Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hpbStDrKiMmkiH4oU-SOmw97rbY.roa
File: hpbStDrKiMmkiH4oU-SOmw97rbY.roa (raw, json)
Hash identifier: nQ4WmzxxOQ495TLshLFjCxSQXFoWhoc3RN2kHeywCeg=
Subject key identifier: 86:96:D2:B4:3A:CA:88:C9:A4:88:7E:28:53:E4:8E:9B:0F:7B:AD:B6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13364012
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hpbStDrKiMmkiH4oU-SOmw97rbY.roa
Signing time: Sat 01 Jan 2022 04:03:03 +0000
ROA not before: Sat 01 Jan 2022 04:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133752
IP address blocks: 91.132.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322322450 (0x13364012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8696d2b43aca88c9a4887e2853e48e9b0f7badb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:b5:39:32:65:e5:45:ad:59:6b:2e:d0:22:
14:41:59:36:ca:46:ec:bd:24:9d:d8:82:28:cb:90:
9a:84:01:f6:02:c1:dd:c6:9d:f9:a6:81:11:b8:82:
d5:5f:5f:17:52:ca:57:02:ab:32:98:e7:68:eb:3f:
2a:82:a4:e8:00:4e:78:f7:ec:39:c0:22:93:ed:cd:
1d:6e:37:b0:92:ac:1b:96:08:b6:9a:eb:25:88:f6:
a9:6d:dc:6f:27:ab:eb:4f:a9:69:af:93:d3:43:67:
10:73:02:4d:11:fd:ad:b6:c6:47:6b:77:d7:4e:4b:
8d:77:96:ad:ed:c6:5c:9f:0d:c9:74:f2:ee:00:77:
64:78:0f:54:18:32:70:af:db:ef:10:d3:67:6f:e8:
de:07:bf:8d:43:3a:62:3d:25:81:a5:a4:6f:ef:82:
17:27:c9:4a:f5:83:ea:17:39:20:01:91:e0:a2:bb:
74:fa:d4:c9:b1:39:e9:c5:0c:c5:80:da:c9:e1:24:
57:3a:06:94:10:e8:0c:df:a1:d6:28:5f:d7:c0:3d:
c3:0b:a8:af:e1:34:e0:33:d9:b6:99:ce:cf:0d:f5:
ab:1e:4d:74:5b:c0:be:82:ac:d0:f5:06:59:50:dd:
7d:c0:04:d0:36:71:46:22:4f:da:47:ee:27:d8:55:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:D2:B4:3A:CA:88:C9:A4:88:7E:28:53:E4:8E:9B:0F:7B:AD:B6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hpbStDrKiMmkiH4oU-SOmw97rbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:45:cc:fa:1f:fe:9b:2a:fd:7e:49:6a:28:fd:bd:76:b7:8b:
6b:65:ed:3d:81:0c:e4:7d:a2:3c:44:09:bf:94:e8:c3:74:31:
3b:ea:14:6a:5e:49:3b:b4:9f:3b:4e:28:39:9d:db:d9:88:36:
ea:ff:eb:d5:e5:d1:9e:38:59:49:8e:1c:0e:fa:7c:be:f3:55:
4e:9a:1d:40:8d:fe:e1:0e:cf:f5:94:bb:d8:73:1a:87:5c:f3:
20:c9:b1:3d:6f:b4:ec:02:62:7c:3b:24:00:f2:8a:4e:6f:9a:
4e:e8:47:55:fe:fd:df:60:7e:12:03:b5:d4:de:fc:0a:bc:1c:
79:a7:b1:b2:d6:8e:a7:13:f9:14:7e:c9:59:eb:c9:fd:55:38:
56:a9:a0:40:56:ba:97:ab:e4:da:9c:d1:3d:ca:55:ce:e2:e2:
69:f5:ee:cf:e7:a2:f3:4d:64:99:0c:fd:4f:f1:e8:16:37:ef:
d0:91:e4:a5:61:ea:57:32:f7:0e:70:30:8e:44:ba:21:93:7d:
0a:b6:19:f9:06:e6:3f:d3:6b:56:85:ce:16:3e:d6:8b:16:95:
f1:11:7e:84:21:a8:0a:f1:bb:21:e3:a7:b0:fc:87:64:e5:6d:
1c:d6:01:2a:92:36:94:c2:d2:3d:c7:91:b5:54:54:08:d7:d5:
9a:0b:fb:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEzZAEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDEw
MTA0MDMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODY5NmQyYjQzYWNh
ODhjOWE0ODg3ZTI4NTNlNDhlOWIwZjdiYWRiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgttTkyZeVFrVlrLtAiFEFZNspG7L0kndiCKMuQmoQB9gLB
3cad+aaBEbiC1V9fF1LKVwKrMpjnaOs/KoKk6ABOePfsOcAik+3NHW43sJKsG5YI
tprrJYj2qW3cbyer60+paa+T00NnEHMCTRH9rbbGR2t3105LjXeWre3GXJ8NyXTy
7gB3ZHgPVBgycK/b7xDTZ2/o3ge/jUM6Yj0lgaWkb++CFyfJSvWD6hc5IAGR4KK7
dPrUybE56cUMxYDayeEkVzoGlBDoDN+h1ihf18A9wwuor+E04DPZtpnOzw31qx5N
dFvAvoKs0PUGWVDdfcAE0DZxRiJP2kfuJ9hVHGcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSGltK0OsqIyaSIfihT5I6bD3uttjAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L2hwYlN0RHJLaU1ta2lING9VLVNPbXc5N3JiWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFuEODANBgkqhkiG9w0BAQsFAAOC
AQEAHUXM+h/+myr9fklqKP29dreLa2XtPYEM5H2iPEQJv5Tow3QxO+oUal5JO7Sf
O04oOZ3b2Yg26v/r1eXRnjhZSY4cDvp8vvNVTpodQI3+4Q7P9ZS72HMah1zzIMmx
PW+07AJifDskAPKKTm+aTuhHVf7932B+EgO11N78CrwceaexstaOpxP5FH7JWevJ
/VU4VqmgQFa6l6vk2pzRPcpVzuLiafXuz+ei801kmQz9T/HoFjfv0JHkpWHqVzL3
DnAwjkS6IZN9CrYZ+QbmP9NrVoXOFj7WixaV8RF+hCGoCvG7IeOnsPyHZOVtHNYB
KpI2lMLSPceRtVRUCNfVmgv7qQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org