Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/JYiQfbMbz_JP7JDnp-cLOcG1VL4.roa
File: JYiQfbMbz_JP7JDnp-cLOcG1VL4.roa (raw, json)
Hash identifier: v6l+vdYZF1iXwWGCfXl2POZdoTQorH0hS2F8E3relsI=
Subject key identifier: 25:88:90:7D:B3:1B:CF:F2:4F:EC:90:E7:A7:E7:0B:39:C1:B5:54:BE
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 011854C4
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/JYiQfbMbz_JP7JDnp-cLOcG1VL4.roa
Signing time: Fri 22 Apr 2022 15:09:49 +0000
ROA not before: Fri 22 Apr 2022 15:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29479
IP address blocks: 91.237.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18371780 (0x11854c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Apr 22 15:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2588907db31bcff24fec90e7a7e70b39c1b554be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:10:ec:b7:45:4d:2d:da:27:6b:ab:83:3d:
09:a5:67:86:59:1e:f6:dc:cd:0a:a7:87:87:dd:ff:
1b:8a:23:8b:91:da:ca:5a:5f:e4:e1:e3:8a:a2:1a:
46:ea:40:7e:08:ad:23:60:cf:22:d7:53:e0:ac:3e:
68:42:d6:99:05:bc:34:2c:a4:e5:3e:8a:00:ce:53:
bb:c0:e4:0c:77:09:b1:36:f8:4f:d5:79:b6:5a:b6:
de:3b:48:6e:7f:6f:f7:da:7f:3c:16:a4:61:a0:b7:
34:47:7c:3e:e8:ed:5b:e3:df:49:4f:ff:ac:79:46:
c6:3f:4e:00:7c:26:de:87:a0:bd:c9:db:5f:ad:04:
b3:e6:12:ed:8c:1e:04:4c:dc:f3:f3:18:20:db:2c:
f0:a8:22:19:ea:69:ec:42:b3:82:a6:62:0e:01:f5:
31:5a:42:5d:58:73:eb:81:cf:0d:80:8d:47:a3:6e:
89:54:41:36:8a:b7:c6:4d:73:37:ae:eb:cd:0c:71:
15:f8:5f:ca:bd:9f:8a:54:cf:82:a4:fb:e4:aa:ef:
7b:9d:22:c8:7a:19:c6:a4:e3:87:1a:7f:9d:50:b5:
c2:57:0a:3d:4e:b0:ca:b6:98:26:f9:0c:5e:99:04:
20:8a:75:be:76:bc:e0:5f:41:84:0e:e6:67:1e:18:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:90:7D:B3:1B:CF:F2:4F:EC:90:E7:A7:E7:0B:39:C1:B5:54:BE
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/JYiQfbMbz_JP7JDnp-cLOcG1VL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.78.0/24
Signature Algorithm: sha256WithRSAEncryption
52:11:97:1e:48:78:2b:f4:7f:41:de:78:38:4f:63:d4:54:79:
77:ef:04:3e:af:0e:49:be:fa:f6:81:37:42:08:4c:82:d8:82:
a0:0b:1c:45:37:b7:30:e2:c0:7c:af:11:47:6d:93:06:68:3b:
e5:ca:2f:30:4b:1b:e3:1b:60:93:a1:0d:fe:e2:a1:f4:98:ce:
a4:c1:34:2a:67:17:d0:4f:fd:fb:96:e1:f0:c3:e3:4e:5a:2d:
62:92:1c:1d:55:e0:5b:a6:17:b4:82:28:80:b4:14:ff:b5:8c:
d0:ce:9d:8e:d7:79:9b:77:9f:4b:a1:8d:5f:76:7a:e6:3d:e9:
d6:1b:43:3e:af:1e:e1:99:47:71:e1:15:de:8c:bf:c0:3b:e7:
13:68:19:50:f3:7e:a5:73:da:8a:28:ac:e4:ba:d4:c3:8d:3b:
e2:be:56:3f:c8:29:a5:d5:c5:ee:e5:ba:b0:f8:22:38:f3:6d:
2d:6e:44:48:f4:dc:51:16:eb:66:b6:67:c2:7e:56:51:db:9a:
43:72:f3:06:5e:2a:43:c7:7b:f5:98:80:87:64:e7:f1:65:80:
73:2c:35:6a:ee:dc:27:6c:ba:17:83:1f:54:d4:0c:aa:1f:ab:
d4:d9:3c:99:94:94:f0:7e:5a:02:f0:1e:29:32:f0:83:6e:29:
f6:82:93:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARhUxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGYwMGFhZTU3N2U3NDUxZjg4ZWE2MDRiZjZhMzM3MzRjZDAzMDA5MB4XDTIyMDQy
MjE1MDk0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU4ODkwN2RiMzFi
Y2ZmMjRmZWM5MGU3YTdlNzBiMzljMWI1NTRiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANllEOy3RU0t2idrq4M9CaVnhlke9tzNCqeHh93/G4oji5Ha
ylpf5OHjiqIaRupAfgitI2DPItdT4Kw+aELWmQW8NCyk5T6KAM5Tu8DkDHcJsTb4
T9V5tlq23jtIbn9v99p/PBakYaC3NEd8PujtW+PfSU//rHlGxj9OAHwm3oegvcnb
X60Es+YS7YweBEzc8/MYINss8KgiGepp7EKzgqZiDgH1MVpCXVhz64HPDYCNR6Nu
iVRBNoq3xk1zN67rzQxxFfhfyr2filTPgqT75Krve50iyHoZxqTjhxp/nVC1wlcK
PU6wyraYJvkMXpkEIIp1vna84F9BhA7mZx4YUbkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQliJB9sxvP8k/skOen5ws5wbVUvjAfBgNVHSMEGDAWgBSk8AquV350UfiO
pgS/ajNzTNAwCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BQQUtybGQtZEZINGpxWUV2Mm96YzB6UU1Bay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvNThhOTRhLTllMjgtNDdhNS05ZmQ2LTljOTFiMWM1MTU4YS8x
L0pZaVFmYk1iel9KUDdKRG5wLWNMT2NHMVZMNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
NThhOTRhLTllMjgtNDdhNS05ZmQ2LTljOTFiMWM1MTU4YS8xL3BQQUtybGQtZEZI
NGpxWUV2Mm96YzB6UU1Bay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvtTjANBgkqhkiG9w0BAQsFAAOC
AQEAUhGXHkh4K/R/Qd54OE9j1FR5d+8EPq8OSb769oE3QghMgtiCoAscRTe3MOLA
fK8RR22TBmg75covMEsb4xtgk6EN/uKh9JjOpME0KmcX0E/9+5bh8MPjTlotYpIc
HVXgW6YXtIIogLQU/7WM0M6djtd5m3efS6GNX3Z65j3p1htDPq8e4ZlHceEV3oy/
wDvnE2gZUPN+pXPaiiis5LrUw4074r5WP8gppdXF7uW6sPgiOPNtLW5ESPTcURbr
ZrZnwn5WUduaQ3LzBl4qQ8d79ZiAh2Tn8WWAcyw1au7cJ2y6F4MfVNQMqh+r1Nk8
mZSU8H5aAvAeKTLwg24p9oKTtQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:48 2025 by rpki-client