Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/HTz9Y-TLxMjV2Yf73n3cMvRe6WE.roa
File: HTz9Y-TLxMjV2Yf73n3cMvRe6WE.roa (raw, json)
Hash identifier: o0WxeDgIste6JTeOeemnbhpqabbh0jAtXZ4aYnJif7M=
Subject key identifier: 1D:3C:FD:63:E4:CB:C4:C8:D5:D9:87:FB:DE:7D:DC:32:F4:5E:E9:61
Certificate issuer: /CN=9314a0ddd25b72739e0024b104bf1499fb8e3190
Certificate serial: 04477577
Authority key identifier: 93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxSg3dJbcnOeACSxBL8UmfuOMZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/HTz9Y-TLxMjV2Yf73n3cMvRe6WE.roa
Signing time: Sat 01 Jan 2022 13:59:52 +0000
ROA not before: Sat 01 Jan 2022 13:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211261
IP address blocks: 91.210.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71791991 (0x4477577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9314a0ddd25b72739e0024b104bf1499fb8e3190
Validity
Not Before: Jan 1 13:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d3cfd63e4cbc4c8d5d987fbde7ddc32f45ee961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:31:69:7e:77:fd:6d:ab:7e:77:2a:fb:38:
95:eb:68:ce:a6:b4:e5:2a:b1:90:dd:64:7e:74:48:
bd:ce:e9:4f:51:9d:1d:fe:ac:56:50:69:69:93:a0:
7a:aa:fe:78:1c:0d:32:2b:e0:a5:32:42:7c:26:e4:
fb:60:4c:70:be:34:ce:6f:ef:ac:fb:f9:d4:44:de:
3f:5c:d6:e5:b9:07:9d:95:3f:f6:f9:72:a8:7c:d0:
64:5f:35:d1:6e:cb:a5:a6:6d:f1:61:9f:06:63:3a:
53:80:31:04:23:79:17:a6:ab:16:78:e5:00:8d:7d:
25:91:e1:57:44:9b:96:f8:2f:3c:d1:33:1e:67:af:
1f:00:1b:80:87:48:f7:6c:56:17:63:39:be:22:31:
90:c4:b6:a8:2e:0a:95:21:eb:39:6a:5e:71:c4:b4:
f1:63:be:20:19:8c:bf:61:f0:e3:18:05:28:6f:41:
a8:ab:88:d3:1c:ea:08:f8:44:3a:79:2e:5d:9f:15:
8d:f4:60:b0:8a:1e:37:fe:75:6a:e8:b4:02:86:30:
45:08:77:43:89:e0:9b:0c:47:bd:22:65:1a:70:3a:
90:1f:e2:ab:02:ad:fd:57:bb:29:26:a2:99:85:60:
f2:a4:f1:f6:8c:45:61:84:b1:26:31:65:47:8f:2e:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:FD:63:E4:CB:C4:C8:D5:D9:87:FB:DE:7D:DC:32:F4:5E:E9:61
X509v3 Authority Key Identifier:
keyid:93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxSg3dJbcnOeACSxBL8UmfuOMZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/HTz9Y-TLxMjV2Yf73n3cMvRe6WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/kxSg3dJbcnOeACSxBL8UmfuOMZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.126.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bf:30:8c:57:ac:1a:5b:9a:b6:ab:93:6a:15:cc:61:97:6a:
b0:f9:78:fa:fc:ab:1d:f9:4e:2c:80:88:e1:7c:b2:82:58:97:
54:f3:dc:85:f5:78:eb:c3:ed:f1:6d:84:0a:d3:38:bf:18:24:
b1:98:3b:64:61:89:c6:83:d1:5e:d5:c1:13:f8:bb:a8:85:96:
c7:78:36:33:a7:a1:a5:87:94:fc:5a:33:32:ee:97:c0:e4:8e:
2d:3e:68:b8:8b:cb:2a:20:30:89:5b:a0:eb:24:b9:0f:e8:5f:
cc:93:22:f4:91:3e:86:cd:24:dd:0e:d9:c2:6d:55:51:bd:42:
ce:52:41:38:b1:e3:2f:3d:b9:d9:52:db:fb:3e:2b:51:69:2c:
de:de:45:ad:ce:1f:04:28:16:f0:9d:c4:78:8c:03:35:fb:7d:
35:d4:3f:ff:27:2f:3e:dd:36:af:7e:04:2f:68:6e:48:11:25:
68:39:4c:3f:54:2b:09:83:9b:05:47:6d:97:cc:f1:ce:1f:b4:
66:62:c5:a5:4b:3f:86:2a:93:9c:fc:3d:1e:9b:e3:66:33:f1:
31:b9:47:03:02:75:d7:f9:08:23:9c:89:39:5a:80:7e:79:05:
32:14:73:60:8c:b2:90:19:01:18:7f:68:32:2a:51:de:37:d9:
d9:0b:74:a0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBEd1dzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzE0YTBkZGQyNWI3MjczOWUwMDI0YjEwNGJmMTQ5OWZiOGUzMTkwMB4XDTIyMDEw
MTEzNTk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQzY2ZkNjNlNGNi
YzRjOGQ1ZDk4N2ZiZGU3ZGRjMzJmNDVlZTk2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5lMWl+d/1tq353Kvs4letozqa05SqxkN1kfnRIvc7pT1Gd
Hf6sVlBpaZOgeqr+eBwNMivgpTJCfCbk+2BMcL40zm/vrPv51ETeP1zW5bkHnZU/
9vlyqHzQZF810W7LpaZt8WGfBmM6U4AxBCN5F6arFnjlAI19JZHhV0SblvgvPNEz
HmevHwAbgIdI92xWF2M5viIxkMS2qC4KlSHrOWpeccS08WO+IBmMv2Hw4xgFKG9B
qKuI0xzqCPhEOnkuXZ8VjfRgsIoeN/51aui0AoYwRQh3Q4ngmwxHvSJlGnA6kB/i
qwKt/Ve7KSaimYVg8qTx9oxFYYSxJjFlR48uv8ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdPP1j5MvEyNXZh/vefdwy9F7pYTAfBgNVHSMEGDAWgBSTFKDd0ltyc54A
JLEEvxSZ+44xkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t4U2czZEpiY25PZUFDU3hCTDhVbWZ1T01aQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvYmFiMTAzLWQwMjYtNDE1MS04MTE3LTFkNDlhN2Y0YWEzZS8x
L0hUejlZLVRMeE1qVjJZZjczbjNjTXZSZTZXRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
YmFiMTAzLWQwMjYtNDE1MS04MTE3LTFkNDlhN2Y0YWEzZS8xL2t4U2czZEpiY25P
ZUFDU3hCTDhVbWZ1T01aQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvSfjANBgkqhkiG9w0BAQsFAAOC
AQEAV78wjFesGluatquTahXMYZdqsPl4+vyrHflOLICI4XyygliXVPPchfV468Pt
8W2ECtM4vxgksZg7ZGGJxoPRXtXBE/i7qIWWx3g2M6ehpYeU/FozMu6XwOSOLT5o
uIvLKiAwiVug6yS5D+hfzJMi9JE+hs0k3Q7Zwm1VUb1CzlJBOLHjLz252VLb+z4r
UWks3t5Frc4fBCgW8J3EeIwDNft9NdQ//ycvPt02r34EL2huSBElaDlMP1QrCYOb
BUdtl8zxzh+0ZmLFpUs/hiqTnPw9HpvjZjPxMblHAwJ11/kII5yJOVqAfnkFMhRz
YIyykBkBGH9oMipR3jfZ2Qt0oA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:50 2023 by rpki-client on console-fra.rpki-client.org