Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/fR49A5jqtJb2j5tMAJlKBZOE1xE.roa
File: fR49A5jqtJb2j5tMAJlKBZOE1xE.roa (raw, json)
Hash identifier: Mxr9GRuqrHdiM/ifUDyESse/SJ/GvYEQ1yy9JJze2OQ=
Subject key identifier: 7D:1E:3D:03:98:EA:B4:96:F6:8F:9B:4C:00:99:4A:05:93:84:D7:11
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 018AA9DDF41419DFFCC99DC553072EF9B985
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/fR49A5jqtJb2j5tMAJlKBZOE1xE.roa
Signing time: Mon 18 Sep 2023 19:56:50 +0000
ROA not before: Mon 18 Sep 2023 19:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.227.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:dd:f4:14:19:df:fc:c9:9d:c5:53:07:2e:f9:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Sep 18 19:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d1e3d0398eab496f68f9b4c00994a059384d711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:a6:b9:06:a6:2b:47:a6:82:42:04:97:fc:
ee:69:f7:47:78:2e:70:c3:30:f1:4a:f0:95:76:fc:
db:f0:48:d2:ef:00:57:c5:fb:c9:4b:ff:a1:4c:08:
d0:7f:c6:0e:71:eb:1d:60:ba:9a:13:dd:97:be:76:
c0:ba:d2:e9:f4:5a:67:de:cc:21:3c:1c:9c:31:a4:
63:d8:68:79:c2:9d:ef:af:4a:a0:1f:cd:a4:c3:ac:
c0:9c:cc:2e:32:53:29:86:e6:30:f9:15:8c:2c:fd:
0b:f1:37:ae:ff:9a:86:d6:53:8f:dc:67:1a:5e:5c:
fe:e0:08:16:d7:34:0c:ac:99:49:75:9c:28:56:9f:
a0:94:c6:3f:17:88:36:20:75:32:a2:f9:e9:1a:37:
d5:35:45:d0:83:d4:3c:38:c9:34:3a:26:68:30:a1:
0b:20:83:88:39:f0:2b:33:82:1c:41:40:4e:56:38:
b5:11:de:03:b4:02:a2:90:2e:16:dd:63:2e:88:bc:
6b:d9:c9:9f:15:38:b9:b0:44:36:a2:57:9b:a2:16:
9c:1f:e5:32:8d:2a:ed:b9:b6:dd:21:4e:45:a6:17:
ae:b8:46:93:97:da:3a:e9:74:ab:3d:56:ae:5f:f4:
f9:9c:e2:b7:9e:8e:82:b7:e6:49:19:fb:66:24:85:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:3D:03:98:EA:B4:96:F6:8F:9B:4C:00:99:4A:05:93:84:D7:11
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/fR49A5jqtJb2j5tMAJlKBZOE1xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:aa:69:6d:37:36:27:f8:62:dd:6f:49:7e:9f:8d:bf:96:ce:
c8:ba:a1:22:14:2f:f8:83:2a:4c:62:1e:45:a8:e2:16:a5:14:
26:47:98:5b:b1:3b:7e:e2:28:07:ff:2c:38:e0:43:b3:e7:eb:
d6:ef:ef:f9:c4:a2:58:ca:b4:4b:b6:3c:21:2f:68:99:b7:98:
f5:67:d7:69:93:2c:95:32:ea:47:78:2a:24:82:cd:3a:43:dc:
99:ae:bf:9f:a2:03:df:0a:a9:4a:6a:7d:98:c2:97:0f:19:93:
7b:20:d4:3a:d7:51:3a:0b:cf:92:10:07:fc:86:80:9d:73:86:
d7:26:d6:fd:77:5f:f4:12:fd:02:e9:ef:12:35:e3:c2:0e:54:
94:b8:74:89:28:61:39:8c:bb:e2:ec:dc:8a:3e:57:5b:0e:93:
e1:94:65:85:e4:2e:e2:3d:22:12:3d:70:ab:96:48:d6:dd:2f:
a2:2d:80:e6:70:9a:d0:07:2f:b4:0c:89:a8:31:7c:98:f4:89:
30:35:b3:20:c0:48:d2:d5:2e:03:79:02:57:83:65:5f:7e:08:
29:59:7e:60:a4:8f:0b:3b:2e:6f:82:4d:5e:c1:6c:c5:42:5e:
00:c1:7c:ef:b7:b6:0a:f2:1a:d5:35:52:6e:5a:ac:9b:cf:4f:
25:cf:29:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqp3fQUGd/8yZ3FUwcu+bmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0
MDk0NGEwHhcNMjMwOTE4MTk1NjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDFlM2QwMzk4ZWFiNDk2ZjY4ZjliNGMwMDk5NGEwNTkzODRkNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWmmuQamK0emgkIEl/zuafdHeC5w
wzDxSvCVdvzb8EjS7wBXxfvJS/+hTAjQf8YOcesdYLqaE92XvnbAutLp9Fpn3swh
PBycMaRj2Gh5wp3vr0qgH82kw6zAnMwuMlMphuYw+RWMLP0L8Teu/5qG1lOP3Gca
Xlz+4AgW1zQMrJlJdZwoVp+glMY/F4g2IHUyovnpGjfVNUXQg9Q8OMk0OiZoMKEL
IIOIOfArM4IcQUBOVji1Ed4DtAKikC4W3WMuiLxr2cmfFTi5sEQ2olebohacH+Uy
jSrtubbdIU5FpheuuEaTl9o66XSrPVauX/T5nOK3no6Ct+ZJGftmJIVRCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH0ePQOY6rSW9o+bTACZSgWThNcRMB8GA1UdIwQY
MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt
MzUyM2UzMDMwYmU0LzEvZlI0OUE1anF0SmIyajV0TUFKbEtCWk9FMXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0
LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+PBMA0G
CSqGSIb3DQEBCwUAA4IBAQDLqmltNzYn+GLdb0l+n42/ls7IuqEiFC/4gypMYh5F
qOIWpRQmR5hbsTt+4igH/yw44EOz5+vW7+/5xKJYyrRLtjwhL2iZt5j1Z9dpkyyV
MupHeCokgs06Q9yZrr+fogPfCqlKan2YwpcPGZN7INQ611E6C8+SEAf8hoCdc4bX
Jtb9d1/0Ev0C6e8SNePCDlSUuHSJKGE5jLvi7NyKPldbDpPhlGWF5C7iPSISPXCr
lkjW3S+iLYDmcJrQBy+0DImoMXyY9IkwNbMgwEjS1S4DeQJXg2VffggpWX5gpI8L
Oy5vgk1ewWzFQl4AwXzvt7YK8hrVNVJuWqybz08lzynS
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:37 2025 by rpki-client