Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/Sko7uSdDE1OoDrNmqJ0Ek2eKr1s.roa
File: Sko7uSdDE1OoDrNmqJ0Ek2eKr1s.roa (raw, json)
Hash identifier: IAHWtHb0G28TPQ2oYrSHH8AMFzJXZWGppOamwl8REH8=
Subject key identifier: 4A:4A:3B:B9:27:43:13:53:A8:0E:B3:66:A8:9D:04:93:67:8A:AF:5B
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 08AAB1E7
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/Sko7uSdDE1OoDrNmqJ0Ek2eKr1s.roa
Signing time: Sat 01 Jan 2022 09:00:56 +0000
ROA not before: Sat 01 Jan 2022 09:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.228.74.0/24 maxlen: 24
91.228.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145404391 (0x8aab1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jan 1 09:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4a3bb927431353a80eb366a89d0493678aaf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:6d:14:67:bd:c7:ad:ad:4b:e4:29:7b:c2:
46:a9:e0:5a:d2:8f:88:1f:39:be:6c:4a:20:17:24:
58:b8:40:da:0b:05:86:3c:ae:c4:8f:ca:db:cf:52:
59:3d:d9:7f:64:64:72:08:62:95:4d:64:7d:4b:2f:
d4:e4:cf:a2:44:44:a7:e3:c9:25:b6:d4:a9:4c:7e:
59:23:61:26:d6:25:41:44:a8:d7:65:12:53:2a:eb:
18:ec:ba:88:5f:cb:63:75:b0:c1:35:1c:58:b3:4e:
6d:6c:9b:fb:9c:6b:37:5d:29:59:cf:77:ab:f3:4c:
ae:0e:b0:ff:de:d5:40:a7:e2:67:d5:77:df:9a:47:
25:60:bd:2c:5a:29:02:3c:8a:ed:c7:82:8a:13:8f:
4d:14:7c:71:24:84:a8:fc:70:ae:28:05:44:79:cd:
e0:14:c7:40:d0:28:34:6f:f7:70:61:17:7d:f9:be:
f2:d4:59:da:c9:cb:19:0f:86:fa:e3:a5:d8:78:fa:
01:16:f1:11:37:79:30:8e:15:c3:9c:95:4e:64:d8:
24:9d:06:08:80:26:f4:87:a2:ad:6d:a3:dc:19:54:
1d:99:6c:db:a8:7d:6e:75:69:66:71:d5:3c:84:80:
6c:f0:d0:0f:75:bc:a1:2f:ee:48:5e:3f:fe:0b:fc:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:3B:B9:27:43:13:53:A8:0E:B3:66:A8:9D:04:93:67:8A:AF:5B
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/Sko7uSdDE1OoDrNmqJ0Ek2eKr1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.72.0/24
91.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7a:71:54:26:30:a6:f3:0e:97:41:c1:b5:06:5f:3e:f2:05:
09:d5:39:e1:d0:64:0a:06:c8:52:75:fe:68:9e:f8:2f:28:db:
5e:98:49:11:74:51:fb:04:d9:02:68:af:cb:61:27:e7:d4:91:
63:bf:fb:db:d5:e1:59:76:00:02:9c:df:18:7e:84:52:1e:8b:
3f:6a:39:f8:42:54:1f:b3:7d:00:96:87:1e:1c:55:77:fd:b7:
ad:2a:bb:bd:ba:24:08:18:55:a2:d2:4f:62:16:18:0c:77:90:
83:62:c7:95:3c:4d:56:1d:8d:26:ba:72:b0:40:21:88:d2:b5:
a5:20:9d:66:fa:f7:4c:39:29:30:90:cf:06:a3:92:e0:d5:a4:
31:99:74:89:14:bf:16:1a:9d:a3:d6:37:8f:29:44:8c:6f:38:
51:5a:fa:2d:34:95:c1:d8:25:b0:b9:99:c3:9c:0f:3a:41:7b:
a2:7b:20:29:bf:b8:49:b9:98:92:d9:c7:a0:98:29:c3:c2:b8:
4a:8f:75:a8:40:6f:d8:1b:fe:63:64:d4:7e:75:7e:c6:52:a6:
5d:0c:a7:df:22:c5:c0:a1:ab:3b:15:fb:a8:48:6f:56:47:d7:
a9:92:48:95:3b:67:80:14:c3:df:72:45:c1:86:fb:17:4c:6b:
cf:a8:59:d8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECKqx5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWJjODUwZDE3Y2E2ZDNjN2I0ZDAwZTUwMWUyZDM1NmYwOGE1ODVlMB4XDTIyMDEw
MTA5MDA1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE0YTNiYjkyNzQz
MTM1M2E4MGViMzY2YTg5ZDA0OTM2NzhhYWY1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZsbRRnvcetrUvkKXvCRqngWtKPiB85vmxKIBckWLhA2gsF
hjyuxI/K289SWT3Zf2RkcghilU1kfUsv1OTPokREp+PJJbbUqUx+WSNhJtYlQUSo
12USUyrrGOy6iF/LY3WwwTUcWLNObWyb+5xrN10pWc93q/NMrg6w/97VQKfiZ9V3
35pHJWC9LFopAjyK7ceCihOPTRR8cSSEqPxwrigFRHnN4BTHQNAoNG/3cGEXffm+
8tRZ2snLGQ+G+uOl2Hj6ARbxETd5MI4Vw5yVTmTYJJ0GCIAm9IeirW2j3BlUHZls
26h9bnVpZnHVPISAbPDQD3W8oS/uSF4//gv82lUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRKSju5J0MTU6gOs2aonQSTZ4qvWzAfBgNVHSMEGDAWgBSxvIUNF8ptPHtN
AOUB4tNW8IpYXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NieUZEUmZLYlR4N1RRRGxBZUxUVnZDS1dGNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvOGFhMDJkLTk0YzgtNDY3OC05MmFjLTE3ZmI0ZmZiOWZhZC8x
L1Nrbzd1U2RERTFPb0RyTm1xSjBFazJlS3Ixcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQv
OGFhMDJkLTk0YzgtNDY3OC05MmFjLTE3ZmI0ZmZiOWZhZC8xL3NieUZEUmZLYlR4
N1RRRGxBZUxUVnZDS1dGNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvkSAMEAFvkSjANBgkqhkiG9w0B
AQsFAAOCAQEAP3pxVCYwpvMOl0HBtQZfPvIFCdU54dBkCgbIUnX+aJ74LyjbXphJ
EXRR+wTZAmivy2En59SRY7/729XhWXYAApzfGH6EUh6LP2o5+EJUH7N9AJaHHhxV
d/23rSq7vbokCBhVotJPYhYYDHeQg2LHlTxNVh2NJrpysEAhiNK1pSCdZvr3TDkp
MJDPBqOS4NWkMZl0iRS/Fhqdo9Y3jylEjG84UVr6LTSVwdglsLmZw5wPOkF7onsg
Kb+4SbmYktnHoJgpw8K4So91qEBv2Bv+Y2TUfnV+xlKmXQyn3yLFwKGrOxX7qEhv
VkfXqZJIlTtngBTD33JFwYb7F0xrz6hZ2A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:29 2025 by rpki-client