64:7c:
86:a3:54:5a:f7:13:6c:0f:28:13:31:b7:0d:aa:b3:98:26:82:
da:a3:9e:6d:22:bb:a1:27:4e:c3:a9:62:d5:ce:68:6c:03:17:
bd:fb:6e:dc:ed:2d:5d:5e:0e:01:26:f3:fa:28:ce:d7:86:1d:
1a:5e:ed:5b:82:61:d6:68:c6:27:2f:d1:0c:b2:1b:0f:a0:db:
91:d7:91:3b:a3:73:19:54:a8:1d:20:5e:ba:87:9d:10:63:b5:
d3:84:77:b2:d5:9a:52:6d:54:88:57:d4:36:f7:31:11:10:07:
f1:fa:11:2e:70:f9:ad:0f:b3:f0:8c:da:bc:07:ce:ce:78:64:
24:c4:f1:cd:ff:31:7b:82:48:0b:89:60:1b:21:b4:c9:0c:41:
f7:d3:f9:46:b2:1c:36:5b:4b:ea:44:ad:ae:4f:4b:e4:20:6e:
2e:da:1d:ce:5b:54:ae:81:e4:97:32:43:85:dd:d7:30:4b:b0:
8d:4e:09:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYT85pT4537wEMl2EYhsR0n7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjIxMjEwMTYzODAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGI0NGQ4OTgyZmUzYmU1OTc3ZGIyOTljNjJhZjljNWI0ZWY2NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQKrsdik188OujcSVVjHPnYLi9+p
AY9dCRgCAwr2teAgQkqSRBPBi/aRoMAOiGfR8miRmr5x4JjHOoXivXFN/26UT0h0
MaZpS8sMr55wtVbFbV3csumUs6LJStizoq49M2Z8QNsawQKK5gdWMfqrb0FP5Ngb
bMjxFyNUs3Ytbe9QF1M8UyRePV5Z0ye4IMbN4aiaHMbAQ2hGic0Si8OJga+/JeOR
KBXYB5+l+v1CLLkoxzPe+JBskuX3AwW/a1Q6TyYE77B5fLShKRRrR/XKHfCXt3UF
6HVhf4k6SJmm7KKsvAA6yv3NSh58Hxad5KTCbuTa7Yop7pSOiH+mPt+RUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOC0TYmC/jvll32ymcYq+cW072QnMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvNExSTmlZTC1PLVdYZmJLWnhpcjV4YlR2WkNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2d8MA0G
CSqGSIb3DQEBCwUAA4IBAQCINKPQfAB2O4BdwlOFp47fs7bIoosLHiC1J1Wq6kt6
lijPwVI9Lde/HSL9QuDHdJNbz2AKZ6SVTfvU464mSnQ1I/PTeP6OZHyGo1Ra9xNs
DygTMbcNqrOYJoLao55tIruhJ07DqWLVzmhsAxe9+27c7S1dXg4BJvP6KM7Xhh0a
Xu1bgmHWaMYnL9EMshsPoNuR15E7o3MZVKgdIF66h50QY7XThHey1ZpSbVSIV9Q2
9zEREAfx+hEucPmtD7PwjNq8B87OeGQkxPHN/zF7gkgLiWAbIbTJDEH30/lGshw2
W0vqRK2uT0vkIG4u2h3OW1SugeSXMkOF3dcwS7CNTgnz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org