Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Yu-gsdGtx4cGT7a6wILeLUe2QK8.roa
File: Yu-gsdGtx4cGT7a6wILeLUe2QK8.roa (raw, json)
Hash identifier: D9U2ojSOknelFLofWgG+d4rs8SLbFEc5lNdP/p+1z+8=
Subject key identifier: 62:EF:A0:B1:D1:AD:C7:87:06:4F:B6:BA:C0:82:DE:2D:47:B6:40:AF
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01852AB73009166478C0162C1DB38E116EAF
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Yu-gsdGtx4cGT7a6wILeLUe2QK8.roa
Signing time: Mon 19 Dec 2022 14:08:46 +0000
ROA not before: Mon 19 Dec 2022 14:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:b7:30:09:16:64:78:c0:16:2c:1d:b3:8e:11:6e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Dec 19 14:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62efa0b1d1adc787064fb6bac082de2d47b640af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:0a:41:a1:51:7c:66:01:d6:fd:0a:d3:24:
3d:12:21:20:fd:38:7e:89:e7:e4:46:28:90:7a:46:
29:75:9b:6f:63:77:59:16:d4:a9:fe:92:09:3a:5b:
ec:4b:6f:0d:e1:61:12:c5:07:70:53:4a:8b:d2:2f:
70:7a:16:c7:04:db:41:57:d2:e1:60:e8:0b:18:ac:
b2:96:ae:17:9d:00:65:2c:db:91:8e:b0:50:0d:c6:
dd:d1:06:01:e2:73:db:a9:43:a1:a8:4f:ab:04:b9:
0d:34:37:78:36:4c:00:69:5a:33:2c:93:33:16:f4:
df:1d:51:55:c6:fb:9b:af:78:b2:80:e8:c7:6d:0f:
60:5e:2e:71:c6:b4:e9:47:6e:bd:e1:14:a0:2c:12:
7d:ef:6a:5e:14:a2:8f:5b:eb:6a:b3:40:54:9e:10:
b4:0c:55:77:ae:45:48:f7:ab:2b:71:98:61:c2:e7:
c5:48:69:60:e5:4a:ec:7e:74:7c:2a:51:83:08:0d:
a6:93:f5:83:8d:77:67:0b:0d:ca:29:eb:2a:52:97:
f2:a4:a1:50:5b:78:bf:e2:62:d1:1b:12:34:2f:f2:
fa:44:bf:65:9b:d6:02:bf:57:1a:af:03:d6:22:1c:
28:20:82:bc:85:49:45:11:6c:7e:99:7e:b3:a6:95:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:A0:B1:D1:AD:C7:87:06:4F:B6:BA:C0:82:DE:2D:47:B6:40:AF
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Yu-gsdGtx4cGT7a6wILeLUe2QK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:80:8b:56:38:4a:63:f9:5b:7b:3a:48:91:d6:d7:ef:e4:c7:
aa:56:39:86:a5:74:c0:7f:c8:9a:04:f0:a2:ee:82:d7:d7:52:
79:19:f4:56:a8:5c:3a:88:00:51:57:af:b6:4f:bd:15:4c:c8:
57:3d:03:31:52:4c:65:aa:30:09:99:19:f0:e2:03:ae:7f:f3:
bc:68:a9:10:d0:5a:38:34:62:90:10:bb:75:2b:0b:24:e1:5c:
fe:6e:bc:f6:6c:ad:b6:36:02:46:28:4f:72:f1:df:c9:e8:78:
54:5c:a2:34:ec:13:fc:0a:b4:38:01:3d:12:81:f7:74:c9:cd:
5a:9d:3a:9e:a3:d7:7d:b8:41:16:9b:51:17:03:37:fb:f4:fc:
0b:5e:c4:95:56:76:0e:5a:be:46:02:42:60:db:2a:19:c6:6c:
7c:d0:cb:9d:d9:12:70:25:24:1b:73:c0:d7:8a:19:8d:43:18:
f7:67:dc:f4:87:57:db:10:50:61:74:99:9c:e9:0a:d5:5e:ec:
30:9c:ac:3c:56:79:79:ee:46:81:58:76:7b:b9:97:d0:df:79:
b4:9d:fb:d3:61:d1:53:14:0e:1b:8c:6c:6c:30:77:07:12:06:
fa:fc:77:bb:79:f6:67:c4:ea:95:df:c3:aa:8b:7f:1e:4f:59:
90:c9:c6:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUqtzAJFmR4wBYsHbOOEW6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjIxMjE5MTQwODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmVmYTBiMWQxYWRjNzg3MDY0ZmI2YmFjMDgyZGUyZDQ3YjY0MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA8KQaFRfGYB1v0K0yQ9EiEg/Th+
iefkRiiQekYpdZtvY3dZFtSp/pIJOlvsS28N4WESxQdwU0qL0i9wehbHBNtBV9Lh
YOgLGKyylq4XnQBlLNuRjrBQDcbd0QYB4nPbqUOhqE+rBLkNNDd4NkwAaVozLJMz
FvTfHVFVxvubr3iygOjHbQ9gXi5xxrTpR2694RSgLBJ972peFKKPW+tqs0BUnhC0
DFV3rkVI96srcZhhwufFSGlg5UrsfnR8KlGDCA2mk/WDjXdnCw3KKesqUpfypKFQ
W3i/4mLRGxI0L/L6RL9lm9YCv1carwPWIhwoIIK8hUlFEWx+mX6zppUu7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLvoLHRrceHBk+2usCC3i1HtkCvMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvWXUtZ3NkR3R4NGNHVDdhNndJTGVMVWUyUUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XIMA0G
CSqGSIb3DQEBCwUAA4IBAQA6gItWOEpj+Vt7OkiR1tfv5MeqVjmGpXTAf8iaBPCi
7oLX11J5GfRWqFw6iABRV6+2T70VTMhXPQMxUkxlqjAJmRnw4gOuf/O8aKkQ0Fo4
NGKQELt1Kwsk4Vz+brz2bK22NgJGKE9y8d/J6HhUXKI07BP8CrQ4AT0Sgfd0yc1a
nTqeo9d9uEEWm1EXAzf79PwLXsSVVnYOWr5GAkJg2yoZxmx80Mud2RJwJSQbc8DX
ihmNQxj3Z9z0h1fbEFBhdJmc6QrVXuwwnKw8Vnl57kaBWHZ7uZfQ33m0nfvTYdFT
FA4bjGxsMHcHEgb6/He7efZnxOqV38Oqi38eT1mQycYl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org