Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/nDqY6V0DEFvP7irFKI_u0vFcDnQ.roa
File: nDqY6V0DEFvP7irFKI_u0vFcDnQ.roa (raw, json)
Hash identifier: VgejErV2jRCqN/wOXe9K6dlMn1m4OJXggrZSeIBSCeY=
Subject key identifier: 9C:3A:98:E9:5D:03:10:5B:CF:EE:2A:C5:28:8F:EE:D2:F1:5C:0E:74
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0185701ED94DECE1E898B9D9596C5371B237
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/nDqY6V0DEFvP7irFKI_u0vFcDnQ.roa
Signing time: Mon 02 Jan 2023 01:35:47 +0000
ROA not before: Mon 02 Jan 2023 01:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43732
IP address blocks: 91.198.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d9:4d:ec:e1:e8:98:b9:d9:59:6c:53:71:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jan 2 01:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3a98e95d03105bcfee2ac5288feed2f15c0e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:78:e1:e7:23:b7:5c:cf:b8:62:05:2b:0e:
55:ab:13:59:8c:3a:19:f0:33:9f:42:91:1f:81:b2:
1f:f6:6d:b6:01:98:07:9b:20:9a:34:2d:66:aa:74:
67:5d:29:17:f1:03:9a:99:78:35:66:84:e9:4d:e1:
4a:30:fe:28:6b:68:53:43:d6:1a:c5:0e:14:85:c0:
bb:4a:5d:18:0d:73:c1:7c:8d:55:98:1c:6a:4c:86:
0d:24:49:b0:09:1e:ec:59:a2:f6:17:ef:10:80:1e:
d5:49:8b:db:cc:de:e9:2b:aa:df:3a:70:ba:4d:83:
79:8f:38:92:d6:a9:d4:07:8a:d3:32:88:09:7f:dc:
61:15:a1:1c:7e:82:61:f0:f0:86:a6:a8:ba:bf:d9:
2e:22:fc:0d:ed:4f:7f:b1:d4:13:68:59:50:76:64:
a1:f6:ae:e5:a7:ea:2b:ca:d4:e3:1b:6d:7c:4c:3a:
de:2e:2a:df:12:5e:2b:4e:74:af:03:ab:93:9c:4a:
77:1a:b7:36:42:b5:17:ae:83:ac:30:cd:4d:16:e5:
44:12:be:3d:8a:01:cf:d7:39:dd:b4:13:10:1f:2d:
c9:0f:e2:d2:17:9d:e0:bb:47:be:3c:0b:05:24:20:
93:87:63:72:df:42:91:c8:a7:75:1b:83:6f:8e:50:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:98:E9:5D:03:10:5B:CF:EE:2A:C5:28:8F:EE:D2:F1:5C:0E:74
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/nDqY6V0DEFvP7irFKI_u0vFcDnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:dd:2a:f9:5c:7c:20:99:0b:7a:cf:3e:b2:e3:ab:ac:95:2e:
5e:53:3c:77:1e:90:df:a1:6d:de:af:ce:aa:0f:a3:0b:c4:28:
c1:9d:df:db:10:69:49:a2:39:92:24:03:78:1d:86:3f:fe:93:
27:87:38:66:7a:7d:59:cf:90:f7:af:06:44:97:71:7a:42:b0:
e5:b6:6c:d0:c0:88:e0:fa:74:d6:47:e7:fc:15:29:1f:ea:ab:
71:16:d9:00:59:ac:c0:0d:70:75:c3:16:7b:12:9a:5f:f8:9a:
c0:4b:12:89:7b:db:47:ba:f7:b1:68:48:de:df:06:88:7e:41:
7d:23:f6:69:10:1d:1c:fe:51:51:66:f4:fa:c1:a2:49:b8:61:
30:c9:c6:3f:71:25:56:b7:17:de:fb:46:6c:da:6d:64:65:c5:
86:41:a5:0c:a4:cf:d5:b1:07:fa:e7:de:ea:91:ee:12:90:bc:
a0:3b:70:9a:5a:a0:e9:98:f9:fc:d9:b5:a8:2f:86:54:5a:21:
ed:c9:49:90:17:20:da:70:93:55:e4:ba:19:bd:14:c5:5a:37:
1a:05:ec:36:67:8c:28:56:14:ef:7c:55:2a:9f:cc:49:04:28:
2c:2b:ad:88:86:a2:9f:31:83:21:98:53:1a:49:41:7f:bd:ac:
a0:81:a4:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwHtlN7OHomLnZWWxTcbI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3
NTU5YmYwHhcNMjMwMTAyMDEzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzNhOThlOTVkMDMxMDViY2ZlZTJhYzUyODhmZWVkMmYxNWMwZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjd44ecjt1zPuGIFKw5VqxNZjDoZ
8DOfQpEfgbIf9m22AZgHmyCaNC1mqnRnXSkX8QOamXg1ZoTpTeFKMP4oa2hTQ9Ya
xQ4UhcC7Sl0YDXPBfI1VmBxqTIYNJEmwCR7sWaL2F+8QgB7VSYvbzN7pK6rfOnC6
TYN5jziS1qnUB4rTMogJf9xhFaEcfoJh8PCGpqi6v9kuIvwN7U9/sdQTaFlQdmSh
9q7lp+orytTjG218TDreLirfEl4rTnSvA6uTnEp3Grc2QrUXroOsMM1NFuVEEr49
igHP1zndtBMQHy3JD+LSF53gu0e+PAsFJCCTh2Ny30KRyKd1G4NvjlDrQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJw6mOldAxBbz+4qxSiP7tLxXA50MB8GA1UdIwQY
MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt
MzM4Mjc5NDA0OWMyLzEvbkRxWTZWMERFRnZQN2lyRktJX3UwdkZjRG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy
LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aEMA0G
CSqGSIb3DQEBCwUAA4IBAQCa3Sr5XHwgmQt6zz6y46uslS5eUzx3HpDfoW3er86q
D6MLxCjBnd/bEGlJojmSJAN4HYY//pMnhzhmen1Zz5D3rwZEl3F6QrDltmzQwIjg
+nTWR+f8FSkf6qtxFtkAWazADXB1wxZ7Eppf+JrASxKJe9tHuvexaEje3waIfkF9
I/ZpEB0c/lFRZvT6waJJuGEwycY/cSVWtxfe+0Zs2m1kZcWGQaUMpM/VsQf6597q
ke4SkLygO3CaWqDpmPn82bWoL4ZUWiHtyUmQFyDacJNV5LoZvRTFWjcaBew2Z4wo
VhTvfFUqn8xJBCgsK62IhqKfMYMhmFMaSUF/vayggaT2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:48 2025 by rpki-client