Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/Z-rbhsTAQXgFU2ZweMPF-aAb8yY.roa
File: Z-rbhsTAQXgFU2ZweMPF-aAb8yY.roa (raw, json)
Hash identifier: hanEpa5tuF6vUuthnrl9CgIR0agaYHOroRYH25STiuM=
Subject key identifier: 67:EA:DB:86:C4:C0:41:78:05:53:66:70:78:C3:C5:F9:A0:1B:F3:26
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 26256F
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/Z-rbhsTAQXgFU2ZweMPF-aAb8yY.roa
Signing time: Sat 01 Jan 2022 01:51:01 +0000
ROA not before: Sat 01 Jan 2022 01:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47626
IP address blocks: 91.205.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499951 (0x26256f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jan 1 01:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67eadb86c4c041780553667078c3c5f9a01bf326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:bb:2d:50:c8:0e:71:a7:d9:78:6b:2b:17:
4a:dc:19:45:af:36:47:b7:71:28:4c:94:66:5b:b3:
e3:64:22:f5:22:5d:09:ea:59:13:51:d8:37:16:0e:
15:ce:a2:5c:53:29:fe:96:56:c3:bb:68:4d:b9:cc:
3a:df:25:70:9d:1c:cb:3b:a0:21:fa:05:c8:46:07:
a6:2c:4a:70:75:f1:5a:ae:d7:70:28:fa:b1:09:79:
b1:c6:70:3e:14:07:42:ef:31:7f:74:eb:fc:cc:b4:
f3:49:3a:75:dc:0a:96:ca:f3:eb:78:30:4e:99:87:
4d:fb:6d:d6:15:c9:ff:8d:26:1e:53:e7:4e:f0:ca:
51:c6:59:ea:23:0a:d1:cd:df:ef:20:78:f0:16:29:
d0:64:7f:04:0f:2e:8e:3b:a5:46:fc:8a:cf:02:77:
03:e4:b1:ad:35:32:df:e4:10:65:09:4b:56:b2:1a:
67:59:d8:34:2f:c7:8d:86:aa:a5:69:14:af:f5:82:
ad:b7:c4:a7:9d:66:d1:ac:ef:39:01:8a:22:63:ee:
13:76:c8:75:fc:b7:09:f9:15:9a:b9:d9:f5:c3:b2:
f0:d1:75:a2:d6:5b:9d:26:2e:88:54:d4:5e:4f:28:
0f:f1:14:2d:f1:80:ab:f4:6b:06:4d:34:3e:83:7a:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:DB:86:C4:C0:41:78:05:53:66:70:78:C3:C5:F9:A0:1B:F3:26
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/Z-rbhsTAQXgFU2ZweMPF-aAb8yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.190.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2c:18:7d:7b:24:f2:9a:63:ba:84:1d:b3:d8:2a:38:79:79:
9f:c8:0e:a0:8a:0c:23:57:e7:5f:2e:d5:78:c9:e6:4b:ff:ba:
ba:17:47:91:c7:77:36:b3:27:70:09:ad:98:40:b2:b9:1a:3f:
09:5f:47:47:80:5c:52:e7:4c:de:f1:08:13:e2:7e:08:48:dd:
30:31:d7:17:33:bb:29:32:de:b4:89:02:30:b5:41:35:f6:9e:
d1:8a:4f:f9:aa:a2:be:f4:0b:62:0a:b6:19:5c:2a:ef:b9:e3:
c6:a3:53:f8:49:1b:74:c8:13:31:30:a0:12:f3:8e:32:c8:65:
f5:67:57:59:7e:0a:8a:29:dd:b3:c7:54:27:2a:a4:a3:dc:b9:
73:e9:5c:54:e4:0d:78:e9:1c:15:eb:f2:8b:52:50:1a:1b:88:
a5:f1:33:92:76:72:4e:59:a2:e8:3e:53:44:f8:58:25:34:47:
48:2f:87:81:8e:03:91:c5:47:ee:03:be:39:73:ad:75:67:d8:
cd:84:bf:e8:3e:b9:97:8a:84:bd:79:11:af:b9:5e:79:9f:14:
50:a2:dd:3f:6a:28:6c:c7:95:99:bd:33:92:6c:21:75:65:54:
54:c6:f1:2f:59:d6:90:9e:3d:88:7d:e0:39:91:d3:60:94:1a:
19:d0:5a:76
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDJiVvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1N2U3MjkwHhcNMjIwMTAx
MDE1MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2N2VhZGI4NmM0YzA0
MTc4MDU1MzY2NzA3OGMzYzVmOWEwMWJmMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5TS7LVDIDnGn2XhrKxdK3BlFrzZHt3EoTJRmW7PjZCL1Il0J
6lkTUdg3Fg4VzqJcUyn+llbDu2hNucw63yVwnRzLO6Ah+gXIRgemLEpwdfFartdw
KPqxCXmxxnA+FAdC7zF/dOv8zLTzSTp13AqWyvPreDBOmYdN+23WFcn/jSYeU+dO
8MpRxlnqIwrRzd/vIHjwFinQZH8EDy6OO6VG/IrPAncD5LGtNTLf5BBlCUtWshpn
Wdg0L8eNhqqlaRSv9YKtt8SnnWbRrO85AYoiY+4Tdsh1/LcJ+RWaudn1w7Lw0XWi
1ludJi6IVNReTygP8RQt8YCr9GsGTTQ+g3q88wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGfq24bEwEF4BVNmcHjDxfmgG/MmMB8GA1UdIwQYMBaAFMcqUk+bGzgB29fI
mhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5LzEv
Wi1yYmhzVEFRWGdGVTJad2VNUEYtYUFiOHlZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80
ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5LzEveHlwU1Q1c2JPQUhi
MThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW82+MA0GCSqGSIb3DQEBCwUAA4IB
AQA7LBh9eyTymmO6hB2z2Co4eXmfyA6gigwjV+dfLtV4yeZL/7q6F0eRx3c2sydw
Ca2YQLK5Gj8JX0dHgFxS50ze8QgT4n4ISN0wMdcXM7spMt60iQIwtUE19p7Rik/5
qqK+9AtiCrYZXCrvuePGo1P4SRt0yBMxMKAS844yyGX1Z1dZfgqKKd2zx1QnKqSj
3Llz6VxU5A146RwV6/KLUlAaG4il8TOSdnJOWaLoPlNE+FglNEdIL4eBjgORxUfu
A745c611Z9jNhL/oPrmXioS9eRGvuV55nxRQot0/aihsx5WZvTOSbCF1ZVRUxvEv
WdaQnj2IfeA5kdNglBoZ0Fp2
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:57 2025 by rpki-client