Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/hGrV0xtTVoPEX7mNBEQqT2vGh4E.roa
File: hGrV0xtTVoPEX7mNBEQqT2vGh4E.roa (raw, json)
Hash identifier: cieXc2xHt/bBTnfdbC6nuHQjw6AInXGFpjl6Qhr8P8M=
Subject key identifier: 84:6A:D5:D3:1B:53:56:83:C4:5F:B9:8D:04:44:2A:4F:6B:C6:87:81
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 0186A6361AF1449AA8380362E341B496DEC4
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/hGrV0xtTVoPEX7mNBEQqT2vGh4E.roa
Signing time: Fri 03 Mar 2023 06:43:29 +0000
ROA not before: Fri 03 Mar 2023 06:43:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50951
IP address blocks: 91.216.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:36:1a:f1:44:9a:a8:38:03:62:e3:41:b4:96:de:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Mar 3 06:43:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=846ad5d31b535683c45fb98d04442a4f6bc68781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:97:89:eb:da:25:fe:bb:85:1d:28:47:97:
f8:66:46:9b:0f:25:ae:b8:45:1d:bb:eb:6c:f3:1b:
e3:5d:a0:20:bf:2e:74:6f:78:ff:67:f1:90:ad:5b:
fa:2e:e6:04:00:e7:ae:bf:2b:85:86:95:88:23:df:
41:c1:c0:5a:75:05:6e:5e:6d:9a:c3:84:c7:7d:37:
5c:29:f0:6a:5a:6e:b6:07:0d:8e:82:de:3a:f8:2b:
b7:f3:7a:64:79:b4:cb:0b:6f:84:47:75:4c:7b:2d:
15:fa:d3:8c:36:65:22:45:32:e5:e2:92:24:be:11:
64:c0:f6:ee:94:32:6f:58:48:bc:fc:b5:5a:07:bd:
f7:69:8e:7b:26:57:dc:7c:18:90:99:09:fa:78:37:
c3:d0:f7:0d:d2:70:dc:63:d3:7c:81:ef:20:07:89:
cf:15:c9:fb:f9:00:57:24:85:5a:c3:57:ba:64:7c:
4b:00:ec:ee:a3:0f:7a:9a:37:e5:f6:98:74:75:12:
73:eb:da:56:96:6f:35:b6:6d:f8:1b:f7:8a:70:8b:
16:e8:fa:7b:47:51:81:9c:83:21:05:f0:54:f0:0a:
9d:7d:05:b1:03:fc:d9:39:05:59:08:65:a3:a6:08:
71:4f:90:77:04:4c:43:35:2d:a6:07:76:9d:f7:69:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:D5:D3:1B:53:56:83:C4:5F:B9:8D:04:44:2A:4F:6B:C6:87:81
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/hGrV0xtTVoPEX7mNBEQqT2vGh4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.50.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a6:96:24:c1:c1:1e:4e:cf:b4:1d:ff:72:42:51:2b:f6:e0:
a4:cd:04:78:91:62:aa:3d:2a:2e:ab:b0:66:f7:2d:f5:92:07:
d6:3c:e3:12:98:7f:b5:c4:23:77:a0:b5:0f:6e:b7:ca:e3:51:
2b:a5:5a:24:85:a5:cb:d1:07:3f:89:5d:a0:b8:5b:9c:9f:dc:
6a:24:19:2a:29:7c:ac:c1:aa:61:c5:5e:f0:c2:55:e4:99:3f:
9e:bf:fd:0d:37:d2:a4:90:f8:1a:7e:ef:2b:42:83:cb:50:56:
08:54:50:49:2d:64:e3:2a:e7:40:06:aa:79:8c:02:76:37:77:
cb:af:5c:68:01:56:68:9d:63:0c:3f:6c:3d:b2:35:dc:1d:40:
6d:08:e2:6a:45:8f:bb:85:60:10:e0:e5:2e:2f:18:60:88:6c:
dc:f9:6d:e6:1d:42:8e:89:54:59:f8:e2:c0:73:90:a2:40:76:
b5:a3:82:36:fb:69:88:2a:c3:0b:40:c2:2c:1a:ca:0b:de:9e:
43:11:54:7c:e2:cf:e7:4b:36:8d:a9:d1:12:ce:34:2d:4f:b1:
3c:08:4b:73:7c:9c:38:2a:7c:c2:fb:a1:78:84:8a:10:02:04:
3a:3b:40:41:80:c7:91:98:35:96:0a:eb:ce:04:3f:d4:1b:3b:
1f:b9:a1:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamNhrxRJqoOANi40G0lt7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWZlOTBmOWQwODEzMzRjYzkyOGVkZWU5YmM3MzE1NDA3
MDhkZmQwHhcNMjMwMzAzMDY0MzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDZhZDVkMzFiNTM1NjgzYzQ1ZmI5OGQwNDQ0MmE0ZjZiYzY4NzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuaXievaJf67hR0oR5f4ZkabDyWu
uEUdu+ts8xvjXaAgvy50b3j/Z/GQrVv6LuYEAOeuvyuFhpWII99BwcBadQVuXm2a
w4THfTdcKfBqWm62Bw2Ogt46+Cu383pkebTLC2+ER3VMey0V+tOMNmUiRTLl4pIk
vhFkwPbulDJvWEi8/LVaB733aY57JlfcfBiQmQn6eDfD0PcN0nDcY9N8ge8gB4nP
Fcn7+QBXJIVaw1e6ZHxLAOzuow96mjfl9ph0dRJz69pWlm81tm34G/eKcIsW6Pp7
R1GBnIMhBfBU8AqdfQWxA/zZOQVZCGWjpghxT5B3BExDNS2mB3ad92mGOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRq1dMbU1aDxF+5jQREKk9rxoeBMB8GA1UdIwQY
MBaAFNqv6Q+dCBM0zJKO3um8cxVAcI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYt
YmJkOTJjY2FmYTg4LzEvaEdyVjB4dFRWb1BFWDdtTkJFUXFUMnZHaDRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84YmIzYzEtMTk5ZC00NDliLWFjNDYtYmJkOTJjY2FmYTg4
LzEvMnFfcEQ1MElFelRNa283ZTZieHpGVUJ3amYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gyMA0G
CSqGSIb3DQEBCwUAA4IBAQAHppYkwcEeTs+0Hf9yQlEr9uCkzQR4kWKqPSouq7Bm
9y31kgfWPOMSmH+1xCN3oLUPbrfK41ErpVokhaXL0Qc/iV2guFucn9xqJBkqKXys
waphxV7wwlXkmT+ev/0NN9KkkPgafu8rQoPLUFYIVFBJLWTjKudABqp5jAJ2N3fL
r1xoAVZonWMMP2w9sjXcHUBtCOJqRY+7hWAQ4OUuLxhgiGzc+W3mHUKOiVRZ+OLA
c5CiQHa1o4I2+2mIKsMLQMIsGsoL3p5DEVR84s/nSzaNqdESzjQtT7E8CEtzfJw4
KnzC+6F4hIoQAgQ6O0BBgMeRmDWWCuvOBD/UGzsfuaHA
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:07 2025 by rpki-client