Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/OKVidgG9CqkJkUOVPVScc1lNKLw.roa
File: OKVidgG9CqkJkUOVPVScc1lNKLw.roa (raw, json)
Hash identifier: t27EuwgQDvPQxe64HRldZzvHtOYp801GZvt+LVVOtGc=
Subject key identifier: 38:A5:62:76:01:BD:0A:A9:09:91:43:95:3D:54:9C:73:59:4D:28:BC
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 05435181
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/OKVidgG9CqkJkUOVPVScc1lNKLw.roa
Signing time: Sat 01 Jan 2022 16:05:57 +0000
ROA not before: Sat 01 Jan 2022 16:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 91.209.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88297857 (0x5435181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Jan 1 16:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38a5627601bd0aa9099143953d549c73594d28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:c9:32:b8:27:66:18:94:9a:1b:22:49:1a:
1d:f9:d8:ca:36:44:1b:dc:0b:32:e7:9d:7c:aa:7f:
28:f0:88:26:ba:04:ba:c6:4c:37:f1:56:4c:08:3c:
85:45:36:77:42:c7:6c:9b:5e:e6:b6:e9:e6:25:8a:
5d:7c:9a:ac:b8:43:db:f7:4d:23:55:4e:a4:45:2c:
13:10:ee:d5:b0:bf:1d:74:aa:a8:86:58:8b:1f:0a:
23:d9:19:b2:c8:22:df:6a:25:f4:5a:98:d5:d9:2c:
2f:c7:8d:c8:6c:9d:42:44:a5:25:0e:e3:50:81:3f:
a8:d1:8c:86:03:92:b9:f8:0d:c5:8e:7c:71:5e:ef:
e3:d0:b5:3d:bb:c4:cc:d7:47:0e:8d:f1:32:64:b4:
c0:1c:a9:86:80:0a:9b:12:5a:90:7e:3f:a8:ce:8f:
fc:e2:c1:fd:20:7b:2a:2d:ad:a2:05:9c:aa:d7:90:
d1:8b:87:5c:d3:b5:cd:d8:2a:fc:cc:c9:5d:42:d1:
37:4d:d2:6f:c9:5f:6f:56:ba:1d:b9:eb:c3:32:78:
5a:ee:7d:00:d4:6f:11:93:ca:76:58:aa:66:e6:a8:
e4:76:a2:59:76:8f:4d:02:fe:6d:4c:1d:33:47:fc:
f7:12:90:78:d4:37:ad:20:f0:5a:b5:75:76:73:3b:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:62:76:01:BD:0A:A9:09:91:43:95:3D:54:9C:73:59:4D:28:BC
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/OKVidgG9CqkJkUOVPVScc1lNKLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c1:aa:48:78:36:cb:db:cb:74:af:93:6f:35:38:78:e8:95:
c2:85:b1:9d:29:5a:7b:08:27:32:cc:51:24:9f:27:8f:71:f3:
ef:2e:5a:0e:4e:41:18:97:1a:b8:e9:21:f5:6c:8d:ce:76:91:
e5:48:c4:76:b1:1c:1c:7f:86:19:94:7b:66:39:8f:14:27:43:
ed:3b:76:f5:37:1d:67:78:c1:27:37:5b:06:a9:63:76:2e:cf:
e6:b5:7b:e8:28:9d:61:a8:f9:4e:88:65:77:16:71:79:8d:16:
7b:46:2c:cb:77:0d:b7:c9:c6:b4:62:3b:a8:08:87:74:4a:c6:
11:84:8e:a6:06:b5:a2:60:16:26:03:e2:ad:7d:34:3c:98:76:
02:4b:5c:53:8d:c3:77:42:3c:7a:14:21:2b:b5:7c:a2:22:f5:
88:e9:73:2e:5b:1d:b9:6b:3a:ce:03:cd:a9:d3:c2:71:7d:1f:
a3:d9:46:d1:8d:ce:d9:44:13:18:b6:ad:b7:6c:f5:21:3d:fa:
df:1c:39:ea:92:86:5f:43:33:87:33:12:e5:0a:ac:10:3b:5e:
46:97:ea:17:6d:8b:a0:08:57:f7:44:89:db:7d:7c:11:fb:f1:
09:6a:3a:6e:8f:52:de:13:9d:11:0f:b5:8f:9b:9f:f3:5e:7c:
08:13:b9:d1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBUNRgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YjJjZjFlZDEwNWM1YzFkYzUyN2JjZDBmMTQ5ZmU5NDQ5ZWJkMzI2MB4XDTIyMDEw
MTE2MDU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhhNTYyNzYwMWJk
MGFhOTA5OTE0Mzk1M2Q1NDljNzM1OTRkMjhiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5iyTK4J2YYlJobIkkaHfnYyjZEG9wLMuedfKp/KPCIJroE
usZMN/FWTAg8hUU2d0LHbJte5rbp5iWKXXyarLhD2/dNI1VOpEUsExDu1bC/HXSq
qIZYix8KI9kZssgi32ol9FqY1dksL8eNyGydQkSlJQ7jUIE/qNGMhgOSufgNxY58
cV7v49C1PbvEzNdHDo3xMmS0wByphoAKmxJakH4/qM6P/OLB/SB7Ki2togWcqteQ
0YuHXNO1zdgq/MzJXULRN03Sb8lfb1a6HbnrwzJ4Wu59ANRvEZPKdliqZuao5Hai
WXaPTQL+bUwdM0f89xKQeNQ3rSDwWrV1dnM7gmsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4pWJ2Ab0KqQmRQ5U9VJxzWU0ovDAfBgNVHSMEGDAWgBS7LPHtEFxcHcUn
vNDxSf6USevTJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3V5eng3UkJjWEIzRko3elE4VW4tbEVucjB5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvMjQxYjRiLWZlZDYtNDVlOS1iNmVjLTc1MWM3NGU2N2QzOC8x
L09LVmlkZ0c5Q3FrSmtVT1ZQVlNjYzFsTktMdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
MjQxYjRiLWZlZDYtNDVlOS1iNmVjLTc1MWM3NGU2N2QzOC8xL3V5eng3UkJjWEIz
Rko3elE4VW4tbEVucjB5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvRnjANBgkqhkiG9w0BAQsFAAOC
AQEAgcGqSHg2y9vLdK+TbzU4eOiVwoWxnSlaewgnMsxRJJ8nj3Hz7y5aDk5BGJca
uOkh9WyNznaR5UjEdrEcHH+GGZR7ZjmPFCdD7Tt29TcdZ3jBJzdbBqljdi7P5rV7
6CidYaj5TohldxZxeY0We0Ysy3cNt8nGtGI7qAiHdErGEYSOpga1omAWJgPirX00
PJh2AktcU43Dd0I8ehQhK7V8oiL1iOlzLlsduWs6zgPNqdPCcX0fo9lG0Y3O2UQT
GLatt2z1IT363xw56pKGX0MzhzMS5QqsEDteRpfqF22LoAhX90SJ2318EfvxCWo6
bo9S3hOdEQ+1j5uf8158CBO50Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:25 2025 by rpki-client