Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/Lw9Ovr4GNF9CURAqzwoiG5fdgUg.roa
File: Lw9Ovr4GNF9CURAqzwoiG5fdgUg.roa (raw, json)
Hash identifier: +qF+wXaMjl6gj31vzUYlM3AEbkqqHAb2jNNBqFMGSoM=
Subject key identifier: 2F:0F:4E:BE:BE:06:34:5F:42:51:10:2A:CF:0A:22:1B:97:DD:81:48
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01849ECD75DF22D1902911EF51A334FB4035
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/Lw9Ovr4GNF9CURAqzwoiG5fdgUg.roa
Signing time: Tue 22 Nov 2022 10:06:15 +0000
ROA not before: Tue 22 Nov 2022 10:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 91.193.235.0/24 maxlen: 24
91.193.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:cd:75:df:22:d1:90:29:11:ef:51:a3:34:fb:40:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Nov 22 10:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f0f4ebebe06345f4251102acf0a221b97dd8148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:ae:90:d8:0b:5c:f8:cd:e9:af:33:57:15:
e7:7f:e3:bb:5a:a3:db:e2:bd:d1:8c:20:da:d7:f4:
b5:87:ac:23:52:9b:6c:4a:8e:96:c1:85:47:ff:a7:
89:cb:b1:84:f6:b1:76:58:89:9c:1b:e9:f8:57:86:
c9:3f:af:58:a0:34:4d:18:00:8a:16:71:8a:2e:ce:
69:7a:7f:d0:e0:18:2c:d3:63:5f:f5:90:21:4a:db:
96:96:15:a9:58:13:ea:f4:0a:42:9d:29:76:bb:cc:
60:2d:f5:27:cc:b3:bb:fd:79:0d:de:19:f8:f9:57:
ca:56:90:42:b5:36:b1:2c:11:50:f0:41:52:ec:36:
27:fd:2b:d2:08:8e:38:96:5f:e5:fa:bc:62:53:1a:
d8:c5:52:a4:1c:27:99:07:c6:f8:7a:dd:44:3c:46:
92:c9:4c:9c:e2:a4:1b:f6:d8:51:ea:75:66:bd:52:
52:22:86:dc:3f:a3:0e:b7:f7:93:ae:00:f8:9f:4a:
04:d3:62:af:6a:e0:6b:48:ae:c0:07:79:5d:56:c5:
ad:cd:9e:33:a0:67:2c:ab:e7:70:e9:8e:88:2e:02:
43:b6:e8:72:86:fc:0c:ce:0e:24:51:65:6e:1d:3a:
f8:42:2e:3f:ee:4f:14:9e:ed:38:37:bb:f2:a4:00:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:4E:BE:BE:06:34:5F:42:51:10:2A:CF:0A:22:1B:97:DD:81:48
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/Lw9Ovr4GNF9CURAqzwoiG5fdgUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.234.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b4:4b:70:8b:3b:34:93:2a:a0:9f:d7:bc:1b:48:e2:d8:b3:
94:c2:ea:b3:b4:95:90:3e:7a:95:85:31:55:b1:9d:4a:b7:ac:
14:be:8b:18:44:b3:2c:72:aa:d2:29:b4:c3:5d:11:a8:a8:e5:
12:dd:11:ea:df:98:ab:a2:3a:60:49:28:f2:dd:d8:ad:65:63:
2a:4c:6e:43:ee:6e:3f:0f:67:db:f9:06:a6:cf:d5:5b:32:de:
5f:21:fc:c9:1e:2b:cb:e6:c0:0a:77:2f:ad:d2:60:7e:82:ae:
e9:c1:72:c7:f0:e0:a3:ff:a4:3f:a3:ff:e4:0d:85:14:9d:f3:
86:eb:f8:d4:fd:2c:d0:af:81:26:91:33:5c:d3:b4:c6:92:b7:
22:67:63:9d:67:08:47:8e:49:55:95:b0:e6:c3:1c:ea:b7:09:
d6:12:11:5e:ea:9e:43:ad:17:5c:94:41:fa:be:19:c4:6f:d4:
de:4b:f5:6d:d0:1b:b3:58:2c:f5:b7:78:77:40:2b:9b:34:6d:
87:71:ef:61:b6:09:c1:76:27:29:a1:74:2e:51:d5:7d:a2:5f:
ee:83:e3:cd:e2:cb:3d:09:ea:3e:8e:54:60:73:86:0a:51:f3:
1d:40:51:3c:40:d2:06:34:93:89:e0:d6:e8:1f:ee:57:a3:75:
0f:a0:6e:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSezXXfItGQKRHvUaM0+0A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGNjOGJjZGI2Yzc0NGFjZGY0M2RkNzJkNjhkMjA0NTFh
MTc5ZjYwHhcNMjIxMTIyMTAwNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjBmNGViZWJlMDYzNDVmNDI1MTEwMmFjZjBhMjIxYjk3ZGQ4MTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoziukNgLXPjN6a8zVxXnf+O7WqPb
4r3RjCDa1/S1h6wjUptsSo6WwYVH/6eJy7GE9rF2WImcG+n4V4bJP69YoDRNGACK
FnGKLs5pen/Q4Bgs02Nf9ZAhStuWlhWpWBPq9ApCnSl2u8xgLfUnzLO7/XkN3hn4
+VfKVpBCtTaxLBFQ8EFS7DYn/SvSCI44ll/l+rxiUxrYxVKkHCeZB8b4et1EPEaS
yUyc4qQb9thR6nVmvVJSIobcP6MOt/eTrgD4n0oE02KvauBrSK7AB3ldVsWtzZ4z
oGcsq+dw6Y6ILgJDtuhyhvwMzg4kUWVuHTr4Qi4/7k8Unu04N7vypAAbJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8PTr6+BjRfQlEQKs8KIhuX3YFIMB8GA1UdIwQY
MBaAFDzcyLzbbHRKzfQ91y1o0gRRoXn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQt
NjM3YjM3MWRhOGU2LzEvTHc5T3ZyNEdORjlDVVJBcXp3b2lHNWZkZ1VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQtNjM3YjM3MWRhOGU2
LzEvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8HqMA0G
CSqGSIb3DQEBCwUAA4IBAQBFtEtwizs0kyqgn9e8G0ji2LOUwuqztJWQPnqVhTFV
sZ1Kt6wUvosYRLMscqrSKbTDXRGoqOUS3RHq35irojpgSSjy3ditZWMqTG5D7m4/
D2fb+Qamz9VbMt5fIfzJHivL5sAKdy+t0mB+gq7pwXLH8OCj/6Q/o//kDYUUnfOG
6/jU/SzQr4EmkTNc07TGkrciZ2OdZwhHjklVlbDmwxzqtwnWEhFe6p5DrRdclEH6
vhnEb9TeS/Vt0BuzWCz1t3h3QCubNG2Hce9htgnBdicpoXQuUdV9ol/ug+PN4ss9
Ceo+jlRgc4YKUfMdQFE8QNIGNJOJ4NboH+5Xo3UPoG4x
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:49 2023 by rpki-client on console-fra.rpki-client.org