Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-PBTag1d0YlT5othAxle3hFHwjE.roa
File: 1-PBTag1d0YlT5othAxle3hFHwjE.roa (raw, json)
Hash identifier: E/JuH8tccNZwfUqyKrBbZcocQcahX9PnksNHTAupgpc=
Subject key identifier: F8:F0:53:6A:0D:5D:D1:89:53:E6:8B:61:03:19:5E:DE:11:47:C2:31
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 05020C0F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-PBTag1d0YlT5othAxle3hFHwjE.roa
Signing time: Mon 09 May 2022 12:53:34 +0000
ROA not before: Mon 09 May 2022 12:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.213.189.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.208.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84020239 (0x5020c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 9 12:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8f0536a0d5dd18953e68b6103195ede1147c231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:ff:cf:2b:70:02:1e:5e:e3:9c:d5:43:bc:
b2:7c:a6:aa:d3:9e:47:26:e5:0d:b5:51:26:78:98:
75:d8:aa:7f:65:36:7c:e0:bb:5e:67:6c:84:bb:07:
c7:93:6c:d0:96:e4:6b:59:ff:dc:9e:5c:6f:42:7e:
f4:9c:6a:20:17:aa:58:b5:42:ce:39:36:94:6e:ed:
f8:c2:bc:19:5a:9e:6d:4b:96:f0:4d:1f:6d:29:4d:
40:03:38:3c:89:e1:cd:bc:e1:72:4f:6f:05:12:90:
3d:1e:ce:e6:70:6e:b2:8d:ec:59:74:de:89:3b:e9:
0d:9e:a0:75:ab:c8:b8:d0:68:44:fb:eb:58:97:74:
df:a2:da:77:14:dc:48:d9:ba:99:37:56:c0:73:1c:
e9:33:5f:1c:02:4a:e5:1d:66:33:82:b1:b0:2c:8f:
45:91:7c:7d:03:00:1d:c9:69:45:d0:96:81:9f:8c:
8b:1d:78:f1:9c:5e:e4:a0:a6:f5:b6:f7:dd:0a:49:
23:6e:1c:32:c5:dc:e2:e7:bd:a8:65:7f:13:2c:eb:
c3:cb:86:6b:98:e6:82:e9:ab:59:03:98:64:18:75:
a6:42:73:a2:06:70:45:b8:f3:3c:ef:5d:aa:a2:cd:
e5:7f:6e:ee:25:ab:9a:65:d0:e7:93:e5:1a:8e:e9:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:53:6A:0D:5D:D1:89:53:E6:8B:61:03:19:5E:DE:11:47:C2:31
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-PBTag1d0YlT5othAxle3hFHwjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.104.0/24
91.208.109.0/24
91.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
29:33:d0:21:7a:7b:8d:2d:d3:8a:93:5f:fd:37:f0:a2:9e:62:
23:d8:c1:9f:4b:ac:40:71:35:a2:c4:f9:3c:6a:5c:13:16:83:
c1:50:2c:70:53:d0:9d:10:ba:b6:34:bc:4a:32:58:d2:4f:a2:
d5:d2:51:db:af:d5:6c:5a:a5:ab:3c:fc:f5:55:07:69:43:e0:
02:37:35:51:ac:5c:47:e5:26:ee:e9:ce:ff:c5:d1:42:00:d0:
05:2c:ae:1b:22:0e:52:d8:ac:a2:95:75:34:96:2a:b4:a2:f7:
b8:40:9e:d7:79:44:11:54:fe:8d:9a:c6:37:ad:c8:5c:ce:9a:
31:28:0a:2c:ee:98:96:d1:a1:e6:f1:34:eb:93:e4:7b:37:0f:
7e:06:b0:0c:b0:ce:46:08:fc:d0:dd:74:a4:2f:52:25:83:e8:
89:aa:37:f4:36:d9:73:fc:fd:5d:b6:f6:d3:c5:8a:44:5b:03:
35:83:fb:4d:8a:23:0e:96:5b:14:26:38:6b:89:37:0c:f8:8a:
bf:80:df:77:4e:a9:54:09:bb:3f:4a:ea:6f:75:b3:40:9f:f9:
4d:f2:9b:f5:e9:d6:43:49:5a:ba:cd:59:d4:80:44:bd:40:bb:
c0:fe:9f:bc:ac:15:f4:73:9b:b8:ae:38:5a:31:aa:3b:75:1c:
78:ad:20:49
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEBQIMDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjQ3MzgzODljYjNiOTk4ZWM0ZmE2ZDQyNzJmOGRkNzk5ZmJjNGE5MB4XDTIyMDUw
OTEyNTMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhmMDUzNmEwZDVk
ZDE4OTUzZTY4YjYxMDMxOTVlZGUxMTQ3YzIzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANPo/88rcAIeXuOc1UO8snymqtOeRyblDbVRJniYddiqf2U2
fOC7XmdshLsHx5Ns0Jbka1n/3J5cb0J+9JxqIBeqWLVCzjk2lG7t+MK8GVqebUuW
8E0fbSlNQAM4PInhzbzhck9vBRKQPR7O5nBuso3sWXTeiTvpDZ6gdavIuNBoRPvr
WJd036LadxTcSNm6mTdWwHMc6TNfHAJK5R1mM4KxsCyPRZF8fQMAHclpRdCWgZ+M
ix148Zxe5KCm9bb33QpJI24cMsXc4ue9qGV/Eyzrw8uGa5jmgumrWQOYZBh1pkJz
ogZwRbjzPO9dqqLN5X9u7iWrmmXQ55PlGo7ppHUCAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBT48FNqDV3RiVPmi2EDGV7eEUfCMTAfBgNVHSMEGDAWgBQfRzg4nLO5mOxP
ptQnL43XmfvEqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gwYzRPSnl6dVpqc1Q2YlVKeS1OMTVuN3hLay5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNTE3Njk0LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkwYy8x
LzEtUEJUYWcxZDBZbFQ1b3RoQXhsZTNoRkh3akUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1
LzUxNzY5NC1jOGExLTQ1OGItOWNmMi02YzdlNTY4NTg5MGMvMS9IMGM0T0p5enVa
anNUNmJVSnktTjE1bjd4S2suY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABb0GgDBABb0G0DBABb1b0wDQYJ
KoZIhvcNAQELBQADggEBACkz0CF6e40t04qTX/038KKeYiPYwZ9LrEBxNaLE+Txq
XBMWg8FQLHBT0J0QurY0vEoyWNJPotXSUduv1Wxapas8/PVVB2lD4AI3NVGsXEfl
Ju7pzv/F0UIA0AUsrhsiDlLYrKKVdTSWKrSi97hAntd5RBFU/o2axjetyFzOmjEo
CizumJbRoebxNOuT5Hs3D34GsAywzkYI/NDddKQvUiWD6ImqN/Q22XP8/V229tPF
ikRbAzWD+02KIw6WWxQmOGuJNwz4ir+A33dOqVQJuz9K6m91s0Cf+U3ym/Xp1kNJ
WrrNWdSARL1Au8D+n7ysFfRzm7iuOFoxqjt1HHitIEk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org