Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/5356fXgG-Pp-P5yV8EMbGNSIhcE.roa
File: 5356fXgG-Pp-P5yV8EMbGNSIhcE.roa (raw, json)
Hash identifier: 2d/IxauBsAxeEJASt/92auoSon9nzBKZOgBOVmhkeAw=
Subject key identifier: E7:7E:7A:7D:78:06:F8:FA:7E:3F:9C:95:F0:43:1B:18:D4:88:85:C1
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE43842
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/5356fXgG-Pp-P5yV8EMbGNSIhcE.roa
Signing time: Sat 01 Jan 2022 12:59:43 +0000
ROA not before: Sat 01 Jan 2022 12:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210975
IP address blocks: 91.211.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266614850 (0xfe43842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e77e7a7d7806f8fa7e3f9c95f0431b18d48885c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:2e:20:44:d2:f8:8d:f9:57:d7:ea:a0:92:
f2:e7:c8:30:b9:49:d3:56:d3:01:36:2e:c0:76:a3:
ac:8d:ba:9d:30:4e:7b:6b:e5:57:bd:18:f1:1c:ed:
cd:36:81:a3:5f:63:7a:e1:bd:49:3e:6f:d3:95:33:
c4:5e:a3:f3:07:4e:a7:a9:e0:f9:2c:c6:4d:f5:22:
29:1a:7e:07:8d:e8:ac:aa:f7:38:97:d4:55:67:4a:
34:4c:2d:64:05:dc:21:f2:22:a2:63:39:7b:b5:a2:
a3:da:5f:ad:89:6c:af:02:4c:4d:69:31:55:69:27:
28:31:72:40:73:08:4f:c3:d3:da:62:11:63:17:ba:
d6:bf:0b:b3:b7:93:a8:03:f8:68:c6:e5:f5:10:c6:
c3:72:dc:23:e2:2e:21:c3:18:59:16:91:13:5c:c8:
d4:61:32:5f:5d:8f:99:31:1e:5a:b8:63:ad:d7:5d:
7f:9d:ca:c4:df:3e:b0:52:c9:b7:0d:b3:6f:02:3b:
0f:ab:f0:9f:4a:78:96:1d:43:6d:31:71:d8:e4:e3:
e9:45:d6:b0:c2:4f:69:d3:dd:61:de:5c:18:7f:90:
c2:f6:54:bb:be:7f:f4:b2:8b:96:c4:84:6b:d1:74:
62:de:7c:70:48:90:7a:ff:6e:a0:24:21:e8:5c:79:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:7A:7D:78:06:F8:FA:7E:3F:9C:95:F0:43:1B:18:D4:88:85:C1
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/5356fXgG-Pp-P5yV8EMbGNSIhcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.121.0/24
Signature Algorithm: sha256WithRSAEncryption
55:26:4f:63:68:77:27:13:dd:33:93:84:5d:5a:6d:cf:23:db:
da:56:29:92:ff:3f:08:60:30:c3:4e:bf:91:be:95:95:18:2f:
e9:47:7c:4b:9e:db:20:f2:92:08:29:ef:e5:f8:51:18:3c:c8:
65:5f:cb:0b:b4:19:cd:fc:9c:48:0c:01:53:ef:3b:5e:75:93:
18:4c:50:64:ff:21:f7:58:55:4b:a4:b6:30:00:f5:06:df:f3:
5b:c4:dc:17:65:29:f4:cd:0a:5b:06:f2:b5:9f:d9:32:ab:0a:
13:5d:38:84:7a:41:1f:60:55:e3:8e:75:b5:39:49:bd:ea:a7:
e3:ae:64:f4:55:0d:6a:fa:d4:33:9c:7d:3d:4e:8e:65:75:4f:
dc:a7:92:92:b5:05:36:19:1a:0d:01:35:19:4f:a1:a1:28:1e:
03:9b:31:7e:d1:58:e0:cd:d3:0c:95:87:85:c3:4b:01:9f:93:
3d:1d:13:53:6b:09:17:4e:f2:b9:f1:c8:49:34:9d:9a:99:51:
6d:88:95:4b:dc:b6:fb:0f:4d:ca:83:df:9d:3e:f7:b5:3d:04:
5b:88:7d:f2:0d:43:8d:cf:7f:4c:ab:ec:90:51:27:1e:a9:4b:
f2:06:71:47:3c:55:9d:c3:0f:aa:96:c5:11:a0:f7:3e:44:43:
d3:d4:03:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED+Q4QjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Y2U5N2NmNGQ4ZDBiYzE3YjNhZjFkNjJjNGQ3MTQ4ODY2MWJkMjEyMB4XDTIyMDEw
MTEyNTk0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTc3ZTdhN2Q3ODA2
ZjhmYTdlM2Y5Yzk1ZjA0MzFiMThkNDg4ODVjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0HLiBE0viN+VfX6qCS8ufIMLlJ01bTATYuwHajrI26nTBO
e2vlV70Y8RztzTaBo19jeuG9ST5v05UzxF6j8wdOp6ng+SzGTfUiKRp+B43orKr3
OJfUVWdKNEwtZAXcIfIiomM5e7Wio9pfrYlsrwJMTWkxVWknKDFyQHMIT8PT2mIR
Yxe61r8Ls7eTqAP4aMbl9RDGw3LcI+IuIcMYWRaRE1zI1GEyX12PmTEeWrhjrddd
f53KxN8+sFLJtw2zbwI7D6vwn0p4lh1DbTFx2OTj6UXWsMJPadPdYd5cGH+QwvZU
u75/9LKLlsSEa9F0Yt58cEiQev9uoCQh6Fx54/ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTnfnp9eAb4+n4/nJXwQxsY1IiFwTAfBgNVHSMEGDAWgBRs6Xz02NC8F7Ov
HWLE1xSIZhvSEjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JPbDg5TmpRdkJlenJ4MWl4TmNVaUdZYjBoSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvZTRjY2IxLWNhMjUtNDA5OS04MjczLTM5OTNhYTMyNGUxZi8x
LzUzNTZmWGdHLVBwLVA1eVY4RU1iR05TSWhjRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
ZTRjY2IxLWNhMjUtNDA5OS04MjczLTM5OTNhYTMyNGUxZi8xL2JPbDg5TmpRdkJl
enJ4MWl4TmNVaUdZYjBoSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvTeTANBgkqhkiG9w0BAQsFAAOC
AQEAVSZPY2h3JxPdM5OEXVptzyPb2lYpkv8/CGAww06/kb6VlRgv6Ud8S57bIPKS
CCnv5fhRGDzIZV/LC7QZzfycSAwBU+87XnWTGExQZP8h91hVS6S2MAD1Bt/zW8Tc
F2Up9M0KWwbytZ/ZMqsKE104hHpBH2BV4451tTlJveqn465k9FUNavrUM5x9PU6O
ZXVP3KeSkrUFNhkaDQE1GU+hoSgeA5sxftFY4M3TDJWHhcNLAZ+TPR0TU2sJF07y
ufHISTSdmplRbYiVS9y2+w9NyoPfnT73tT0EW4h98g1Djc9/TKvskFEnHqlL8gZx
RzxVncMPqpbFEaD3PkRD09QDkQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:57 2025 by rpki-client