Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/n4l76ARAqU5Bvu2e1ExT11GV3K0.roa
File: n4l76ARAqU5Bvu2e1ExT11GV3K0.roa (raw, json)
Hash identifier: bt5ivArZwEV9bqpFFgtz5dv9jUHQWXPF2RNW45+8l8o=
Subject key identifier: 9F:89:7B:E8:04:40:A9:4E:41:BE:ED:9E:D4:4C:53:D7:51:95:DC:AD
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 018427F1873341CC4FE5F57761470DD8D026
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/n4l76ARAqU5Bvu2e1ExT11GV3K0.roa
Signing time: Sun 30 Oct 2022 08:10:50 +0000
ROA not before: Sun 30 Oct 2022 08:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 91.208.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:f1:87:33:41:cc:4f:e5:f5:77:61:47:0d:d8:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Oct 30 08:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f897be80440a94e41beed9ed44c53d75195dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:24:47:81:13:c5:72:fd:0d:85:a5:74:d3:
aa:5a:29:95:ed:95:b6:79:10:91:70:15:00:51:37:
0e:43:a5:27:de:a1:d1:6a:71:38:85:38:e8:f9:1a:
02:7f:1a:d6:c3:65:2c:94:24:05:ea:0c:91:cc:4d:
6a:36:35:04:25:87:ae:5b:15:8c:4c:a5:81:59:fd:
e7:e4:4d:ef:a2:f5:16:3f:86:d8:af:9e:6d:da:19:
be:27:23:4c:ac:0a:1a:b5:98:f0:1a:b3:46:84:9b:
73:e2:61:f5:67:6d:58:46:b8:65:40:fe:ec:7a:db:
44:a2:17:36:e4:97:95:b1:6f:fe:4f:e8:99:eb:3a:
b5:28:4b:ec:a9:fc:38:fd:de:15:8a:49:c4:10:cd:
88:3f:d1:25:8b:ec:1e:8d:d2:5e:12:75:e9:6c:38:
4f:cf:97:e6:0f:bb:fc:ca:87:7a:13:02:5e:b6:e2:
53:ef:07:c0:c3:61:5d:29:7c:e2:cb:00:17:05:59:
c5:37:e3:63:45:d4:35:9d:1c:c9:9d:89:aa:21:b6:
a7:fa:fc:ab:50:07:91:9a:8f:e9:b2:bc:68:12:06:
ca:32:f9:91:7b:11:8e:e8:65:12:d1:f2:59:cb:d5:
4c:bf:1a:5d:05:11:3d:5f:fe:d3:2c:f0:7d:c1:d5:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:7B:E8:04:40:A9:4E:41:BE:ED:9E:D4:4C:53:D7:51:95:DC:AD
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/n4l76ARAqU5Bvu2e1ExT11GV3K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:da:18:67:7d:39:c9:16:9f:71:a7:e8:a7:03:e9:d2:d5:7e:
63:8b:70:ef:e9:f4:1e:a0:fb:af:dc:49:cb:af:90:1f:f1:56:
26:5e:51:e5:af:a5:18:d6:22:f0:92:28:e3:4c:d1:a4:22:2e:
ac:d3:70:d8:40:20:1e:87:cc:a6:b2:6d:64:8f:59:36:23:ee:
0d:ad:1d:32:f8:3b:ad:09:fb:ea:48:c2:d3:dd:f7:c1:73:3e:
67:6b:86:35:26:e7:db:53:59:19:54:3c:28:58:e8:31:3a:e6:
c4:5c:e2:57:f3:74:3a:76:f8:b7:df:8b:4d:d0:29:39:9c:e9:
df:cf:32:ac:bc:21:47:6c:1e:36:bf:50:d3:3d:e8:bb:33:89:
66:94:6e:4e:80:a0:56:94:93:7d:52:a3:41:52:e5:c5:b0:0b:
4d:cc:ba:98:48:33:87:ee:3e:c8:a8:5b:06:76:e1:e6:fa:81:
7a:5a:2a:3d:00:e2:8d:43:ad:ae:19:59:ff:1d:74:55:70:5c:
b9:2e:5c:fa:5e:72:0a:e4:e6:f6:75:e7:d5:ea:f6:bd:b9:95:
ff:e1:7e:ac:c9:c2:8a:da:e6:16:d4:7a:22:44:5f:3b:18:9d:
34:94:f4:f5:1f:77:d7:81:16:7a:32:bf:a7:71:41:d8:e3:35:
10:92:3a:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQn8YczQcxP5fV3YUcN2NAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjIxMDMwMDgxMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjg5N2JlODA0NDBhOTRlNDFiZWVkOWVkNDRjNTNkNzUxOTVkY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eQkR4ETxXL9DYWldNOqWimV7ZW2
eRCRcBUAUTcOQ6Un3qHRanE4hTjo+RoCfxrWw2UslCQF6gyRzE1qNjUEJYeuWxWM
TKWBWf3n5E3vovUWP4bYr55t2hm+JyNMrAoatZjwGrNGhJtz4mH1Z21YRrhlQP7s
ettEohc25JeVsW/+T+iZ6zq1KEvsqfw4/d4ViknEEM2IP9Eli+wejdJeEnXpbDhP
z5fmD7v8yod6EwJetuJT7wfAw2FdKXziywAXBVnFN+NjRdQ1nRzJnYmqIban+vyr
UAeRmo/psrxoEgbKMvmRexGO6GUS0fJZy9VMvxpdBRE9X/7TLPB9wdUV2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+Je+gEQKlOQb7tntRMU9dRldytMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvbjRsNzZBUkFxVTVCdnUyZTFFeFQxMUdWM0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ClMA0G
CSqGSIb3DQEBCwUAA4IBAQCx2hhnfTnJFp9xp+inA+nS1X5ji3Dv6fQeoPuv3EnL
r5Af8VYmXlHlr6UY1iLwkijjTNGkIi6s03DYQCAeh8ymsm1kj1k2I+4NrR0y+Dut
CfvqSMLT3ffBcz5na4Y1JufbU1kZVDwoWOgxOubEXOJX83Q6dvi334tN0Ck5nOnf
zzKsvCFHbB42v1DTPei7M4lmlG5OgKBWlJN9UqNBUuXFsAtNzLqYSDOH7j7IqFsG
duHm+oF6Wio9AOKNQ62uGVn/HXRVcFy5Llz6XnIK5Ob2defV6va9uZX/4X6sycKK
2uYW1HoiRF87GJ00lPT1H3fXgRZ6Mr+ncUHY4zUQkjq3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:25 2024 by rpki-client on console-fra.rpki-client.org