Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/XZoJYrlMQ_89gdHzguMZ5HwMtpY.roa
File: XZoJYrlMQ_89gdHzguMZ5HwMtpY.roa (raw, json)
Hash identifier: KdVK8u0C9MUtiKCciaFNrqzgpdn+6c4YDRg5EbVpZXg=
Subject key identifier: 5D:9A:09:62:B9:4C:43:FF:3D:81:D1:F3:82:E3:19:E4:7C:0C:B6:96
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A948DB5
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/XZoJYrlMQ_89gdHzguMZ5HwMtpY.roa
Signing time: Sun 20 Mar 2022 17:29:49 +0000
ROA not before: Sun 20 Mar 2022 17:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 91.222.43.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177507765 (0xa948db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 20 17:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d9a0962b94c43ff3d81d1f382e319e47c0cb696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:22:3b:cf:66:bc:5d:80:5f:5c:7d:38:8b:
23:69:f6:46:ed:f7:7a:fa:bc:45:44:97:a8:83:e7:
0f:1d:28:2f:da:87:ce:a3:9a:67:28:f2:64:d2:16:
76:4a:5e:b6:40:2d:ab:2b:1b:ca:bc:32:01:0e:fa:
c2:20:56:3f:44:71:1f:b8:51:b8:57:57:36:8d:b5:
dc:95:f4:fb:19:4f:06:88:0a:41:67:a0:82:30:0c:
5c:f1:30:94:c8:df:16:7c:e5:b3:24:80:3c:a2:48:
56:93:dc:1c:34:16:e3:65:bf:87:48:43:39:10:96:
f8:9e:8a:94:6d:ef:cf:a8:27:eb:10:26:c0:8a:71:
e1:1c:d1:13:18:23:ab:18:f7:3f:0a:ad:a0:ee:b6:
5b:e5:ab:d1:69:de:8a:5a:0d:a5:81:37:a7:46:e1:
0b:6c:07:30:4b:1a:90:3e:85:42:87:f5:35:6e:7e:
01:b0:be:d9:bd:dd:d3:43:4e:ef:db:bc:2d:a2:38:
da:24:16:27:57:b1:9b:6b:6e:b9:19:51:81:30:c8:
25:e5:c8:1f:cf:af:47:07:a6:8e:b1:2f:cb:f4:3e:
ab:0b:59:1a:65:76:3b:4f:65:38:c5:a8:cb:81:07:
1e:92:41:cf:f4:32:f4:3e:37:df:61:83:f0:55:d6:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:09:62:B9:4C:43:FF:3D:81:D1:F3:82:E3:19:E4:7C:0C:B6:96
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/XZoJYrlMQ_89gdHzguMZ5HwMtpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.43.0/24
185.149.12.0/24
Signature Algorithm: sha256WithRSAEncryption
96:95:6e:20:f2:0d:dd:7a:29:36:49:01:11:34:ef:4b:61:13:
cf:dd:af:b6:75:57:ad:b0:6f:35:1a:ae:96:19:0d:63:a6:25:
5c:fd:64:0e:b8:df:cb:76:e8:ea:01:db:7c:43:f0:fb:61:bb:
2d:e2:f0:d8:ad:c5:1b:10:1e:c0:e7:ff:47:ac:8f:e3:23:b8:
3f:a3:de:6d:eb:60:67:3e:fa:bd:52:3d:0c:96:84:b2:28:96:
9f:72:1f:94:41:24:74:be:d0:c4:b2:43:8c:14:f9:d5:7c:01:
7d:78:b3:b9:26:07:27:5c:ef:e0:f4:dd:23:c9:1d:28:32:e4:
0a:8c:e3:97:13:67:72:5d:76:9c:e5:15:2e:3b:b5:6a:16:ed:
60:df:5e:9d:d8:87:85:fe:20:3d:c6:19:3f:66:34:eb:86:d3:
45:d5:06:f7:ea:7d:0a:aa:92:d5:39:95:0d:c4:34:d5:d1:0c:
8c:b0:c2:40:47:50:aa:84:30:21:ba:11:bd:6f:ae:ad:8d:d8:
da:9a:81:50:b6:0b:79:31:d3:a8:8d:85:ba:37:99:5b:60:f5:
d6:c0:68:e2:fa:e9:08:33:2d:e3:bb:6d:b5:0e:53:e3:4a:12:
89:85:61:ea:b9:4d:14:5e:41:aa:64:29:ed:5a:64:9b:e1:53:
f5:29:06:30
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECpSNtTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDE2NmI3MDQ4NDNkM2Q5NzU0MDk1YzgzYTkxYjQ5MzgyODIwMGEyMB4XDTIyMDMy
MDE3Mjk0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWQ5YTA5NjJiOTRj
NDNmZjNkODFkMWYzODJlMzE5ZTQ3YzBjYjY5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ7+IjvPZrxdgF9cfTiLI2n2Ru33evq8RUSXqIPnDx0oL9qH
zqOaZyjyZNIWdkpetkAtqysbyrwyAQ76wiBWP0RxH7hRuFdXNo213JX0+xlPBogK
QWeggjAMXPEwlMjfFnzlsySAPKJIVpPcHDQW42W/h0hDORCW+J6KlG3vz6gn6xAm
wIpx4RzRExgjqxj3PwqtoO62W+Wr0WneiloNpYE3p0bhC2wHMEsakD6FQof1NW5+
AbC+2b3d00NO79u8LaI42iQWJ1exm2tuuRlRgTDIJeXIH8+vRwemjrEvy/Q+qwtZ
GmV2O09lOMWoy4EHHpJBz/Qy9D4332GD8FXWdQECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRdmgliuUxD/z2B0fOC4xnkfAy2ljAfBgNVHSMEGDAWgBSUFmtwSEPT2XVA
lcg6kbSTgoIAojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xCWnJjRWhEMDlsMVFKWElPcEcwazRLQ0FLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNDNmZjhmLWNkNTQtNGNmMS04YWFmLTRiZTE4ZWYxMjhiNC8x
L1hab0pZcmxNUV84OWdkSHpndU1aNUh3TXRwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NDNmZjhmLWNkNTQtNGNmMS04YWFmLTRiZTE4ZWYxMjhiNC8xL2xCWnJjRWhEMDls
MVFKWElPcEcwazRLQ0FLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFveKwMEALmVDDANBgkqhkiG9w0B
AQsFAAOCAQEAlpVuIPIN3XopNkkBETTvS2ETz92vtnVXrbBvNRqulhkNY6YlXP1k
Drjfy3bo6gHbfEPw+2G7LeLw2K3FGxAewOf/R6yP4yO4P6PebetgZz76vVI9DJaE
siiWn3IflEEkdL7QxLJDjBT51XwBfXizuSYHJ1zv4PTdI8kdKDLkCozjlxNncl12
nOUVLju1ahbtYN9endiHhf4gPcYZP2Y064bTRdUG9+p9CqqS1TmVDcQ01dEMjLDC
QEdQqoQwIboRvW+urY3Y2pqBULYLeTHTqI2FujeZW2D11sBo4vrpCDMt47tttQ5T
40oSiYVh6rlNFF5BqmQp7Vpkm+FT9SkGMA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org