Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/ipzymE5XBGyaYGD02L7u5POnGZI.roa
File: ipzymE5XBGyaYGD02L7u5POnGZI.roa (raw, json)
Hash identifier: 5f/mXoCvB5OJ2PhOnNLtfNzsMnl6da08LiI6A8vnKvQ=
Subject key identifier: 8A:9C:F2:98:4E:57:04:6C:9A:60:60:F4:D8:BE:EE:E4:F3:A7:19:92
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 07358E61
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/ipzymE5XBGyaYGD02L7u5POnGZI.roa
Signing time: Sat 01 Jan 2022 06:58:28 +0000
ROA not before: Sat 01 Jan 2022 06:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197895
IP address blocks: 91.228.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120950369 (0x7358e61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Jan 1 06:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9cf2984e57046c9a6060f4d8beeee4f3a71992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:dd:ea:54:11:1e:54:99:e8:df:77:91:6f:
24:a9:0d:14:9b:be:f9:4b:bc:57:25:0c:24:53:b6:
af:0c:1e:2b:cf:ca:14:9d:ca:47:ae:3c:f0:b3:90:
af:dc:52:71:db:e6:ea:10:36:0b:24:ac:95:6b:bd:
d3:1d:6e:0d:45:4c:71:f9:47:8c:dc:80:01:6c:c6:
8d:f1:d0:0b:8a:f5:b4:89:53:71:b6:59:7f:d5:f5:
e8:5f:72:f6:45:db:2e:aa:89:8a:ba:bf:e3:09:cd:
95:4e:0b:48:bc:52:58:1c:18:b1:b5:7a:37:78:06:
a6:df:3f:02:04:6d:1d:70:59:2d:9d:4f:f9:68:99:
fb:c2:e2:cd:47:fa:fb:e2:87:c0:4f:31:d2:4b:db:
55:c1:d5:1a:cb:5d:43:3b:f1:62:10:3b:3f:31:7b:
54:37:a0:d7:f6:3f:e8:52:03:cf:5a:a4:a4:b1:8a:
7e:b8:33:1d:41:c7:4f:f0:f9:11:b2:3e:e2:6a:b1:
f1:a1:d7:66:3b:d2:3d:d8:8e:41:d6:e5:4e:10:7a:
ea:5c:5b:2b:bd:b4:2b:35:bb:1d:06:1e:bd:5a:a4:
c4:01:67:ef:ca:c0:74:50:e1:d8:60:12:0c:82:62:
0e:e8:c6:fd:4e:99:76:5a:81:ac:72:3e:70:c5:94:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:F2:98:4E:57:04:6C:9A:60:60:F4:D8:BE:EE:E4:F3:A7:19:92
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/ipzymE5XBGyaYGD02L7u5POnGZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.44.0/22
Signature Algorithm: sha256WithRSAEncryption
02:91:e6:f2:7a:c3:6e:9d:dc:dc:bc:a9:f2:20:51:c4:48:43:
73:d9:71:2f:f2:19:80:9a:74:01:f1:c2:2b:c8:31:8c:17:85:
3b:1e:74:fa:0b:a9:e2:da:61:8b:d0:27:fd:19:d2:25:59:b4:
20:2d:59:65:20:50:8d:c7:46:4a:62:c3:be:52:6f:fe:3a:f8:
5d:bf:07:b9:18:0a:49:b6:8f:ef:87:25:74:df:a2:fa:f5:3a:
94:82:dd:7b:c3:88:56:d3:0e:3f:e8:f3:d1:44:e6:2e:b1:f3:
f5:5b:a0:46:76:ce:fa:e7:c2:5c:45:b0:24:81:f8:46:70:97:
ad:a7:2b:1e:5a:4c:ca:d8:a3:dc:d4:9b:96:c7:88:04:b4:22:
a5:f2:bd:e4:9b:36:13:9a:ca:59:fc:da:e7:d1:70:39:28:d0:
98:11:eb:6c:8f:bc:7c:56:6e:7a:0d:c4:14:ce:cf:15:4f:10:
9c:ee:99:1b:b3:26:0b:3a:49:51:79:c7:08:af:c1:8e:81:40:
16:84:c3:81:f1:f6:83:a4:b3:47:06:ee:3c:12:dd:53:5a:5f:
07:e0:41:c8:56:11:42:20:fc:b7:2c:e5:ae:bd:67:51:17:2a:
09:5a:0c:dd:fc:f0:33:c4:a3:a2:ad:bb:60:e5:58:80:b9:79:
c0:3a:98:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBzWOYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTZmMWUwMWFmMjRkNzkyNDk3ZDc3ZWQxZjc5OTBhZTNhNjEyOTBkMB4XDTIyMDEw
MTA2NTgyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE5Y2YyOTg0ZTU3
MDQ2YzlhNjA2MGY0ZDhiZWVlZTRmM2E3MTk5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKah3epUER5Umejfd5FvJKkNFJu++Uu8VyUMJFO2rwweK8/K
FJ3KR6488LOQr9xScdvm6hA2CySslWu90x1uDUVMcflHjNyAAWzGjfHQC4r1tIlT
cbZZf9X16F9y9kXbLqqJirq/4wnNlU4LSLxSWBwYsbV6N3gGpt8/AgRtHXBZLZ1P
+WiZ+8LizUf6++KHwE8x0kvbVcHVGstdQzvxYhA7PzF7VDeg1/Y/6FIDz1qkpLGK
frgzHUHHT/D5EbI+4mqx8aHXZjvSPdiOQdblThB66lxbK720KzW7HQYevVqkxAFn
78rAdFDh2GASDIJiDujG/U6ZdlqBrHI+cMWUrwECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKnPKYTlcEbJpgYPTYvu7k86cZkjAfBgNVHSMEGDAWgBRKbx4BryTXkkl9
d+0feZCuOmEpDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtOGVBYThrMTVKSmZYZnRIM21RcmpwaEtRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvZmMxYWRjLWNjZDgtNGFhNi1iNTRkLTA0ZDM2MmEyODU4ZC8x
L2lwenltRTVYQkd5YVlHRDAyTDd1NVBPbkdaSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
ZmMxYWRjLWNjZDgtNGFhNi1iNTRkLTA0ZDM2MmEyODU4ZC8xL1NtOGVBYThrMTVK
SmZYZnRIM21RcmpwaEtRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvkLDANBgkqhkiG9w0BAQsFAAOC
AQEAApHm8nrDbp3c3Lyp8iBRxEhDc9lxL/IZgJp0AfHCK8gxjBeFOx50+gup4tph
i9An/RnSJVm0IC1ZZSBQjcdGSmLDvlJv/jr4Xb8HuRgKSbaP74cldN+i+vU6lILd
e8OIVtMOP+jz0UTmLrHz9VugRnbO+ufCXEWwJIH4RnCXracrHlpMytij3NSblseI
BLQipfK95Js2E5rKWfza59FwOSjQmBHrbI+8fFZueg3EFM7PFU8QnO6ZG7MmCzpJ
UXnHCK/BjoFAFoTDgfH2g6SzRwbuPBLdU1pfB+BByFYRQiD8tyzlrr1nURcqCVoM
3fzwM8Sjoq27YOVYgLl5wDqYig==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:00 2025 by rpki-client