Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/GiaUzkWCQZErXmn2m9RMCsGKyKM.roa
File: GiaUzkWCQZErXmn2m9RMCsGKyKM.roa (raw, json)
Hash identifier: ICi5noBvw4fPtpcQXqEXgCYUo9BwxDTc8fxFD6vvmZo=
Subject key identifier: 1A:26:94:CE:45:82:41:91:2B:5E:69:F6:9B:D4:4C:0A:C1:8A:C8:A3
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 01856F54ADED27256310107805283F61B84B
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/GiaUzkWCQZErXmn2m9RMCsGKyKM.roa
Signing time: Sun 01 Jan 2023 21:54:58 +0000
ROA not before: Sun 01 Jan 2023 21:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56750
IP address blocks: 91.227.90.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:ad:ed:27:25:63:10:10:78:05:28:3f:61:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jan 1 21:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2694ce458241912b5e69f69bd44c0ac18ac8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:9f:7a:a9:e6:e8:be:60:ba:70:b9:e9:27:
10:0d:4f:17:7d:92:4c:1e:c7:55:31:fa:dd:48:c7:
f2:1c:8f:6a:f4:4b:30:e3:44:39:2d:52:8e:2d:68:
43:eb:c4:69:81:08:14:56:d6:07:ff:bb:ba:79:a0:
08:ec:f1:15:fc:e5:a1:49:a0:b9:b3:33:a9:84:52:
cf:8c:d6:54:23:96:7f:70:9e:8c:a7:50:4b:0e:1c:
48:90:33:d8:2c:08:de:59:22:c3:2b:13:89:e0:a6:
32:43:8c:27:4f:ef:4d:b2:aa:68:b5:60:bf:e4:83:
7f:c5:c3:e6:71:6c:7c:36:4e:d0:ef:9d:60:05:65:
b9:7d:55:12:40:2a:4d:d6:08:94:b3:b1:0d:3b:c1:
a8:3b:f0:96:07:75:7e:2a:27:42:a7:a3:04:26:0d:
27:48:2c:8b:96:67:0d:3d:ff:62:de:6e:eb:2d:cb:
49:c8:c3:42:a2:4f:ab:7f:f0:f3:2d:a0:d7:a2:36:
92:7a:2a:70:94:92:e3:a4:dd:6d:52:51:a8:90:96:
97:4a:dd:7e:02:e2:63:ea:34:34:53:71:c6:0b:96:
ec:ad:a7:9f:ea:6c:5c:14:40:91:b5:7c:ac:d2:be:
f4:ea:1f:08:be:cb:96:1d:62:21:54:01:91:52:a1:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:94:CE:45:82:41:91:2B:5E:69:F6:9B:D4:4C:0A:C1:8A:C8:A3
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/GiaUzkWCQZErXmn2m9RMCsGKyKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.90.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2d:9e:4b:fd:d8:c8:dc:e9:58:a8:b8:12:9a:0b:16:5d:bf:
6a:26:da:a9:69:19:65:7f:2d:07:12:4e:87:92:34:ee:12:3d:
81:13:f1:88:b9:26:1c:e3:23:6a:a1:d0:ed:10:c5:fe:5a:82:
18:89:cd:a5:b5:ce:b8:34:b6:be:54:55:c3:55:6a:67:5e:37:
64:3f:0f:60:c9:56:d4:93:6e:1f:9e:45:92:02:41:3f:8a:3e:
0a:74:5b:1e:48:36:32:e7:b6:ee:b7:b0:1b:42:1a:09:23:3f:
17:86:6f:b3:a6:1b:e6:13:8e:0a:5c:af:93:6a:17:86:33:4a:
6c:7e:df:59:50:b2:e7:c8:76:05:4e:84:d1:c7:90:81:86:9e:
87:05:ef:54:26:f9:4b:02:ef:8c:62:a3:67:d0:7f:07:58:e6:
f0:3e:ab:83:8d:fc:3a:d4:d8:c3:30:ce:90:c8:f6:5b:5f:d4:
5b:e8:50:21:c6:53:31:1d:6e:6e:7e:5b:dd:29:41:20:be:29:
77:67:f4:3e:ae:b8:f3:9f:fb:f3:af:94:cc:55:b8:3d:0d:7e:
6d:64:8b:f1:f8:e6:06:0b:97:57:06:41:b6:67:df:b3:b5:c8:
83:ad:40:55:69:89:bb:ff:1e:d4:2e:b1:a6:7c:f7:59:fb:e3:
03:79:fb:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVK3tJyVjEBB4BSg/YbhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjMwMTAxMjE1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTI2OTRjZTQ1ODI0MTkxMmI1ZTY5ZjY5YmQ0NGMwYWMxOGFjOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaOfeqnm6L5gunC56ScQDU8XfZJM
HsdVMfrdSMfyHI9q9Esw40Q5LVKOLWhD68RpgQgUVtYH/7u6eaAI7PEV/OWhSaC5
szOphFLPjNZUI5Z/cJ6Mp1BLDhxIkDPYLAjeWSLDKxOJ4KYyQ4wnT+9NsqpotWC/
5IN/xcPmcWx8Nk7Q751gBWW5fVUSQCpN1giUs7ENO8GoO/CWB3V+KidCp6MEJg0n
SCyLlmcNPf9i3m7rLctJyMNCok+rf/DzLaDXojaSeipwlJLjpN1tUlGokJaXSt1+
AuJj6jQ0U3HGC5bsraef6mxcFECRtXys0r706h8IvsuWHWIhVAGRUqFNCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBomlM5FgkGRK15p9pvUTArBisijMB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvR2lhVXprV0NRWkVyWG1uMm05Uk1Dc0dLeUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NaMA0G
CSqGSIb3DQEBCwUAA4IBAQCYLZ5L/djI3OlYqLgSmgsWXb9qJtqpaRllfy0HEk6H
kjTuEj2BE/GIuSYc4yNqodDtEMX+WoIYic2ltc64NLa+VFXDVWpnXjdkPw9gyVbU
k24fnkWSAkE/ij4KdFseSDYy57but7AbQhoJIz8Xhm+zphvmE44KXK+TaheGM0ps
ft9ZULLnyHYFToTRx5CBhp6HBe9UJvlLAu+MYqNn0H8HWObwPquDjfw61NjDMM6Q
yPZbX9Rb6FAhxlMxHW5uflvdKUEgvil3Z/Q+rrjzn/vzr5TMVbg9DX5tZIvx+OYG
C5dXBkG2Z9+ztciDrUBVaYm7/x7ULrGmfPdZ++MDefte
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:13 2025 by rpki-client