Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/JV_49ydvhwmntgTYSWdlp-hzePQ.roa
File: JV_49ydvhwmntgTYSWdlp-hzePQ.roa (raw, json)
Hash identifier: cWQaCvvihX6bPb7RApBydjJghpwYWapmhaNhGu8WiVI=
Subject key identifier: 25:5F:F8:F7:27:6F:87:09:A7:B6:04:D8:49:67:65:A7:E8:73:78:F4
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0154CA1C
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/JV_49ydvhwmntgTYSWdlp-hzePQ.roa
Signing time: Sat 01 Jan 2022 11:05:14 +0000
ROA not before: Sat 01 Jan 2022 11:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197416
IP address blocks: 91.220.156.0/24 maxlen: 24
2001:67c:22a8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22333980 (0x154ca1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Jan 1 11:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=255ff8f7276f8709a7b604d8496765a7e87378f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:ec:a7:c8:50:1a:1a:42:f9:bf:47:c5:54:
5e:ec:70:46:f9:8d:5d:88:89:a8:0b:3d:f0:ad:1d:
57:49:a1:5a:d7:1d:be:1a:ae:ef:db:76:d9:bf:ab:
2c:cc:d3:91:c1:ba:50:75:c1:f7:33:f3:74:88:f0:
22:d3:06:43:c0:e5:b0:14:45:89:e8:ba:95:b6:09:
d0:84:cd:96:76:13:79:49:97:f0:be:20:b8:1b:a6:
0e:67:07:c3:72:1b:3e:5c:99:8a:fd:6b:5d:3d:80:
57:e7:db:54:3a:83:db:75:d0:72:2c:e6:1c:5d:a3:
18:8a:2a:d1:88:c2:30:14:87:1d:c7:90:14:b8:39:
d1:4e:62:6a:89:1f:6f:5a:40:fa:b8:62:5e:20:21:
ae:72:f7:3d:2f:a1:da:80:df:24:aa:2a:d4:e1:de:
34:a2:22:c8:cc:5e:35:8b:e3:88:19:06:75:bc:ce:
59:e9:2c:47:be:92:ee:3f:0e:b8:3e:94:1f:08:b8:
90:d4:16:aa:c8:24:0d:c4:56:11:d9:a2:26:fb:7c:
86:3f:7f:3b:59:64:45:7e:f6:6f:19:14:7f:ed:76:
d6:a9:44:3f:9d:34:12:5c:f3:77:ca:d2:d1:f1:81:
f6:54:ee:62:3f:ba:91:c6:a3:33:fc:b7:ff:3f:05:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:F8:F7:27:6F:87:09:A7:B6:04:D8:49:67:65:A7:E8:73:78:F4
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/JV_49ydvhwmntgTYSWdlp-hzePQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.156.0/24
IPv6:
2001:67c:22a8::/48
Signature Algorithm: sha256WithRSAEncryption
2b:46:62:89:83:00:e7:c3:ec:f6:aa:b0:b6:a7:e6:a2:40:86:
d9:f6:34:4b:1d:2c:46:b9:4c:8c:45:52:46:3a:e8:61:d6:f2:
93:c3:67:72:04:b7:2c:6e:1b:40:54:77:7f:49:c1:19:c1:48:
72:9f:75:ba:4c:85:fa:97:23:68:b6:66:cc:f6:f8:c5:34:f9:
3e:56:87:79:f4:83:b2:b5:e0:5c:5a:79:64:2c:97:9f:18:a0:
55:b3:a0:94:44:0a:60:f2:ec:d2:c7:35:0c:03:4b:52:06:8a:
23:33:83:29:69:ff:3f:cb:da:57:59:c4:aa:32:e7:84:ac:e5:
82:ed:99:23:d5:bd:31:16:53:08:a3:d8:a3:b8:d2:5c:6a:03:
e8:6a:2a:19:3d:83:af:cf:ec:dc:f1:de:72:42:4c:94:ce:7b:
f7:a5:76:a6:de:d1:4b:06:81:82:db:3f:7d:aa:ea:be:76:f8:
ca:f3:6f:d8:a4:e8:09:ca:8a:28:00:bc:dd:95:a5:4c:44:0e:
3e:57:c6:34:cd:90:29:ce:dd:fd:e6:27:93:ae:26:29:77:92:
f3:98:9f:a5:79:09:27:ba:39:46:8f:db:7e:c2:59:78:9b:89:
3b:18:2c:85:f7:2f:bb:f4:5c:e9:94:75:72:28:24:b6:2a:a1:
80:03:ad:79
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAVTKHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTkxOGQ3ZDE4MGYzNmU3NjUxMmE0MTYxMWEwYjI4YThiNDBjNTJlMB4XDTIyMDEw
MTExMDUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU1ZmY4ZjcyNzZm
ODcwOWE3YjYwNGQ4NDk2NzY1YTdlODczNzhmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhL7KfIUBoaQvm/R8VUXuxwRvmNXYiJqAs98K0dV0mhWtcd
vhqu79t22b+rLMzTkcG6UHXB9zPzdIjwItMGQ8DlsBRFiei6lbYJ0ITNlnYTeUmX
8L4guBumDmcHw3IbPlyZiv1rXT2AV+fbVDqD23XQcizmHF2jGIoq0YjCMBSHHceQ
FLg50U5iaokfb1pA+rhiXiAhrnL3PS+h2oDfJKoq1OHeNKIiyMxeNYvjiBkGdbzO
WeksR76S7j8OuD6UHwi4kNQWqsgkDcRWEdmiJvt8hj9/O1lkRX72bxkUf+121qlE
P500Elzzd8rS0fGB9lTuYj+6kcajM/y3/z8FO7UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQlX/j3J2+HCae2BNhJZ2Wn6HN49DAfBgNVHSMEGDAWgBSakY19GA8252US
pBYRoLKKi0DFLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21wR05mUmdQTnVkbEVxUVdFYUN5aW90QXhTNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvMjY5MzYzLWIzNWYtNDIyYy1iMDc2LTkzZjQ4NmI4Yjk2MS8x
L0pWXzQ5eWR2aHdtbnRnVFlTV2RscC1oemVQUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
MjY5MzYzLWIzNWYtNDIyYy1iMDc2LTkzZjQ4NmI4Yjk2MS8xL21wR05mUmdQTnVk
bEVxUVdFYUN5aW90QXhTNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvcnDAPBAIAAjAJAwcAIAEGfCKo
MA0GCSqGSIb3DQEBCwUAA4IBAQArRmKJgwDnw+z2qrC2p+aiQIbZ9jRLHSxGuUyM
RVJGOuhh1vKTw2dyBLcsbhtAVHd/ScEZwUhyn3W6TIX6lyNotmbM9vjFNPk+Vod5
9IOyteBcWnlkLJefGKBVs6CURApg8uzSxzUMA0tSBoojM4Mpaf8/y9pXWcSqMueE
rOWC7Zkj1b0xFlMIo9ijuNJcagPoaioZPYOvz+zc8d5yQkyUznv3pXam3tFLBoGC
2z99quq+dvjK82/YpOgJyoooALzdlaVMRA4+V8Y0zZApzt395ieTriYpd5LzmJ+l
eQknujlGj9t+wll4m4k7GCyF9y+79FzplHVyKCS2KqGAA615
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-fra.rpki-client.org