Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/ufpJtHS9Pgs4PCSj8-xI12UM7jw.roa
File: ufpJtHS9Pgs4PCSj8-xI12UM7jw.roa (raw, json)
Hash identifier: pBGk1p3UlAHQzSnzIimo2FRT1W+xvz8K/AJ3t8j2AXg=
Subject key identifier: B9:FA:49:B4:74:BD:3E:0B:38:3C:24:A3:F3:EC:48:D7:65:0C:EE:3C
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 064C73BD
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/ufpJtHS9Pgs4PCSj8-xI12UM7jw.roa
Signing time: Sat 01 Jan 2022 06:02:16 +0000
ROA not before: Sat 01 Jan 2022 06:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50931
IP address blocks: 91.223.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105673661 (0x64c73bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Jan 1 06:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9fa49b474bd3e0b383c24a3f3ec48d7650cee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:d2:45:f6:bb:77:1e:05:7f:99:15:f6:4a:
68:ab:91:80:22:f3:0c:c6:02:81:eb:09:0c:78:b5:
f6:18:01:bf:1a:57:7a:da:02:75:61:ee:19:a9:f8:
c2:18:7a:fb:a6:06:e7:72:fd:34:2a:fc:48:c7:8e:
ae:ea:79:0c:52:7d:81:ac:7d:98:04:31:9e:69:08:
93:b7:a4:24:48:98:5d:cd:7b:7d:a7:cb:29:72:fa:
f2:33:b9:ec:8e:7b:77:f8:6e:10:f8:13:12:db:71:
0e:f4:5d:c7:8c:6c:ba:ca:1c:2d:99:3b:30:b4:55:
e9:f8:e2:d4:b4:c1:9f:db:2c:6d:71:cf:97:c1:44:
cd:ff:28:2b:4b:f1:43:69:72:1a:7e:e7:ed:0e:a6:
da:d7:fe:89:43:fe:19:f4:00:e1:03:03:88:89:e1:
04:ab:43:5c:a7:32:d0:2f:c2:a9:8a:6b:92:74:bb:
2e:2c:3b:87:fa:df:d9:91:65:67:4d:88:6c:6d:89:
3f:c1:66:2e:84:19:5c:cf:27:6a:8f:70:45:95:08:
d8:32:92:93:2f:c7:16:cb:0a:5f:39:80:68:c6:96:
c2:22:92:cf:01:d4:95:9e:ee:89:6c:5c:d4:02:11:
cf:15:3e:35:dd:23:a3:41:3c:07:d2:c9:c5:00:31:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:49:B4:74:BD:3E:0B:38:3C:24:A3:F3:EC:48:D7:65:0C:EE:3C
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/ufpJtHS9Pgs4PCSj8-xI12UM7jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e1:19:04:61:31:b6:a8:67:0a:17:11:a6:cd:eb:44:ee:1b:
70:42:13:f5:9a:33:72:87:3b:02:87:03:46:a5:82:2e:b7:39:
b2:74:84:cd:b7:8e:2c:65:20:5c:ee:90:6c:8f:5a:f0:ce:9b:
56:9c:80:e6:4b:94:7f:62:14:97:a3:38:68:06:79:a9:18:73:
92:17:1d:63:3e:d4:9e:a7:24:3b:3e:45:fd:ad:dc:04:de:4d:
bb:f3:f4:1d:56:85:26:d8:85:ed:99:1a:7a:1f:69:d7:19:ca:
1d:77:58:33:44:4e:47:eb:e2:b0:72:c1:75:bb:2a:d5:c6:4f:
97:63:6b:07:79:f3:46:58:a6:04:c9:df:26:f3:1b:b7:8d:1a:
7e:79:0e:d5:1e:e4:c9:ba:9c:a6:26:7b:37:e4:83:68:c1:53:
52:6c:f3:91:5a:16:52:99:f2:c9:a0:35:cf:32:7c:06:46:78:
e8:30:3f:2a:cd:32:0e:a1:58:c6:40:d6:02:46:46:5a:d3:e2:
91:28:53:8e:95:b5:bf:25:a7:0f:a7:8b:4c:c6:86:96:5e:5a:
db:c1:fc:53:27:6a:e5:6d:9a:e4:01:8b:4f:10:ea:bb:07:ac:
aa:e0:85:8b:0a:e6:5e:18:f0:42:4b:b6:a3:1c:7c:9c:7d:58:
ba:e4:51:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkxzvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OWZmMTU1ODFiYjkwNGYxYjkwNTM4NzQyMTE4YjAxZjllZmFhNjYyMB4XDTIyMDEw
MTA2MDIxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjlmYTQ5YjQ3NGJk
M2UwYjM4M2MyNGEzZjNlYzQ4ZDc2NTBjZWUzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJK/0kX2u3ceBX+ZFfZKaKuRgCLzDMYCgesJDHi19hgBvxpX
etoCdWHuGan4whh6+6YG53L9NCr8SMeOrup5DFJ9gax9mAQxnmkIk7ekJEiYXc17
fafLKXL68jO57I57d/huEPgTEttxDvRdx4xsusocLZk7MLRV6fji1LTBn9ssbXHP
l8FEzf8oK0vxQ2lyGn7n7Q6m2tf+iUP+GfQA4QMDiInhBKtDXKcy0C/CqYprknS7
Liw7h/rf2ZFlZ02IbG2JP8FmLoQZXM8nao9wRZUI2DKSky/HFssKXzmAaMaWwiKS
zwHUlZ7uiWxc1AIRzxU+Nd0jo0E8B9LJxQAxEU0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS5+km0dL0+Czg8JKPz7EjXZQzuPDAfBgNVHSMEGDAWgBQp/xVYG7kE8bkF
OHQhGLAfnvqmYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tmOFZXQnU1QlBHNUJUaDBJUml3SDU3NnBtSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvZGI2MjMxLTNhN2EtNDg0ZC04YmVlLTNiOGQ4Yjc2YjdmNi8x
L3VmcEp0SFM5UGdzNFBDU2o4LXhJMTJVTTdqdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
ZGI2MjMxLTNhN2EtNDg0ZC04YmVlLTNiOGQ4Yjc2YjdmNi8xL0tmOFZXQnU1QlBH
NUJUaDBJUml3SDU3NnBtSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvfWzANBgkqhkiG9w0BAQsFAAOC
AQEAT+EZBGExtqhnChcRps3rRO4bcEIT9Zozcoc7AocDRqWCLrc5snSEzbeOLGUg
XO6QbI9a8M6bVpyA5kuUf2IUl6M4aAZ5qRhzkhcdYz7UnqckOz5F/a3cBN5Nu/P0
HVaFJtiF7Zkaeh9p1xnKHXdYM0ROR+visHLBdbsq1cZPl2NrB3nzRlimBMnfJvMb
t40afnkO1R7kybqcpiZ7N+SDaMFTUmzzkVoWUpnyyaA1zzJ8BkZ46DA/Ks0yDqFY
xkDWAkZGWtPikShTjpW1vyWnD6eLTMaGll5a28H8Uydq5W2a5AGLTxDquwesquCF
iwrmXhjwQku2oxx8nH1YuuRRpw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:08 2025 by rpki-client