Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/D1Pb3nFIdC6c4vozud01nQp40iw.roa
File: D1Pb3nFIdC6c4vozud01nQp40iw.roa (raw, json)
Hash identifier: CgWZub1O6oU1Ug7KWOr7/4XWYaq0Eb877juyTxUw6/8=
Subject key identifier: 0F:53:DB:DE:71:48:74:2E:9C:E2:FA:33:B9:DD:35:9D:0A:78:D2:2C
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 0F8A4D22
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/D1Pb3nFIdC6c4vozud01nQp40iw.roa
Signing time: Sat 01 Jan 2022 09:53:33 +0000
ROA not before: Sat 01 Jan 2022 09:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.236.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260721954 (0xf8a4d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 1 09:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f53dbde7148742e9ce2fa33b9dd359d0a78d22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:b7:9d:af:28:e3:20:7a:ed:4b:8e:c7:31:
17:15:bd:a0:0a:d0:01:09:e4:29:00:3e:20:03:cd:
61:f1:27:10:6f:cd:57:8c:db:5c:0d:5f:d9:05:ba:
00:dc:28:bb:77:bf:ec:25:2e:5c:8a:21:c1:98:fd:
27:63:e0:9d:63:5a:81:d4:c5:22:82:2b:c2:07:36:
31:d0:c4:33:84:7a:ff:29:85:4d:3c:e9:95:62:c1:
7e:aa:a8:5f:fc:59:94:77:7f:f3:bd:0c:a4:6a:3b:
27:41:be:7e:17:7a:de:35:4e:25:b8:4f:4a:3e:ad:
97:77:19:4a:2f:1b:5b:31:3d:91:bd:e3:25:dc:f7:
ee:d3:5f:27:24:0e:eb:0e:77:70:ea:9a:d0:d5:05:
c8:fe:92:d0:f5:6f:fa:62:7f:87:55:5d:3d:8c:60:
8c:c3:63:dc:17:17:a3:ad:c3:af:60:9e:48:32:80:
d8:00:39:60:ba:76:75:9d:f0:d6:34:f5:9b:67:dd:
db:e2:be:ba:5b:93:3c:b1:f5:cf:18:f9:a2:de:83:
fd:84:ca:54:a2:b2:58:bc:8e:b0:7d:b5:fd:f9:91:
3f:c3:fa:50:49:b3:e2:2d:8d:86:0e:36:ab:0e:b4:
13:df:7c:44:27:8c:c7:53:14:22:50:02:8b:06:40:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:DB:DE:71:48:74:2E:9C:E2:FA:33:B9:DD:35:9D:0A:78:D2:2C
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/D1Pb3nFIdC6c4vozud01nQp40iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:11:d2:78:44:e7:85:12:e1:b0:9a:28:b6:c6:5e:5c:31:
ae:4c:a8:93:54:2f:cf:a4:7f:ea:8d:2a:61:24:42:75:68:59:
17:e1:2d:74:92:2f:f2:25:f8:b2:b4:e9:05:eb:cb:e4:05:e5:
2f:09:07:17:05:0c:ea:9e:eb:5a:9e:45:48:0c:35:77:f6:12:
47:03:30:9d:5e:78:9d:33:e2:e5:b2:81:e2:2f:57:e6:0a:cf:
a1:63:ab:dc:ce:e7:05:99:64:b7:f1:5f:6f:b4:6c:b7:87:aa:
e1:35:54:5a:42:51:c6:1e:d5:70:c0:d1:d2:e5:68:6c:73:4d:
07:8c:e2:d9:15:e6:15:d3:60:a6:7b:66:5b:a4:46:f8:8a:29:
28:8d:d8:d2:06:93:68:0b:f6:6b:66:db:5f:d9:62:e8:93:79:
dc:87:ac:47:3b:38:c7:dd:4a:62:3d:48:9e:a0:e1:9e:e3:ce:
01:3f:b8:5a:49:41:46:48:bc:20:95:0e:8a:4a:8d:53:04:8b:
8c:09:a4:df:2c:0a:9b:4d:00:55:a3:f3:32:6c:bf:07:32:db:
20:e8:2a:26:55:56:62:9b:d2:47:94:83:92:6c:87:08:06:bd:
41:84:08:04:14:5f:ae:bb:e4:4a:88:98:a9:1c:11:0a:54:c8:
02:11:7f:0a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED4pNIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDMwNDVmYzQ5MWQzOWY1MmU3MTQ1YjEwMDBiM2I4NmMzN2RlZDQ1MB4XDTIyMDEw
MTA5NTMzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGY1M2RiZGU3MTQ4
NzQyZTljZTJmYTMzYjlkZDM1OWQwYTc4ZDIyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJF1t52vKOMgeu1LjscxFxW9oArQAQnkKQA+IAPNYfEnEG/N
V4zbXA1f2QW6ANwou3e/7CUuXIohwZj9J2PgnWNagdTFIoIrwgc2MdDEM4R6/ymF
TTzplWLBfqqoX/xZlHd/870MpGo7J0G+fhd63jVOJbhPSj6tl3cZSi8bWzE9kb3j
Jdz37tNfJyQO6w53cOqa0NUFyP6S0PVv+mJ/h1VdPYxgjMNj3BcXo63Dr2CeSDKA
2AA5YLp2dZ3w1jT1m2fd2+K+uluTPLH1zxj5ot6D/YTKVKKyWLyOsH21/fmRP8P6
UEmz4i2Nhg42qw60E998RCeMx1MUIlACiwZAVm8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPU9vecUh0Lpzi+jO53TWdCnjSLDAfBgNVHSMEGDAWgBR9MEX8SR059S5x
RbEACzuGw33tRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZUQkZfRWtkT2ZVdWNVV3hBQXM3aHNOOTdVVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvMWY2M2RiLWM5NjMtNDRiYy1hMDM5LThhYWE2YTkwZmY5NS8x
L0QxUGIzbkZJZEM2YzR2b3p1ZDAxblFwNDBpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
MWY2M2RiLWM5NjMtNDRiYy1hMDM5LThhYWE2YTkwZmY5NS8xL2ZUQkZfRWtkT2ZV
dWNVV3hBQXM3aHNOOTdVVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvsEjANBgkqhkiG9w0BAQsFAAOC
AQEAdGwR0nhE54US4bCaKLbGXlwxrkyok1Qvz6R/6o0qYSRCdWhZF+EtdJIv8iX4
srTpBevL5AXlLwkHFwUM6p7rWp5FSAw1d/YSRwMwnV54nTPi5bKB4i9X5grPoWOr
3M7nBZlkt/Ffb7Rst4eq4TVUWkJRxh7VcMDR0uVobHNNB4zi2RXmFdNgpntmW6RG
+IopKI3Y0gaTaAv2a2bbX9li6JN53IesRzs4x91KYj1InqDhnuPOAT+4WklBRki8
IJUOikqNUwSLjAmk3ywKm00AVaPzMmy/BzLbIOgqJlVWYpvSR5SDkmyHCAa9QYQI
BBRfrrvkSoiYqRwRClTIAhF/Cg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:04 2023 by rpki-client on console-fra.rpki-client.org