Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/gCGVNtKiQH_pqaf5BX0XnDq1RvU.roa
File: gCGVNtKiQH_pqaf5BX0XnDq1RvU.roa (raw, json)
Hash identifier: w//HFcrqE08Rsb0XS7OxcPY/IlhOW34PDQqz8ZH7Ph4=
Subject key identifier: 80:21:95:36:D2:A2:40:7F:E9:A9:A7:F9:05:7D:17:9C:3A:B5:46:F5
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 92B30F
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/gCGVNtKiQH_pqaf5BX0XnDq1RvU.roa
Signing time: Mon 21 Mar 2022 09:51:52 +0000
ROA not before: Mon 21 Mar 2022 09:51:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.232.103.0/24 maxlen: 24
91.232.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9614095 (0x92b30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Mar 21 09:51:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80219536d2a2407fe9a9a7f9057d179c3ab546f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:ba:92:a0:68:bb:46:5a:87:83:a2:6c:f5:
57:2c:06:0d:5a:9f:a3:aa:95:b4:66:2e:38:9c:03:
69:04:68:93:d0:12:ac:ad:88:1f:b3:4b:6b:42:d8:
31:33:bc:7a:0c:67:b9:23:1c:3f:94:ca:52:bc:8e:
78:b7:f2:3a:77:42:d3:9b:0b:a7:cd:0b:f5:80:31:
ee:ac:9f:85:4c:0b:0f:3a:74:52:e9:18:a2:03:2b:
2a:a9:68:27:05:2e:d7:8f:78:0a:e5:23:70:3b:73:
4d:41:c7:82:8c:e6:d8:3a:a6:ca:b0:cc:d3:90:bd:
9b:39:f5:ac:bb:ca:9c:7c:6b:02:0a:74:d6:e1:73:
d6:dc:da:b5:9d:84:c0:a0:a0:31:41:44:08:73:c2:
0a:9b:f2:89:bd:c4:fc:0e:3c:e9:15:fa:c6:c8:a2:
17:41:e7:71:ee:eb:e6:85:3e:fe:7e:ff:96:88:97:
8b:60:f7:bb:e2:7f:b8:50:f8:67:94:5b:57:a8:45:
e4:ae:bc:85:8b:5f:22:45:5b:1b:18:51:90:a6:32:
1c:a2:cf:00:e5:6d:a5:e7:6e:80:bd:09:a2:5e:ee:
86:99:1e:68:ec:12:fd:2c:3c:f8:6e:ae:4d:60:2e:
05:cd:d4:ae:0a:5c:08:33:21:ed:09:b9:bb:7c:d3:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:95:36:D2:A2:40:7F:E9:A9:A7:F9:05:7D:17:9C:3A:B5:46:F5
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/gCGVNtKiQH_pqaf5BX0XnDq1RvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
34:32:12:8f:56:7d:dc:b3:bc:a1:a5:3f:41:c5:81:37:3a:4b:
1e:05:d2:8a:b4:c1:51:f4:fb:ce:ea:01:2d:bf:49:46:36:0c:
3b:46:5e:67:be:f1:b0:ab:14:1c:00:cd:5b:a1:1b:6d:4f:97:
f9:12:71:4e:e5:22:dd:a2:20:1f:a6:80:22:7c:50:f3:94:45:
27:36:6a:02:2d:35:47:21:8d:b6:e7:04:2a:17:98:59:5c:39:
e5:9a:d9:30:1e:0e:d3:31:48:97:15:0f:30:4b:ed:14:65:79:
01:0e:d0:99:2c:ca:48:2e:bf:c0:0b:ee:29:90:48:29:09:64:
b4:b7:a2:51:d8:41:96:56:19:79:6e:b9:00:5e:3e:17:1b:89:
8e:55:0a:2c:ab:ed:68:6d:bf:a0:e5:9c:ed:cc:87:e7:b9:1c:
62:78:85:04:46:45:0c:f6:7f:9b:c2:00:d2:86:b5:26:c9:ae:
d4:82:60:79:56:56:de:2b:f8:dc:ec:16:38:fa:0b:48:c4:ed:
d0:d8:ca:c4:88:45:ff:b2:24:bb:ba:5a:49:ba:c0:b3:9e:5d:
26:fd:62:cd:5f:ff:ea:e1:f8:ef:71:98:4b:20:71:7e:66:ff:
28:98:31:82:41:15:fd:fe:6f:de:4a:eb:6e:b6:41:3b:eb:95:
e7:b4:b7:be
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAJKzDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzE2MzE4MjQ3ZDIxMTg0MWY5NjIwYTlhMTEzMDAxMGRkYjQ4NmYyMB4XDTIyMDMy
MTA5NTE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODAyMTk1MzZkMmEy
NDA3ZmU5YTlhN2Y5MDU3ZDE3OWMzYWI1NDZmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtpupKgaLtGWoeDomz1VywGDVqfo6qVtGYuOJwDaQRok9AS
rK2IH7NLa0LYMTO8egxnuSMcP5TKUryOeLfyOndC05sLp80L9YAx7qyfhUwLDzp0
UukYogMrKqloJwUu1494CuUjcDtzTUHHgozm2DqmyrDM05C9mzn1rLvKnHxrAgp0
1uFz1tzatZ2EwKCgMUFECHPCCpvyib3E/A486RX6xsiiF0Hnce7r5oU+/n7/loiX
i2D3u+J/uFD4Z5RbV6hF5K68hYtfIkVbGxhRkKYyHKLPAOVtpedugL0Jol7uhpke
aOwS/Sw8+G6uTWAuBc3UrgpcCDMh7Qm5u3zTSIUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSAIZU20qJAf+mpp/kFfRecOrVG9TAfBgNVHSMEGDAWgBTjFjGCR9IRhB+W
IKmhEwAQ3bSG8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR4WXhna2ZTRVlRZmxpQ3BvUk1BRU4yMGh2SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvZWU0MmJiLTFlNDktNGMyMS1hNGQ2LWVjMjg3ZTFkMzdlNS8x
L2dDR1ZOdEtpUUhfcHFhZjVCWDBYbkRxMVJ2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
ZWU0MmJiLTFlNDktNGMyMS1hNGQ2LWVjMjg3ZTFkMzdlNS8xLzR4WXhna2ZTRVlR
ZmxpQ3BvUk1BRU4yMGh2SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvoYwMEAFvoZzANBgkqhkiG9w0B
AQsFAAOCAQEANDISj1Z93LO8oaU/QcWBNzpLHgXSirTBUfT7zuoBLb9JRjYMO0Ze
Z77xsKsUHADNW6EbbU+X+RJxTuUi3aIgH6aAInxQ85RFJzZqAi01RyGNtucEKheY
WVw55ZrZMB4O0zFIlxUPMEvtFGV5AQ7QmSzKSC6/wAvuKZBIKQlktLeiUdhBllYZ
eW65AF4+FxuJjlUKLKvtaG2/oOWc7cyH57kcYniFBEZFDPZ/m8IA0oa1Jsmu1IJg
eVZW3iv43OwWOPoLSMTt0NjKxIhF/7Iku7paSbrAs55dJv1izV//6uH473GYSyBx
fmb/KJgxgkEV/f5v3krrbrZBO+uV57S3vg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org