Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/XgXNvV-btEZKRcnEo-OxNvkIp8g.roa
File: XgXNvV-btEZKRcnEo-OxNvkIp8g.roa (raw, json)
Hash identifier: PhvX/fhfC3EQFVEugHyHApfCVbv0ETZ5C+iiCiNYgE8=
Subject key identifier: 5E:05:CD:BD:5F:9B:B4:46:4A:45:C9:C4:A3:E3:B1:36:F9:08:A7:C8
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 03D7E849
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/XgXNvV-btEZKRcnEo-OxNvkIp8g.roa
Signing time: Sat 01 Jan 2022 14:06:29 +0000
ROA not before: Sat 01 Jan 2022 14:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44820
IP address blocks: 91.194.40.0/23 maxlen: 23
91.203.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64481353 (0x3d7e849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 1 14:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e05cdbd5f9bb4464a45c9c4a3e3b136f908a7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:f7:12:c5:db:a5:6b:e2:ba:68:86:a8:10:
01:ae:17:ca:39:b7:9a:59:fa:e8:65:dc:a6:22:3d:
36:48:22:aa:24:b3:a7:98:e6:9f:ff:56:3a:77:b4:
6b:e5:5d:58:af:3e:17:e3:01:9c:1d:31:27:28:f4:
64:7a:01:3c:e6:4e:21:38:68:6c:bc:2b:48:65:bf:
c9:ef:59:3f:57:99:8c:9c:4a:62:46:da:32:06:83:
d0:29:47:9c:ba:42:cc:76:3b:0d:7d:a7:4b:f9:70:
ab:08:90:1e:83:02:05:de:bb:fe:aa:e2:a2:71:28:
d9:32:83:3c:36:16:a1:2b:75:ed:86:c7:ac:f1:16:
9d:57:f3:20:c3:3b:9b:a0:62:67:87:1c:fc:d9:4a:
ae:fb:2a:62:c1:8e:e0:f2:f3:f9:4e:6e:1d:53:61:
db:b4:cc:37:46:aa:17:c1:39:38:28:eb:04:70:8c:
a2:0c:29:ad:d1:74:8b:5d:07:2c:44:91:a5:df:af:
10:d0:82:ec:d9:ed:a7:e1:ac:59:65:86:ee:64:20:
6f:f1:09:c9:ae:23:06:fc:7c:cd:08:5c:01:4c:28:
32:e2:d5:2a:41:ee:79:d2:08:ff:bc:da:c6:55:e9:
ba:ab:40:4e:c4:2e:9b:98:24:0d:f2:26:fc:5c:7e:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:CD:BD:5F:9B:B4:46:4A:45:C9:C4:A3:E3:B1:36:F9:08:A7:C8
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/XgXNvV-btEZKRcnEo-OxNvkIp8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.40.0/23
91.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ee:2b:0e:bd:a5:41:e3:07:97:ce:30:9b:f5:47:8e:67:9a:
d5:5a:29:38:ef:39:e9:11:aa:9f:8e:5c:09:3e:01:67:ff:ef:
1d:82:89:8c:4d:f5:38:2d:0e:c2:ac:56:a0:3b:c4:6d:e1:99:
0b:97:23:62:7f:0c:1d:3d:0b:b3:20:bb:9a:0c:af:a8:2d:bf:
c8:31:58:df:9c:09:50:d5:d8:eb:57:32:15:06:81:77:cd:d0:
4f:82:1c:6d:a5:79:45:b8:7a:1e:58:5b:e2:4e:fe:72:aa:ff:
a5:2f:e7:cf:24:53:e1:14:ba:6b:db:24:63:78:1b:f6:83:16:
47:a9:8d:47:02:c7:e8:11:86:b6:08:79:b6:7a:4e:71:7c:d7:
d8:2f:76:bf:29:bc:45:5a:64:af:2b:f1:c2:88:18:17:d8:f2:
98:f8:21:7b:38:fd:1a:c1:7d:6f:59:00:9f:fa:7e:aa:0b:21:
eb:7c:d9:c2:88:64:11:94:c6:fe:db:fb:86:03:34:f0:fc:c5:
ec:5b:c1:cf:bd:40:90:10:2e:d7:49:42:a1:4b:ef:d4:fa:d1:
3f:c4:ec:b2:b7:cb:fc:34:53:5e:dc:22:73:6f:60:e6:41:35:
a2:56:e6:a7:ca:ff:16:cc:51:7b:88:8d:ba:4c:0a:cb:78:81:
4c:ee:d0:59
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA9foSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
M2VjNDczMWYxMDJjMzBjYzEzZTJmYjVhN2Y5NzU4Y2VhOTYzNDUyMB4XDTIyMDEw
MTE0MDYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWUwNWNkYmQ1Zjli
YjQ0NjRhNDVjOWM0YTNlM2IxMzZmOTA4YTdjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3V9xLF26Vr4rpohqgQAa4Xyjm3mln66GXcpiI9NkgiqiSz
p5jmn/9WOne0a+VdWK8+F+MBnB0xJyj0ZHoBPOZOIThobLwrSGW/ye9ZP1eZjJxK
YkbaMgaD0ClHnLpCzHY7DX2nS/lwqwiQHoMCBd67/qrionEo2TKDPDYWoSt17YbH
rPEWnVfzIMM7m6BiZ4cc/NlKrvsqYsGO4PLz+U5uHVNh27TMN0aqF8E5OCjrBHCM
ogwprdF0i10HLESRpd+vENCC7Nntp+GsWWWG7mQgb/EJya4jBvx8zQhcAUwoMuLV
KkHuedII/7zaxlXpuqtATsQum5gkDfIm/Fx+cUUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBReBc29X5u0RkpFycSj47E2+QinyDAfBgNVHSMEGDAWgBQT7Ecx8QLDDME+
L7Wn+XWM6pY0UjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0UteEhNZkVDd3d6QlBpLTFwX2wxak9xV05GSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvOTgyZjFkLTQxMjEtNDZiNS1hZGQwLWQ0MWJjYzkyODM3NS8x
L1hnWE52Vi1idEVaS1JjbkVvLU94TnZrSXA4Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
OTgyZjFkLTQxMjEtNDZiNS1hZGQwLWQ0MWJjYzkyODM3NS8xL0UteEhNZkVDd3d6
QlBpLTFwX2wxak9xV05GSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVvCKAMEAlvLBDANBgkqhkiG9w0B
AQsFAAOCAQEAdO4rDr2lQeMHl84wm/VHjmea1VopOO856RGqn45cCT4BZ//vHYKJ
jE31OC0OwqxWoDvEbeGZC5cjYn8MHT0LsyC7mgyvqC2/yDFY35wJUNXY61cyFQaB
d83QT4IcbaV5Rbh6Hlhb4k7+cqr/pS/nzyRT4RS6a9skY3gb9oMWR6mNRwLH6BGG
tgh5tnpOcXzX2C92vym8RVpkryvxwogYF9jymPghezj9GsF9b1kAn/p+qgsh63zZ
wohkEZTG/tv7hgM08PzF7FvBz71AkBAu10lCoUvv1PrRP8TssrfL/DRTXtwic29g
5kE1olbmp8r/FsxRe4iNukwKy3iBTO7QWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:08 2023 by rpki-client on console-fra.rpki-client.org