Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/a8unqiB0BgNxF4hvK36I13xLpto.roa
File: a8unqiB0BgNxF4hvK36I13xLpto.roa (raw, json)
Hash identifier: B2mUWdS9Gl3suL/NttX5iFK5OsIApAHrANCAPrSGRYw=
Subject key identifier: 6B:CB:A7:AA:20:74:06:03:71:17:88:6F:2B:7E:88:D7:7C:4B:A6:DA
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0388D99B
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/a8unqiB0BgNxF4hvK36I13xLpto.roa
Signing time: Sat 01 Jan 2022 07:00:38 +0000
ROA not before: Sat 01 Jan 2022 07:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198593
IP address blocks: 91.237.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59300251 (0x388d99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jan 1 07:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bcba7aa207406037117886f2b7e88d77c4ba6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:f6:af:1c:09:f2:3e:65:a4:0f:06:ea:a9:
9e:c0:ec:6a:32:c4:40:99:44:f6:2f:d8:0f:28:f8:
56:97:5f:b5:a6:e7:06:c7:14:10:f6:a8:5c:20:25:
79:6d:d5:4e:80:4d:50:a5:0e:b2:05:2e:a9:0b:94:
1e:4c:69:4a:17:f4:99:9c:6c:3c:b7:58:84:8c:5f:
b9:8e:f8:3e:9e:99:d6:2d:6e:7d:0f:6d:02:94:6a:
20:97:47:18:72:b7:79:e7:c6:6a:f0:2a:15:5d:0b:
dc:9c:59:cf:10:dd:27:eb:97:67:06:5a:da:0d:c7:
8e:5b:67:bb:f9:52:f1:e0:45:58:65:f5:52:4c:56:
2b:dc:f0:41:fe:43:03:8a:2b:5a:5c:18:25:c7:1b:
4f:d3:ad:e7:56:7a:3c:5b:4c:1f:85:9a:49:32:1e:
52:77:ca:2f:8a:5b:68:7c:2d:4c:62:73:99:7a:7e:
37:9c:a8:75:c4:10:81:9a:86:fc:b1:86:ee:c9:2b:
14:94:3a:15:70:c1:18:04:73:01:36:de:73:67:39:
9e:64:69:33:33:1b:63:72:57:ca:f3:76:d8:ec:f9:
bd:6a:ec:f7:6d:4a:e7:9c:e3:e0:42:a8:ca:0d:7e:
17:79:3b:1d:22:36:60:45:c6:01:6f:46:df:b1:6f:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:A7:AA:20:74:06:03:71:17:88:6F:2B:7E:88:D7:7C:4B:A6:DA
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/a8unqiB0BgNxF4hvK36I13xLpto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.5.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3d:e7:1d:26:f9:04:af:ad:75:e6:f7:20:d4:08:aa:4d:d4:
34:2e:39:d4:88:39:03:91:49:c3:68:51:92:c0:7c:4c:c9:2f:
1a:35:9b:eb:f3:61:aa:5a:74:2f:28:c0:c8:86:2d:c2:2d:e0:
7d:a4:b6:18:78:19:0b:4b:ae:82:9a:6a:dc:75:4c:7c:0b:29:
8e:40:a2:e9:30:76:e0:8b:67:d8:53:bc:1e:85:af:42:aa:cb:
3e:ec:d7:7b:c3:92:e0:9e:43:1c:79:0c:9b:d9:62:cf:29:9f:
8e:3b:59:82:5b:66:10:a0:53:18:6d:a1:bb:db:28:2f:d1:89:
e8:74:b5:07:e0:68:24:8a:1d:f0:a7:65:d0:b7:11:a6:47:f3:
9a:8d:7e:b7:ae:88:d6:98:c3:fe:2e:c4:2f:39:30:bd:c2:82:
c6:95:39:6f:fa:21:98:d4:f7:e4:8a:2b:16:93:25:7e:53:47:
75:2b:65:18:57:cb:45:64:4b:9d:dc:fa:15:26:8b:70:20:93:
4f:0f:65:8b:eb:a0:81:4a:28:21:3f:75:4f:c4:ce:44:12:41:
cd:d5:2f:5d:07:9b:7c:b5:a4:13:69:b8:75:c4:4d:96:13:8c:
a5:1c:de:63:87:b2:d2:88:68:f1:d2:ac:58:de:8c:05:17:bd:
58:25:ef:a0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA4jZmzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Mzc3MmI5OTk5M2IwNjA4ZDI3ODJhZjQ1YTIyZWI5M2M3ZmRhNjNiMB4XDTIyMDEw
MTA3MDAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJjYmE3YWEyMDc0
MDYwMzcxMTc4ODZmMmI3ZTg4ZDc3YzRiYTZkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuS9q8cCfI+ZaQPBuqpnsDsajLEQJlE9i/YDyj4Vpdftabn
BscUEPaoXCAleW3VToBNUKUOsgUuqQuUHkxpShf0mZxsPLdYhIxfuY74Pp6Z1i1u
fQ9tApRqIJdHGHK3eefGavAqFV0L3JxZzxDdJ+uXZwZa2g3Hjltnu/lS8eBFWGX1
UkxWK9zwQf5DA4orWlwYJccbT9Ot51Z6PFtMH4WaSTIeUnfKL4pbaHwtTGJzmXp+
N5yodcQQgZqG/LGG7skrFJQ6FXDBGARzATbec2c5nmRpMzMbY3JXyvN22Oz5vWrs
921K55zj4EKoyg1+F3k7HSI2YEXGAW9G37Fv/O0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRry6eqIHQGA3EXiG8rfojXfEum2jAfBgNVHSMEGDAWgBRDdyuZmTsGCNJ4
KvRaIuuTx/2mOzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1EzY3JtWms3QmdqU2VDcjBXaUxyazhmOXBqcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvNGZiZWE4LTVlNzktNDZhMi1iYTVjLWExNmQ5N2FmYTY0My8x
L2E4dW5xaUIwQmdOeEY0aHZLMzZJMTN4THB0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
NGZiZWE4LTVlNzktNDZhMi1iYTVjLWExNmQ5N2FmYTY0My8xL1EzY3JtWms3Qmdq
U2VDcjBXaUxyazhmOXBqcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvtBTANBgkqhkiG9w0BAQsFAAOC
AQEAkj3nHSb5BK+tdeb3INQIqk3UNC451Ig5A5FJw2hRksB8TMkvGjWb6/Nhqlp0
LyjAyIYtwi3gfaS2GHgZC0uugppq3HVMfAspjkCi6TB24Itn2FO8HoWvQqrLPuzX
e8OS4J5DHHkMm9lizymfjjtZgltmEKBTGG2hu9soL9GJ6HS1B+BoJIod8Kdl0LcR
pkfzmo1+t66I1pjD/i7ELzkwvcKCxpU5b/ohmNT35IorFpMlflNHdStlGFfLRWRL
ndz6FSaLcCCTTw9li+uggUooIT91T8TORBJBzdUvXQebfLWkE2m4dcRNlhOMpRze
Y4ey0oho8dKsWN6MBRe9WCXvoA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:39 2025 by rpki-client