Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/lZX_o6dp-yf4n51k5Qjz7YnieVI.roa
File: lZX_o6dp-yf4n51k5Qjz7YnieVI.roa (raw, json)
Hash identifier: e24S+FuuXYV+eUUacyGoSbthXVbBhxdfHUHZAZdU+V0=
Subject key identifier: 95:95:FF:A3:A7:69:FB:27:F8:9F:9D:64:E5:08:F3:ED:89:E2:79:52
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 03580134
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/lZX_o6dp-yf4n51k5Qjz7YnieVI.roa
Signing time: Sat 01 Jan 2022 07:53:39 +0000
ROA not before: Sat 01 Jan 2022 07:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213149
IP address blocks: 91.205.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56099124 (0x3580134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Jan 1 07:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9595ffa3a769fb27f89f9d64e508f3ed89e27952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:73:61:c8:70:85:43:cc:3d:47:a9:11:fc:
1b:93:7c:09:9c:42:67:57:32:51:cc:12:d5:cb:6d:
05:5d:a6:9c:82:97:17:29:6c:89:25:51:b3:44:85:
5e:8d:47:17:bc:8f:4c:d1:3d:48:f7:81:f3:99:48:
3f:62:62:7c:53:97:b7:82:cc:0d:3d:dc:21:dd:6f:
78:f8:42:95:03:9e:a8:ae:4e:e6:c0:fa:ed:e1:40:
87:3e:90:74:a1:a0:ef:b5:36:7b:68:b9:1d:c8:c7:
f9:ea:35:5a:b1:e2:39:3a:0c:00:0f:89:33:4a:5e:
28:de:8f:02:8f:0a:b9:73:41:36:5a:34:bd:72:5b:
6d:3a:2d:53:91:11:c2:75:78:08:80:1a:b6:21:f0:
0c:47:0a:21:15:d8:4f:70:f0:b6:e2:d5:cd:98:33:
bb:95:d6:9b:dd:49:25:57:b1:af:df:5b:c8:42:b4:
40:42:6b:c8:d4:e8:5c:a8:c5:93:cc:9b:18:76:7c:
1f:f3:44:a2:be:15:7b:7d:1d:80:52:cd:52:7e:d0:
2a:22:0c:2b:d7:e3:4f:b1:ff:fe:c0:41:38:1c:26:
3b:f4:57:7b:40:cd:ad:35:b5:16:f6:2d:f8:3d:8d:
dd:7f:4c:dc:17:50:ca:79:3c:94:d6:ad:03:42:c4:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:FF:A3:A7:69:FB:27:F8:9F:9D:64:E5:08:F3:ED:89:E2:79:52
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/lZX_o6dp-yf4n51k5Qjz7YnieVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.229.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7a:46:69:d6:4d:b7:4f:bc:53:75:ba:37:16:9c:eb:bc:28:
6b:e6:c7:82:19:66:f1:23:10:49:4d:d6:3a:4b:f4:0e:96:c3:
53:d5:bc:55:cf:97:fa:c3:ed:1a:39:85:1d:4e:bf:68:06:09:
d2:df:e3:e1:12:af:ad:81:b3:fb:53:59:83:1a:aa:20:59:48:
0f:58:7f:2a:a2:56:57:23:f5:70:61:18:0a:d4:bc:b0:eb:1e:
67:94:77:b7:bd:90:f8:40:21:51:fb:8a:dc:14:bc:a2:cf:58:
1a:59:df:5a:46:4e:60:83:64:e8:c4:19:5a:65:53:f6:9d:16:
d6:17:8e:46:ce:2b:47:e9:be:30:46:b1:cd:46:71:02:62:86:
45:7a:a3:e9:1f:e6:0c:7f:c8:ed:17:00:c6:f7:17:45:4c:36:
7d:39:a9:f4:ee:ee:45:4e:9f:86:46:95:32:63:58:82:b5:2f:
9d:9f:8a:14:c2:f8:ad:75:32:61:e7:d9:ee:dd:50:5c:bc:43:
96:95:c0:b9:f1:21:25:15:e3:5e:23:c7:48:bf:58:11:2d:4a:
ca:2e:e0:24:6e:d8:46:23:98:16:64:bb:f7:9c:1f:1d:8b:41:
e8:71:05:9f:f1:bb:78:0a:25:e2:0c:2d:c2:1c:dd:38:2e:44:
70:46:1e:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA1gBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTJkN2Q1YjgyYzgzNzhiYTIxNTM5NDNjZTk0ODJjZTRjZDQ5NTFiMB4XDTIyMDEw
MTA3NTMzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU5NWZmYTNhNzY5
ZmIyN2Y4OWY5ZDY0ZTUwOGYzZWQ4OWUyNzk1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWic2HIcIVDzD1HqRH8G5N8CZxCZ1cyUcwS1cttBV2mnIKX
FylsiSVRs0SFXo1HF7yPTNE9SPeB85lIP2JifFOXt4LMDT3cId1vePhClQOeqK5O
5sD67eFAhz6QdKGg77U2e2i5HcjH+eo1WrHiOToMAA+JM0peKN6PAo8KuXNBNlo0
vXJbbTotU5ERwnV4CIAatiHwDEcKIRXYT3DwtuLVzZgzu5XWm91JJVexr99byEK0
QEJryNToXKjFk8ybGHZ8H/NEor4Ve30dgFLNUn7QKiIMK9fjT7H//sBBOBwmO/RX
e0DNrTW1FvYt+D2N3X9M3BdQynk8lNatA0LEnR0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVlf+jp2n7J/ifnWTlCPPtieJ5UjAfBgNVHSMEGDAWgBSeLX1bgsg3i6IV
OUPOlILOTNSVGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25pMTlXNExJTjR1aUZUbER6cFNDemt6VWxScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvY2E4ZDk4LWU3YTQtNGJkYy04YzkwLWIyOTYwNmQ1MWY5ZC8x
L2xaWF9vNmRwLXlmNG41MWs1UWp6N1luaWVWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
Y2E4ZDk4LWU3YTQtNGJkYy04YzkwLWIyOTYwNmQ1MWY5ZC8xL25pMTlXNExJTjR1
aUZUbER6cFNDemt6VWxScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvN5TANBgkqhkiG9w0BAQsFAAOC
AQEAA3pGadZNt0+8U3W6Nxac67woa+bHghlm8SMQSU3WOkv0DpbDU9W8Vc+X+sPt
GjmFHU6/aAYJ0t/j4RKvrYGz+1NZgxqqIFlID1h/KqJWVyP1cGEYCtS8sOseZ5R3
t72Q+EAhUfuK3BS8os9YGlnfWkZOYINk6MQZWmVT9p0W1heORs4rR+m+MEaxzUZx
AmKGRXqj6R/mDH/I7RcAxvcXRUw2fTmp9O7uRU6fhkaVMmNYgrUvnZ+KFML4rXUy
YefZ7t1QXLxDlpXAufEhJRXjXiPHSL9YES1Kyi7gJG7YRiOYFmS795wfHYtB6HEF
n/G7eAol4gwtwhzdOC5EcEYe4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:04 2023 by rpki-client on console-fra.rpki-client.org