Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/utgFFw4cCqywoGnc7ZAqlBBnNng.roa
File: utgFFw4cCqywoGnc7ZAqlBBnNng.roa (raw, json)
Hash identifier: CwenP/FhEubdovSJ+CKlkPK+Q2vvuyhXtTIWlQfAYxI=
Subject key identifier: BA:D8:05:17:0E:1C:0A:AC:B0:A0:69:DC:ED:90:2A:94:10:67:36:78
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 03A900DA
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/utgFFw4cCqywoGnc7ZAqlBBnNng.roa
Signing time: Sat 01 Jan 2022 04:03:48 +0000
ROA not before: Sat 01 Jan 2022 04:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42981
IP address blocks: 91.196.8.0/22 maxlen: 24
185.153.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61407450 (0x3a900da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Jan 1 04:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bad805170e1c0aacb0a069dced902a9410673678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:28:d8:a6:68:12:73:26:c2:ad:76:dd:8c:
3f:63:32:99:9f:5b:8d:a5:99:da:97:88:2c:64:47:
a8:e9:d1:bf:07:7d:5d:44:8d:52:87:ac:ab:dd:d1:
77:93:b7:c4:e2:9d:1d:7a:d5:91:ed:71:e2:f6:b0:
93:4f:ad:ed:f4:48:f6:a1:79:f6:81:ec:2b:19:6d:
a2:f5:ab:27:2e:b3:bd:73:ef:ad:f1:bc:2f:a6:33:
13:18:89:b3:1d:06:8b:93:51:5e:c3:29:08:74:d0:
b5:52:f8:e7:33:76:2c:98:f7:71:f3:76:c0:da:54:
0d:13:56:3a:65:2e:a2:52:8a:38:0a:86:ea:42:e6:
a4:7a:f2:ad:e7:4e:39:85:0e:19:38:76:86:33:aa:
68:25:64:a1:f4:a2:60:9e:26:f1:2d:81:f0:6d:87:
a9:5b:08:44:3a:11:24:14:78:fb:b4:b0:f5:47:60:
32:02:fc:d8:2e:a1:d8:e8:31:13:6c:6b:67:40:ea:
bd:0a:0e:a6:aa:13:84:d0:49:13:38:bc:bd:6d:6d:
5b:85:ff:99:01:2b:7e:95:b5:91:c8:54:a8:79:19:
07:20:38:cd:a3:ab:96:30:05:52:67:4a:eb:d6:94:
67:9d:b1:31:b7:0c:3f:bf:df:3a:76:61:39:7a:58:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:05:17:0E:1C:0A:AC:B0:A0:69:DC:ED:90:2A:94:10:67:36:78
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/utgFFw4cCqywoGnc7ZAqlBBnNng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.8.0/22
185.153.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2d:aa:7e:e2:d1:e4:5c:48:e5:26:95:ba:cf:9c:28:22:14:
7d:aa:84:37:6f:36:f3:41:36:25:50:cb:61:70:4a:99:68:c9:
b8:a7:6b:8f:66:31:20:7e:69:95:ae:4c:e2:5d:91:71:d1:26:
96:2a:d1:5d:40:e3:ff:12:18:f2:19:07:d8:19:72:a0:da:3f:
31:74:5f:88:3b:73:81:2f:fa:7a:7f:b6:ea:8f:18:3f:13:b7:
b7:b8:57:64:3f:ec:7a:12:d9:a6:ee:0f:19:c6:09:0d:ea:97:
20:9f:67:78:d1:88:4c:a1:f3:bc:c7:8a:f0:60:71:79:c6:27:
7b:f2:66:92:b8:c5:d9:18:ab:0d:16:a4:dd:75:cf:34:5d:c2:
47:23:df:2e:6e:dc:ea:4c:b7:a3:c9:33:83:c7:67:1c:3a:43:
54:51:a7:c6:2f:a5:76:5a:b7:8e:89:fb:4c:1e:08:88:25:3b:
dc:c1:ce:c8:70:a2:76:c1:73:8b:26:c6:eb:08:30:c2:fb:cb:
a0:f2:5d:ae:3e:2a:9a:2c:df:94:55:be:fb:dc:ac:de:78:9a:
03:7f:b8:18:3c:05:f8:ca:d6:ae:c7:20:fa:82:d6:83:03:3e:
a2:fb:98:c9:c1:be:2c:e3:60:45:e2:6a:82:11:28:00:d9:c8:
38:93:32:03
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA6kA2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTA4ZGUyMDJlMTc0Y2IyMzc0NmRjYmRlZWE4YTlkNDQ5NTgwMDE5MB4XDTIyMDEw
MTA0MDM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFkODA1MTcwZTFj
MGFhY2IwYTA2OWRjZWQ5MDJhOTQxMDY3MzY3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2aKNimaBJzJsKtdt2MP2MymZ9bjaWZ2peILGRHqOnRvwd9
XUSNUoesq93Rd5O3xOKdHXrVke1x4vawk0+t7fRI9qF59oHsKxltovWrJy6zvXPv
rfG8L6YzExiJsx0Gi5NRXsMpCHTQtVL45zN2LJj3cfN2wNpUDRNWOmUuolKKOAqG
6kLmpHryredOOYUOGTh2hjOqaCVkofSiYJ4m8S2B8G2HqVsIRDoRJBR4+7Sw9Udg
MgL82C6h2OgxE2xrZ0DqvQoOpqoThNBJEzi8vW1tW4X/mQErfpW1kchUqHkZByA4
zaOrljAFUmdK69aUZ52xMbcMP7/fOnZhOXpYs5cCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS62AUXDhwKrLCgadztkCqUEGc2eDAfBgNVHSMEGDAWgBR5CN4gLhdMsjdG
3L3uqKnUSVgAGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VRamVJQzRYVExJM1J0eTk3cWlwMUVsWUFCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvYWIxYzExLTlkOWYtNGM1OC05OTkzLTU2MWQ1ZmY4ZGMwZS8x
L3V0Z0ZGdzRjQ3F5d29HbmM3WkFxbEJCbk5uZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
YWIxYzExLTlkOWYtNGM1OC05OTkzLTU2MWQ1ZmY4ZGMwZS8xL2VRamVJQzRYVExJ
M1J0eTk3cWlwMUVsWUFCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvECAMEArmZJDANBgkqhkiG9w0B
AQsFAAOCAQEATC2qfuLR5FxI5SaVus+cKCIUfaqEN28280E2JVDLYXBKmWjJuKdr
j2YxIH5pla5M4l2RcdEmlirRXUDj/xIY8hkH2BlyoNo/MXRfiDtzgS/6en+26o8Y
PxO3t7hXZD/sehLZpu4PGcYJDeqXIJ9neNGITKHzvMeK8GBxecYne/JmkrjF2Rir
DRak3XXPNF3CRyPfLm7c6ky3o8kzg8dnHDpDVFGnxi+ldlq3jon7TB4IiCU73MHO
yHCidsFziybG6wgwwvvLoPJdrj4qmizflFW++9ys3niaA3+4GDwF+MrWrscg+oLW
gwM+ovuYycG+LONgReJqghEoANnIOJMyAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:41 2025 by rpki-client