Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/X6QFIsLUS6exzX5gbb0lPtkJ1Ec.roa
File: X6QFIsLUS6exzX5gbb0lPtkJ1Ec.roa (raw, json)
Hash identifier: pFKj1NxT25mfZUQL/BFOCTCF0nmOropQLAcVo6X4tVY=
Subject key identifier: 5F:A4:05:22:C2:D4:4B:A7:B1:CD:7E:60:6D:BD:25:3E:D9:09:D4:47
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 0161CB
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/X6QFIsLUS6exzX5gbb0lPtkJ1Ec.roa
Signing time: Wed 27 Apr 2022 13:13:16 +0000
ROA not before: Wed 27 Apr 2022 13:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200826
IP address blocks: 91.234.242.0/23 maxlen: 23
91.234.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90571 (0x161cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Apr 27 13:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fa40522c2d44ba7b1cd7e606dbd253ed909d447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:a2:58:ed:b2:bc:d3:6d:91:a7:c6:3b:12:
e2:34:69:f5:a0:64:bc:00:9f:b0:48:79:8f:84:db:
f2:6e:ae:86:c6:c7:2e:2f:a2:20:4a:8d:c0:53:29:
f2:67:60:62:32:03:c7:d8:bf:f7:62:22:d8:b3:93:
92:5c:df:b2:da:c5:23:99:75:17:24:fe:56:86:1e:
8a:76:5b:53:15:bc:bc:05:b0:57:0f:b0:0c:ff:20:
ed:2b:19:2c:2e:52:e1:0f:7f:2e:f7:26:4b:60:03:
07:b9:f1:b2:44:83:c1:57:b0:78:bc:0b:f2:52:da:
b1:8a:0b:f5:3b:72:07:f6:82:86:24:32:b6:26:36:
f6:79:8f:ff:b7:dd:1b:fa:91:20:fc:b6:b1:12:e0:
62:e5:62:66:83:8e:ea:64:92:b2:8c:51:68:aa:89:
4e:d2:2d:d0:74:d7:44:9f:ac:58:e3:97:19:34:ee:
a2:5e:ec:fd:34:64:a3:21:65:14:8c:9b:61:0e:04:
ea:28:29:d2:17:fe:34:27:67:d0:ec:29:fb:cf:31:
b7:a7:d7:3e:75:0b:8c:fb:44:cc:f7:fb:13:00:76:
92:ad:53:0b:be:01:9a:b9:77:63:d9:d5:e9:6e:be:
82:2f:2f:22:3b:14:70:da:6a:3c:de:8c:b7:eb:1a:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:05:22:C2:D4:4B:A7:B1:CD:7E:60:6D:BD:25:3E:D9:09:D4:47
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/X6QFIsLUS6exzX5gbb0lPtkJ1Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.241.0-91.234.243.255
Signature Algorithm: sha256WithRSAEncryption
0b:50:05:01:d8:65:95:c2:91:0e:9d:10:1c:f7:cb:5e:d0:26:
5f:1e:74:a8:ea:8e:a1:be:4b:c0:e6:66:3a:0f:4f:a0:fa:51:
68:ba:15:43:2b:d8:cb:11:7b:df:1f:2c:a1:3c:f3:fd:cd:41:
42:a3:da:49:5e:6a:37:ae:89:06:93:1c:35:59:ea:4b:73:bf:
0c:f6:28:f4:63:62:58:17:8f:bb:d9:c4:6b:c1:e7:eb:5b:30:
0b:64:c1:ed:4e:16:32:cd:f3:72:92:12:46:7d:4b:bc:80:66:
ea:09:db:0c:18:57:c6:7a:55:27:24:c7:0b:1e:ec:b6:b3:ee:
30:21:ad:1c:b0:af:8a:9c:44:1f:17:9e:1f:37:10:1b:5b:58:
2f:f1:d5:68:d5:6d:6a:e7:7d:97:86:7d:f2:f3:15:70:ff:28:
70:30:2e:39:2b:cf:17:ba:c3:a5:03:ce:8d:16:75:65:89:de:
d9:96:f6:38:6f:e5:57:eb:fe:d5:38:bd:a6:10:c1:78:47:cd:
ed:1b:b0:ef:b2:c3:31:24:e0:40:8d:28:47:aa:3c:3c:52:f7:
fc:23:71:97:51:ae:f5:1f:7c:c6:ee:9b:0b:dc:1a:80:f8:cc:
5f:48:8e:a7:a5:76:a1:2a:d1:6f:f1:bc:94:a8:e3:ae:26:8e:
09:01:00:f6
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIDAWHLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFl
NDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcxMDU5NWQwHhcNMjIwNDI3
MTMxMzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZmE0MDUyMmMyZDQ0
YmE3YjFjZDdlNjA2ZGJkMjUzZWQ5MDlkNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvHqiWO2yvNNtkafGOxLiNGn1oGS8AJ+wSHmPhNvybq6Gxscu
L6IgSo3AUynyZ2BiMgPH2L/3YiLYs5OSXN+y2sUjmXUXJP5Whh6KdltTFby8BbBX
D7AM/yDtKxksLlLhD38u9yZLYAMHufGyRIPBV7B4vAvyUtqxigv1O3IH9oKGJDK2
Jjb2eY//t90b+pEg/LaxEuBi5WJmg47qZJKyjFFoqolO0i3QdNdEn6xY45cZNO6i
Xuz9NGSjIWUUjJthDgTqKCnSF/40J2fQ7Cn7zzG3p9c+dQuM+0TM9/sTAHaSrVML
vgGauXdj2dXpbr6CLy8iOxRw2mo83oy36xomxQIDAQABo4ICETCCAg0wHQYDVR0O
BBYEFF+kBSLC1Eunsc1+YG29JT7ZCdRHMB8GA1UdIwQYMBaAFB5Aq0DlOGCHElDp
usThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0LzEv
WDZRRklzTFVTNmV4elg1Z2JiMGxQdGtKMUVjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81
NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNT
VU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcG
CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb6vEDBAJb6vAwDQYJKoZIhvcN
AQELBQADggEBAAtQBQHYZZXCkQ6dEBz3y17QJl8edKjqjqG+S8DmZjoPT6D6UWi6
FUMr2MsRe98fLKE88/3NQUKj2kleajeuiQaTHDVZ6ktzvwz2KPRjYlgXj7vZxGvB
5+tbMAtkwe1OFjLN83KSEkZ9S7yAZuoJ2wwYV8Z6VSckxwse7Laz7jAhrRywr4qc
RB8Xnh83EBtbWC/x1WjVbWrnfZeGffLzFXD/KHAwLjkrzxe6w6UDzo0WdWWJ3tmW
9jhv5Vfr/tU4vaYQwXhHze0bsO+ywzEk4ECNKEeqPDxS9/wjcZdRrvUffMbumwvc
GoD4zF9IjqeldqEq0W/xvJSo464mjgkBAPY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:23 2023 by rpki-client on console-fra.rpki-client.org