Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/rSjBWhrE6GNzRgELtQbzMHUb5zM.roa
File: rSjBWhrE6GNzRgELtQbzMHUb5zM.roa (raw, json)
Hash identifier: /xPlhWaN+NQYnrOJvqGJhPSD3i4ehGgR8xWclEYqlzA=
Subject key identifier: AD:28:C1:5A:1A:C4:E8:63:73:46:01:0B:B5:06:F3:30:75:1B:E7:33
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 02821033
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/rSjBWhrE6GNzRgELtQbzMHUb5zM.roa
Signing time: Sat 01 Jan 2022 05:54:00 +0000
ROA not before: Sat 01 Jan 2022 05:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198677
IP address blocks: 91.238.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42078259 (0x2821033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Jan 1 05:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad28c15a1ac4e8637346010bb506f330751be733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:6c:a7:5e:52:77:80:8d:73:29:eb:31:43:
ca:78:ca:74:a4:00:2e:22:ba:86:d7:7e:0e:fd:d2:
0b:32:7e:c3:79:f2:58:86:a5:86:8b:f1:50:65:be:
2e:aa:a1:74:44:bb:93:94:20:f3:18:78:c7:2d:53:
95:59:9d:fc:c8:96:8f:dc:0a:aa:bc:53:bc:b4:81:
d3:6b:a7:b4:07:61:28:88:bf:f8:c8:b7:6a:51:12:
3a:48:5f:b7:2e:49:03:d7:62:11:c9:8e:bb:9d:6c:
b7:38:93:ec:4e:5c:9d:d2:ca:c8:27:a0:18:02:97:
6a:02:31:ab:10:d9:69:7d:de:74:e0:0d:59:fb:d0:
be:f1:55:90:c3:95:bf:13:84:86:4e:0d:41:c1:0f:
c3:ff:43:13:8a:64:f1:f0:67:aa:37:7c:df:a6:08:
70:f8:17:81:07:ad:56:db:4b:8c:4a:b3:1c:5b:0e:
ea:4c:b9:99:60:be:6b:a8:00:67:16:e7:57:8b:09:
45:26:5c:bd:af:8d:dc:fc:60:3b:3b:cf:04:62:e9:
a8:ae:99:7d:47:61:3e:46:d9:8d:8b:c8:04:bd:9a:
5e:d9:68:47:a7:32:a1:bf:a5:23:1d:eb:a2:85:b8:
74:82:db:f6:6c:0b:29:5e:d8:cc:ba:21:b7:21:9d:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:C1:5A:1A:C4:E8:63:73:46:01:0B:B5:06:F3:30:75:1B:E7:33
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/rSjBWhrE6GNzRgELtQbzMHUb5zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b3:23:16:66:bb:23:6e:95:08:f4:47:ca:72:bd:74:13:77:
4d:36:a2:82:a3:63:5b:90:98:36:83:08:22:10:5d:16:c1:9f:
3e:e2:15:91:db:6c:ae:67:07:95:bd:95:bf:ab:ad:76:5b:44:
fd:1c:5a:da:a9:17:0f:74:a1:ba:88:92:6a:29:f7:8a:f6:2d:
b9:6d:8f:69:d7:23:df:ec:cb:70:88:d5:1e:9a:ee:cf:c7:1a:
be:38:24:54:d8:a9:65:b0:d2:d5:05:2d:3b:0f:4b:ed:38:48:
5e:f1:83:90:03:7c:69:55:62:f3:91:a9:fa:4d:12:37:79:ab:
40:62:df:6c:1b:f3:ca:23:b8:54:a0:0b:4f:f2:01:c6:2a:b5:
d7:37:2c:7f:91:02:e5:35:d8:b9:be:f8:93:c8:b4:b6:c2:1b:
f2:8e:8f:94:73:ca:09:c5:40:b0:ae:40:59:27:b3:a8:0c:1f:
33:ed:61:7b:c6:95:be:98:0f:53:83:02:7c:0c:f9:3d:4f:7b:
2f:75:df:4a:83:3d:a7:ee:4b:ff:59:77:df:15:68:bd:72:be:
6a:a7:21:7f:9d:09:5a:60:94:69:3d:11:9a:e9:2e:97:2f:f6:
81:c2:06:4e:f7:be:2f:56:12:6b:c4:f4:83:27:3c:24:96:61:
23:9d:7e:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAoIQMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MGU2YTAxMDdkNjg5YTkzNzBiNjIyOTUxYTQ0OTY0NmNjMzhiNTkwMB4XDTIyMDEw
MTA1NTQwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQyOGMxNWExYWM0
ZTg2MzczNDYwMTBiYjUwNmYzMzA3NTFiZTczMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIvbKdeUneAjXMp6zFDynjKdKQALiK6htd+Dv3SCzJ+w3ny
WIalhovxUGW+LqqhdES7k5Qg8xh4xy1TlVmd/MiWj9wKqrxTvLSB02untAdhKIi/
+Mi3alESOkhfty5JA9diEcmOu51stziT7E5cndLKyCegGAKXagIxqxDZaX3edOAN
WfvQvvFVkMOVvxOEhk4NQcEPw/9DE4pk8fBnqjd836YIcPgXgQetVttLjEqzHFsO
6ky5mWC+a6gAZxbnV4sJRSZcva+N3PxgOzvPBGLpqK6ZfUdhPkbZjYvIBL2aXtlo
R6cyob+lIx3rooW4dILb9mwLKV7YzLohtyGd6BMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBStKMFaGsToY3NGAQu1BvMwdRvnMzAfBgNVHSMEGDAWgBQg5qAQfWiak3C2
IpUaRJZGzDi1kDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lPYWdFSDFvbXBOd3RpS1ZHa1NXUnN3NHRaQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvZTg0ZThmLThiYjItNDA1NC1iNDk1LTEyNWVlZGY4ZDlmMS8x
L3JTakJXaHJFNkdOelJnRUx0UWJ6TUhVYjV6TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
ZTg0ZThmLThiYjItNDA1NC1iNDk1LTEyNWVlZGY4ZDlmMS8xL0lPYWdFSDFvbXBO
d3RpS1ZHa1NXUnN3NHRaQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvuejANBgkqhkiG9w0BAQsFAAOC
AQEAt7MjFma7I26VCPRHynK9dBN3TTaigqNjW5CYNoMIIhBdFsGfPuIVkdtsrmcH
lb2Vv6utdltE/Rxa2qkXD3ShuoiSain3ivYtuW2Padcj3+zLcIjVHpruz8cavjgk
VNipZbDS1QUtOw9L7ThIXvGDkAN8aVVi85Gp+k0SN3mrQGLfbBvzyiO4VKALT/IB
xiq11zcsf5EC5TXYub74k8i0tsIb8o6PlHPKCcVAsK5AWSezqAwfM+1he8aVvpgP
U4MCfAz5PU97L3XfSoM9p+5L/1l33xVovXK+aqchf50JWmCUaT0Rmukuly/2gcIG
Tve+L1YSa8T0gyc8JJZhI51+Zg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:57 2023 by rpki-client on console-fra.rpki-client.org