Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/W864GfwANXin0aSWn0ZFdY5iHms.roa
File: W864GfwANXin0aSWn0ZFdY5iHms.roa (raw, json)
Hash identifier: JM1/S6pW0eCuC3qQTMK3hjZZUYqT6BRM9IT92Ri/4EQ=
Subject key identifier: 5B:CE:B8:19:FC:00:35:78:A7:D1:A4:96:9F:46:45:75:8E:62:1E:6B
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0182FDB7452F427BF120EF9A29726809CF8F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/W864GfwANXin0aSWn0ZFdY5iHms.roa
Signing time: Fri 02 Sep 2022 10:20:22 +0000
ROA not before: Fri 02 Sep 2022 10:20:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133861
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:b7:45:2f:42:7b:f1:20:ef:9a:29:72:68:09:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 2 10:20:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bceb819fc003578a7d1a4969f4645758e621e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:70:0e:a8:59:b0:4b:af:02:3c:fe:ac:8b:
60:15:e2:9f:aa:39:e1:5b:f9:f4:b3:68:df:6d:23:
a2:50:6e:ac:f8:0b:34:fd:d5:2f:32:c5:5e:60:90:
8a:80:f1:f9:f7:34:3e:04:1e:1c:9a:89:fc:af:f5:
d8:09:9d:cb:e6:9d:75:e0:cb:c7:ab:66:99:b1:dc:
88:fe:34:59:e3:ab:fc:27:43:76:e6:39:79:66:af:
6a:5e:73:31:20:f5:65:9d:bf:e6:52:23:62:f2:b6:
41:00:22:a9:db:cd:bc:f1:80:5d:5a:2e:16:70:66:
e1:70:d0:1a:b1:87:87:6a:a8:05:85:f1:83:a3:e7:
c9:fb:94:7c:16:a2:d4:20:4b:e0:f7:34:fe:e2:96:
b3:b6:3c:0f:5a:7c:57:da:0a:0b:6b:72:8e:3e:8f:
27:5f:f2:6c:e2:9c:84:da:0b:ef:2b:ee:eb:ec:0b:
b5:88:9c:f4:7b:b2:5c:75:98:cf:3d:80:2e:43:7d:
97:d1:8b:65:6e:49:5f:47:e0:3c:ea:f7:07:59:b9:
e0:2b:f8:93:b6:28:84:61:98:87:1b:6d:4b:f8:ca:
5d:81:a7:38:72:47:9a:cb:ac:ef:f6:d9:6e:1a:f0:
bb:88:b1:d6:02:fd:da:37:68:38:46:9b:e6:84:df:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:B8:19:FC:00:35:78:A7:D1:A4:96:9F:46:45:75:8E:62:1E:6B
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/W864GfwANXin0aSWn0ZFdY5iHms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f5:ab:9f:11:e6:86:7d:9f:32:3e:55:93:f4:7d:b8:47:19:
79:68:3c:7c:13:5b:85:39:fb:a3:3a:39:77:7e:11:ca:1d:80:
7e:dd:f4:89:b6:6f:32:cc:6c:23:ed:fa:54:61:52:53:65:8a:
73:55:2e:fe:bb:ca:28:9b:43:9b:b9:f9:aa:43:58:3a:d6:1d:
24:16:34:c3:d7:7c:5d:f9:f1:96:b2:0b:5c:04:20:02:b7:34:
43:87:6b:76:00:c8:5e:9a:07:f0:aa:b9:83:ce:89:49:80:99:
aa:d3:21:ea:0a:fb:22:35:db:3f:0c:37:5c:a7:04:9d:a8:b6:
a9:70:01:56:a0:58:09:6b:bd:6b:a2:ab:c4:9e:10:b5:19:72:
33:4f:45:4e:e8:4d:2e:da:66:b3:5a:da:6c:13:86:69:65:1e:
3f:a5:0e:b4:e4:d0:a3:a4:84:de:93:23:50:a8:cb:e3:2f:93:
95:e5:45:fa:aa:29:1c:54:bd:09:13:76:07:98:30:fb:13:0d:
d3:63:d0:29:f3:07:b8:b5:05:ca:11:49:31:f0:63:32:2f:cc:
cd:be:64:b9:7c:43:0b:d0:cd:ff:a7:cc:e3:f8:f7:6c:d7:f9:
83:7c:65:15:6f:07:59:f3:79:d4:a4:34:2c:cb:d0:53:48:63:
e4:ff:c9:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYL9t0UvQnvxIO+aKXJoCc+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjIwOTAyMTAyMDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmNlYjgxOWZjMDAzNTc4YTdkMWE0OTY5ZjQ2NDU3NThlNjIxZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUVwDqhZsEuvAjz+rItgFeKfqjnh
W/n0s2jfbSOiUG6s+As0/dUvMsVeYJCKgPH59zQ+BB4cmon8r/XYCZ3L5p114MvH
q2aZsdyI/jRZ46v8J0N25jl5Zq9qXnMxIPVlnb/mUiNi8rZBACKp28288YBdWi4W
cGbhcNAasYeHaqgFhfGDo+fJ+5R8FqLUIEvg9zT+4paztjwPWnxX2goLa3KOPo8n
X/Js4pyE2gvvK+7r7Au1iJz0e7JcdZjPPYAuQ32X0YtlbklfR+A86vcHWbngK/iT
tiiEYZiHG21L+Mpdgac4ckeay6zv9tluGvC7iLHWAv3aN2g4RpvmhN/8XwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFvOuBn8ADV4p9Gklp9GRXWOYh5rMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvVzg2NEdmd0FOWGluMGFTV24wWkZkWTVpSG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DsAwQA
W9DwMA0GCSqGSIb3DQEBCwUAA4IBAQCG9aufEeaGfZ8yPlWT9H24Rxl5aDx8E1uF
OfujOjl3fhHKHYB+3fSJtm8yzGwj7fpUYVJTZYpzVS7+u8oom0ObufmqQ1g61h0k
FjTD13xd+fGWsgtcBCACtzRDh2t2AMhemgfwqrmDzolJgJmq0yHqCvsiNds/DDdc
pwSdqLapcAFWoFgJa71roqvEnhC1GXIzT0VO6E0u2mazWtpsE4ZpZR4/pQ605NCj
pITekyNQqMvjL5OV5UX6qikcVL0JE3YHmDD7Ew3TY9Ap8we4tQXKEUkx8GMyL8zN
vmS5fEML0M3/p8zj+Pds1/mDfGUVbwdZ83nUpDQsy9BTSGPk/8mV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org