Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/1l6ywQHOvnpAm7WraDBq0ge_VsE.roa
File: 1l6ywQHOvnpAm7WraDBq0ge_VsE.roa (raw, json)
Hash identifier: uwBGs4IPbBiVxsOztqAftGCutVVX31lSFj+BNXdgO0U=
Subject key identifier: D6:5E:B2:C1:01:CE:BE:7A:40:9B:B5:AB:68:30:6A:D2:07:BF:56:C1
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 01856D5D0DED0E981A6048757B52401A8EFA
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/1l6ywQHOvnpAm7WraDBq0ge_VsE.roa
Signing time: Sun 01 Jan 2023 12:44:53 +0000
ROA not before: Sun 01 Jan 2023 12:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8917
IP address blocks: 91.230.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:0d:ed:0e:98:1a:60:48:75:7b:52:40:1a:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Jan 1 12:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d65eb2c101cebe7a409bb5ab68306ad207bf56c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:4d:ab:93:5f:b3:d1:93:40:ca:3a:c5:fb:
79:41:f3:fd:95:60:f5:02:33:9e:99:cd:0c:6f:a1:
d2:2e:09:c1:f3:f2:32:23:f6:11:d3:df:04:4c:a9:
02:ad:d9:8d:b3:78:92:3c:97:8c:65:03:97:e1:02:
f6:cf:0b:79:24:1d:08:1c:5c:80:c4:9c:3e:dd:c7:
74:92:51:58:f3:03:3c:c7:ba:1e:f1:81:7e:21:d7:
fc:fe:f4:a3:44:f0:8f:82:90:b6:77:ac:1c:64:e5:
ff:19:52:f6:6a:df:b0:9a:91:68:1f:f6:f2:e9:9c:
a4:ac:f4:65:8c:9d:ec:ff:51:71:b5:72:97:34:11:
d3:f7:c3:f7:8e:0e:11:91:d1:74:f7:5d:ea:17:9e:
ec:5b:05:1e:09:39:79:9d:85:a9:6a:b8:1e:02:35:
b2:79:c2:8b:29:e4:dd:47:df:7e:6e:30:7e:e9:22:
f2:65:b4:60:6d:0c:85:07:0a:d4:7d:01:e3:ca:08:
a1:3d:7c:03:9d:84:e2:1e:05:b7:0e:c7:87:c2:bb:
cf:e1:11:99:67:91:2b:2e:09:b9:23:a5:de:5c:bc:
1a:2e:48:92:55:70:f7:b0:3f:0b:3b:35:06:82:16:
fb:d5:02:f9:fd:47:9a:9a:a3:d8:54:02:99:b4:11:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:B2:C1:01:CE:BE:7A:40:9B:B5:AB:68:30:6A:D2:07:BF:56:C1
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/1l6ywQHOvnpAm7WraDBq0ge_VsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.214.0/24
Signature Algorithm: sha256WithRSAEncryption
02:41:c8:08:d1:f0:36:4d:0c:c9:2d:39:b7:d9:ff:34:aa:4f:
b3:6c:a0:25:a0:d5:60:d3:78:b8:1e:a8:95:bf:a1:d3:b3:d3:
13:bf:ee:4a:0b:48:6f:80:5c:89:93:b0:7e:1a:ad:c1:5f:cd:
ed:a5:5b:f2:c8:7e:03:1d:86:92:a5:fd:5a:b7:6e:41:6f:30:
1d:66:80:03:70:6e:2a:e4:f8:d3:09:68:37:b8:19:59:01:9c:
03:c9:0f:c5:70:9a:d7:50:b9:4d:4c:24:68:2a:c7:61:1b:b0:
db:55:b8:80:bb:ca:28:e0:8a:3a:65:4e:ef:da:45:fe:d5:06:
8b:58:d8:59:6c:f3:81:cc:36:1a:d7:67:90:ef:43:9f:9f:12:
6d:94:52:80:c4:ad:04:e0:5f:45:08:42:9c:e5:4d:5d:c7:2a:
25:93:ca:58:b8:5a:91:ab:6a:ee:0c:31:cb:3e:fb:75:e9:48:
60:b8:64:fc:b4:d1:6e:8c:a3:dd:8c:cb:a1:f1:09:ef:6f:31:
00:08:81:e6:52:a6:56:93:24:22:e4:38:72:9d:97:b1:f5:55:
b2:fe:4a:cd:13:02:11:35:3d:a3:a2:c9:ad:a1:38:d7:89:87:
cf:72:07:40:91:42:f2:f6:e9:c0:26:00:f4:41:b9:ba:35:d0:
76:e1:cf:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXQ3tDpgaYEh1e1JAGo76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh
MzVkM2IwHhcNMjMwMTAxMTI0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjVlYjJjMTAxY2ViZTdhNDA5YmI1YWI2ODMwNmFkMjA3YmY1NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuxNq5Nfs9GTQMo6xft5QfP9lWD1
AjOemc0Mb6HSLgnB8/IyI/YR098ETKkCrdmNs3iSPJeMZQOX4QL2zwt5JB0IHFyA
xJw+3cd0klFY8wM8x7oe8YF+Idf8/vSjRPCPgpC2d6wcZOX/GVL2at+wmpFoH/by
6ZykrPRljJ3s/1FxtXKXNBHT98P3jg4RkdF0913qF57sWwUeCTl5nYWpargeAjWy
ecKLKeTdR99+bjB+6SLyZbRgbQyFBwrUfQHjygihPXwDnYTiHgW3DseHwrvP4RGZ
Z5ErLgm5I6XeXLwaLkiSVXD3sD8LOzUGghb71QL5/UeamqPYVAKZtBGrlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZessEBzr56QJu1q2gwatIHv1bBMB8GA1UdIwQY
MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct
YWVkMTY0ODMyYThiLzEvMWw2eXdRSE92bnBBbTdXcmFEQnEwZ2VfVnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi
LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bWMA0G
CSqGSIb3DQEBCwUAA4IBAQACQcgI0fA2TQzJLTm32f80qk+zbKAloNVg03i4HqiV
v6HTs9MTv+5KC0hvgFyJk7B+Gq3BX83tpVvyyH4DHYaSpf1at25BbzAdZoADcG4q
5PjTCWg3uBlZAZwDyQ/FcJrXULlNTCRoKsdhG7DbVbiAu8oo4Io6ZU7v2kX+1QaL
WNhZbPOBzDYa12eQ70OfnxJtlFKAxK0E4F9FCEKc5U1dxyolk8pYuFqRq2ruDDHL
Pvt16UhguGT8tNFujKPdjMuh8QnvbzEACIHmUqZWkyQi5DhynZex9VWy/krNEwIR
NT2josmtoTjXiYfPcgdAkULy9unAJgD0Qbm6NdB24c9z
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:43:39 2025 by rpki-client