Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/QkwE7uDIBiv0r5q1C7jwvxmLa14.roa
File: QkwE7uDIBiv0r5q1C7jwvxmLa14.roa (raw, json)
Hash identifier: NKIvP/WSY10hej7PU2Zr22n0ir7mHdlTCijcdj0x/44=
Subject key identifier: 42:4C:04:EE:E0:C8:06:2B:F4:AF:9A:B5:0B:B8:F0:BF:19:8B:6B:5E
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 5A1181
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/QkwE7uDIBiv0r5q1C7jwvxmLa14.roa
Signing time: Tue 22 Feb 2022 07:51:59 +0000
ROA not before: Tue 22 Feb 2022 07:51:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.232.103.0/24 maxlen: 24
91.232.99.0/24 maxlen: 24
91.231.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5902721 (0x5a1181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Feb 22 07:51:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=424c04eee0c8062bf4af9ab50bb8f0bf198b6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:14:b2:1e:6d:cc:72:72:37:09:c1:8e:7d:
4a:72:53:21:17:a8:02:82:f7:e2:94:37:15:8b:b1:
d3:16:e7:a2:a3:62:a3:c3:12:2e:81:9e:da:2b:54:
59:5d:b8:79:8d:13:cf:8b:70:8c:b2:fc:44:ba:aa:
51:dd:1e:0d:ed:fc:e3:5c:2a:2e:4a:ff:b1:7b:b8:
c7:9b:29:99:5b:3b:a7:3e:8d:41:45:9f:fe:e3:10:
e1:e7:c7:9a:b7:5e:61:35:8c:bc:8a:ac:d2:61:a0:
62:5b:eb:00:30:99:dc:ea:7d:d5:b4:f0:3f:5e:a4:
42:d4:9e:fa:f0:72:1c:56:92:0c:2d:22:d9:ab:9b:
69:dc:25:69:9b:3d:b4:c0:aa:ba:7d:e2:82:4c:eb:
69:bc:2d:da:ef:53:ce:02:76:95:34:42:92:aa:ad:
50:c8:1b:b3:8c:50:1d:53:be:56:71:7d:54:1e:73:
7b:10:6c:83:d2:be:65:23:5b:ba:cc:6d:04:03:d2:
44:10:15:44:af:42:ca:e5:a8:70:e8:cf:45:32:c1:
99:d9:11:cb:e5:83:ac:c8:5e:5f:e2:be:ba:de:d1:
7e:56:c8:fb:e2:69:22:13:b8:de:73:1f:d8:a1:b1:
1a:f5:53:ed:e4:48:ec:9a:0c:3f:00:a8:cc:6f:40:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:04:EE:E0:C8:06:2B:F4:AF:9A:B5:0B:B8:F0:BF:19:8B:6B:5E
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/QkwE7uDIBiv0r5q1C7jwvxmLa14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.156.0/24
91.232.99.0/24
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d4:2b:a0:0c:90:80:f6:40:6b:d7:7e:dc:b0:19:28:74:04:
7f:d7:f1:1e:7a:b8:e0:f8:67:4c:80:8b:71:c1:24:93:40:b6:
5b:23:ba:75:90:26:c5:13:f4:4e:7d:df:3d:7d:a3:ad:7e:a7:
14:7f:c7:91:d7:e7:7a:78:b6:59:58:18:b1:61:6a:d5:fe:45:
0b:db:0f:ab:af:65:00:32:8d:44:f4:96:07:7c:e4:ef:79:36:
c4:2b:69:99:71:8b:ed:82:86:82:fd:49:9f:1f:78:e9:ac:c1:
4f:cc:99:01:2c:3c:88:22:bc:08:9f:a5:ce:b5:e1:08:a1:6a:
94:07:67:42:8f:53:f0:7e:10:f8:87:8c:96:96:2a:4e:2a:49:
8c:1e:02:ca:16:9c:0c:d9:41:a0:58:7f:20:c7:97:42:8d:e9:
39:56:1f:a0:1b:66:b6:40:10:86:05:bf:b5:e0:49:ac:da:a1:
20:38:bc:06:9c:a5:b7:04:a1:f2:0b:df:05:3e:a1:63:7f:39:
1a:9d:64:7e:a4:b1:3c:2d:6d:ee:1d:19:09:04:2c:35:93:ca:
c0:9b:9b:9d:fe:7d:f3:6d:6d:5a:ae:be:c8:5a:55:00:02:2a:
f1:29:17:00:df:fe:3b:ee:97:3f:1b:e9:ca:be:8f:6c:6b:61:
c8:ba:e4:1b
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDWhGBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUz
MTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRiNDg2ZjIwHhcNMjIwMjIy
MDc1MTU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0MjRjMDRlZWUwYzgw
NjJiZjRhZjlhYjUwYmI4ZjBiZjE5OGI2YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtcoUsh5tzHJyNwnBjn1KclMhF6gCgvfilDcVi7HTFueio2Kj
wxIugZ7aK1RZXbh5jRPPi3CMsvxEuqpR3R4N7fzjXCouSv+xe7jHmymZWzunPo1B
RZ/+4xDh58eat15hNYy8iqzSYaBiW+sAMJnc6n3VtPA/XqRC1J768HIcVpIMLSLZ
q5tp3CVpmz20wKq6feKCTOtpvC3a71POAnaVNEKSqq1QyBuzjFAdU75WcX1UHnN7
EGyD0r5lI1u6zG0EA9JEEBVEr0LK5ahw6M9FMsGZ2RHL5YOsyF5f4r663tF+Vsj7
4mkiE7jecx/YobEa9VPt5Ejsmgw/AKjMb0CgOwIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFEJMBO7gyAYr9K+atQu48L8Zi2teMB8GA1UdIwQYMBaAFOMWMYJH0hGEH5Yg
qaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1LzEv
UWt3RTd1RElCaXYwcjVxMUM3and2eG1MYTE0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9l
ZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1LzEvNHhZeGdrZlNFWVFm
bGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+ecAwQAW+hjAwQAW+hnMA0GCSqG
SIb3DQEBCwUAA4IBAQAY1CugDJCA9kBr137csBkodAR/1/Eeerjg+GdMgItxwSST
QLZbI7p1kCbFE/ROfd89faOtfqcUf8eR1+d6eLZZWBixYWrV/kUL2w+rr2UAMo1E
9JYHfOTveTbEK2mZcYvtgoaC/UmfH3jprMFPzJkBLDyIIrwIn6XOteEIoWqUB2dC
j1PwfhD4h4yWlipOKkmMHgLKFpwM2UGgWH8gx5dCjek5Vh+gG2a2QBCGBb+14Ems
2qEgOLwGnKW3BKHyC98FPqFjfzkanWR+pLE8LW3uHRkJBCw1k8rAm5ud/n3zbW1a
rr7IWlUAAirxKRcA3/477pc/G+nKvo9sa2HIuuQb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org