Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/AgBu2j0mWgzWzYnPGbk44F3ssTU.roa
File: AgBu2j0mWgzWzYnPGbk44F3ssTU.roa (raw, json)
Hash identifier: dla2nuE9sNanNmgIfWOb7kcX409/SrMAVsT4Ml94kuY=
Subject key identifier: 02:00:6E:DA:3D:26:5A:0C:D6:CD:89:CF:19:B9:38:E0:5D:EC:B1:35
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 07454100
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/AgBu2j0mWgzWzYnPGbk44F3ssTU.roa
Signing time: Sat 01 Jan 2022 08:02:33 +0000
ROA not before: Sat 01 Jan 2022 08:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30725
IP address blocks: 91.226.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121979136 (0x7454100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 1 08:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02006eda3d265a0cd6cd89cf19b938e05decb135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:51:dc:78:1d:86:8a:cf:8b:f4:f3:11:8f:
ab:f9:e5:5b:71:71:48:be:42:d1:f6:87:6f:91:4b:
b0:91:fd:4d:d2:ba:d7:3a:94:c3:d9:ac:7d:0e:87:
5f:a5:1f:c1:fb:2a:c3:cf:19:55:fe:0d:85:40:85:
e5:15:89:c8:ee:e1:00:e2:6d:62:03:d0:20:be:b0:
de:c4:95:b4:63:b3:d3:ef:e6:de:bd:a4:7b:05:b7:
c6:a1:b8:98:f3:4f:03:56:3a:c3:c8:44:86:6a:47:
d1:9c:c5:3c:b7:0b:25:e0:5b:3a:1a:05:bc:40:19:
d6:06:ce:d9:04:3f:f1:f6:65:dd:07:ea:59:80:d9:
05:81:3a:ff:29:9a:31:40:b9:7a:4b:a8:2b:e4:c3:
86:db:60:a1:8c:89:bb:20:c3:df:a0:36:6d:10:1c:
18:7e:5a:86:49:77:9c:a8:d6:36:ed:d5:81:4c:65:
7c:e5:73:dd:33:52:b4:c9:0e:cd:85:56:8c:e8:89:
c3:48:61:f0:08:2a:ff:72:34:28:fd:60:83:2b:87:
63:2b:94:7a:af:00:65:32:f8:b5:33:1c:58:95:79:
87:d2:cc:0d:0e:a7:26:40:a5:7d:d3:a1:5a:21:98:
8d:a3:31:39:46:ee:c6:40:bd:e4:f0:67:1b:f6:79:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:6E:DA:3D:26:5A:0C:D6:CD:89:CF:19:B9:38:E0:5D:EC:B1:35
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/AgBu2j0mWgzWzYnPGbk44F3ssTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.27.0/24
Signature Algorithm: sha256WithRSAEncryption
46:71:26:3c:f3:64:e2:fb:7d:37:a8:95:b0:39:33:80:e4:39:
c9:fa:fb:d8:a4:cf:4d:38:4c:6a:9b:4d:0d:f5:7e:9f:f6:05:
34:83:b1:39:01:70:18:f4:f0:09:f6:b4:c6:5b:7e:ae:d8:02:
87:7c:31:cc:6f:ad:74:fc:1c:ad:2c:30:de:89:7c:5d:c5:01:
ef:a8:86:34:37:c1:ab:0a:38:c7:3b:40:76:8b:68:1b:3c:5b:
40:03:a4:db:9f:bd:59:03:37:3e:44:c3:3e:b4:70:9d:c1:f9:
29:2c:53:bb:8c:66:7d:bf:a0:59:25:c0:34:b7:c0:f7:67:ae:
ea:f3:5c:97:d9:91:f8:2d:80:e8:5a:9c:4f:49:e8:55:0b:32:
47:6b:c1:b6:0b:b7:3e:7f:bb:32:e6:36:00:59:37:f1:cc:8c:
90:29:87:f5:82:0e:74:77:a1:df:bb:51:24:26:97:e3:c0:98:
73:f1:07:15:49:92:fe:b5:83:d9:af:e2:a5:60:f5:c4:58:ef:
de:e8:46:ca:cf:94:35:9b:20:5b:33:82:a2:3c:9a:af:04:33:
e7:de:53:31:b1:86:39:39:af:7f:9e:16:b0:76:30:9d:67:91:
3f:5b:14:4a:14:55:55:09:54:04:f3:12:93:4e:8c:4b:53:d2:
49:a4:85:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB0VBADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
Y2U3MWIxZjRlZWEwMTU5MjQ2MTI1ZmM1YWU5YWQ1MWE0NDc5MmNlMB4XDTIyMDEw
MTA4MDIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDIwMDZlZGEzZDI2
NWEwY2Q2Y2Q4OWNmMTliOTM4ZTA1ZGVjYjEzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOI0Udx4HYaKz4v08xGPq/nlW3FxSL5C0faHb5FLsJH9TdK6
1zqUw9msfQ6HX6Ufwfsqw88ZVf4NhUCF5RWJyO7hAOJtYgPQIL6w3sSVtGOz0+/m
3r2kewW3xqG4mPNPA1Y6w8hEhmpH0ZzFPLcLJeBbOhoFvEAZ1gbO2QQ/8fZl3Qfq
WYDZBYE6/ymaMUC5ekuoK+TDhttgoYyJuyDD36A2bRAcGH5ahkl3nKjWNu3VgUxl
fOVz3TNStMkOzYVWjOiJw0hh8Agq/3I0KP1ggyuHYyuUeq8AZTL4tTMcWJV5h9LM
DQ6nJkClfdOhWiGYjaMxOUbuxkC95PBnG/Z5toUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQCAG7aPSZaDNbNic8ZuTjgXeyxNTAfBgNVHSMEGDAWgBQs5xsfTuoBWSRh
Jfxa6a1RpEeSzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xPY2JIMDdxQVZra1lTWDhXdW10VWFSSGtzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvZjFkOTc2LTcyNmItNGNiNy05ZmEyLTAyYjMzNTgyYzc0Ny8x
L0FnQnUyajBtV2d6V3pZblBHYms0NEYzc3NUVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
ZjFkOTc2LTcyNmItNGNiNy05ZmEyLTAyYjMzNTgyYzc0Ny8xL0xPY2JIMDdxQVZr
a1lTWDhXdW10VWFSSGtzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFviGzANBgkqhkiG9w0BAQsFAAOC
AQEARnEmPPNk4vt9N6iVsDkzgOQ5yfr72KTPTThMaptNDfV+n/YFNIOxOQFwGPTw
Cfa0xlt+rtgCh3wxzG+tdPwcrSww3ol8XcUB76iGNDfBqwo4xztAdotoGzxbQAOk
25+9WQM3PkTDPrRwncH5KSxTu4xmfb+gWSXANLfA92eu6vNcl9mR+C2A6FqcT0no
VQsyR2vBtgu3Pn+7MuY2AFk38cyMkCmH9YIOdHeh37tRJCaX48CYc/EHFUmS/rWD
2a/ipWD1xFjv3uhGys+UNZsgWzOCojyarwQz595TMbGGOTmvf54WsHYwnWeRP1sU
ShRVVQlUBPMSk06MS1PSSaSFOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:00 2025 by rpki-client