Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/AzNL3CRsszraK1E6Ass5cHOJoQ8.roa
File: AzNL3CRsszraK1E6Ass5cHOJoQ8.roa (raw, json)
Hash identifier: jp/G9AOtGFB4rJ+4bFvK17mOSyKqxFetibkR3TE5kY8=
Subject key identifier: 03:33:4B:DC:24:6C:B3:3A:DA:2B:51:3A:02:CB:39:70:73:89:A1:0F
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 03D54738
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/AzNL3CRsszraK1E6Ass5cHOJoQ8.roa
Signing time: Sat 01 Jan 2022 14:59:23 +0000
ROA not before: Sat 01 Jan 2022 14:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56674
IP address blocks: 91.226.150.0/24 maxlen: 24
91.226.148.0/24 maxlen: 24
91.226.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64309048 (0x3d54738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Jan 1 14:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03334bdc246cb33ada2b513a02cb39707389a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:5d:15:53:8a:85:da:b7:fb:3b:18:19:34:
82:e2:0f:1b:6e:8b:f2:c8:7d:6c:69:cf:b1:89:e2:
76:e2:aa:f9:f5:12:06:a4:ee:4a:10:4b:3e:96:92:
e8:a7:a8:3f:10:8f:d4:98:9b:bf:c9:1a:89:30:5e:
73:0a:0d:60:1d:af:93:25:0c:6f:e0:b5:d3:5f:d2:
d2:e5:ae:81:14:df:eb:97:53:69:0d:dc:8c:bf:e4:
96:7c:31:cd:65:d3:34:8a:e9:92:dc:2d:06:b1:6d:
40:8a:27:d0:bb:28:45:fe:b3:31:e3:d1:35:a6:63:
d6:fa:13:d9:e5:3e:b9:5f:95:df:4f:61:c0:16:96:
87:22:2b:57:4a:be:18:83:62:7c:9c:70:d9:08:51:
bf:f3:61:a8:82:6b:f6:30:ab:fc:f7:3e:01:72:e5:
c6:fc:c0:8c:5c:49:72:22:12:a6:43:f0:0c:0b:6f:
60:23:c0:56:cf:bd:37:0b:ae:68:74:c8:0b:f2:ea:
eb:5c:de:55:29:bf:b5:cd:4e:c2:d0:9b:2e:e4:00:
0b:b5:a6:85:47:4d:4e:32:e1:f7:f7:a6:07:4c:45:
7a:b4:e7:a9:8b:97:cb:f7:e7:5f:f5:e9:11:cd:e8:
d4:84:c5:39:c8:56:ba:8f:ff:6a:5f:31:ec:e7:7e:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:4B:DC:24:6C:B3:3A:DA:2B:51:3A:02:CB:39:70:73:89:A1:0F
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/AzNL3CRsszraK1E6Ass5cHOJoQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.148.0-91.226.150.255
Signature Algorithm: sha256WithRSAEncryption
01:ff:59:dd:f6:92:06:22:ce:26:9b:72:78:1e:cf:67:dd:b7:
14:aa:f1:1f:e4:cd:5e:2a:d7:cb:85:6f:69:ad:6f:11:e8:77:
54:9f:8a:1a:fd:a1:e5:a5:01:51:9b:e5:00:8b:51:43:ae:28:
d5:65:9c:78:dd:0e:c4:e1:9f:c6:f5:91:c9:d8:17:9e:86:46:
1e:2d:3e:d1:9f:bc:6b:82:5d:e1:29:24:28:72:09:b9:c4:dd:
85:d1:d0:0d:b5:40:77:9d:96:2f:16:75:88:e8:60:f5:b4:c0:
b5:37:86:3e:9b:cb:8c:7e:fc:2f:c3:98:ec:c4:b6:2f:6c:03:
ae:56:1f:a0:fb:24:ff:2f:d5:03:6f:8f:29:1f:6b:fe:3c:82:
cd:f8:a1:9a:99:5b:df:61:38:6d:67:2a:0a:b5:52:fb:2e:f0:
5f:11:53:11:6e:8f:3e:ef:f2:eb:13:45:8f:92:d4:3f:36:2e:
90:6c:45:ea:84:d1:9f:bf:80:cd:21:1e:f2:c3:06:6a:85:77:
0d:61:b5:a4:2f:5e:4c:bd:83:18:06:fd:75:d1:1b:e1:4c:19:
d5:7f:da:63:ec:08:80:f4:ea:a1:73:81:59:29:0b:e3:90:ab:
e9:36:19:0d:75:6e:91:b9:6c:b5:ac:50:36:69:ec:de:be:c8:
e5:c8:28:0d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEA9VHODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljMDJiMzBhZGJmMTBmNzFmOWJlMGY0NjQ0NDI0NDk4MjYzZGYzMB4XDTIyMDEw
MTE0NTkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDMzMzRiZGMyNDZj
YjMzYWRhMmI1MTNhMDJjYjM5NzA3Mzg5YTEwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALd6XRVTioXat/s7GBk0guIPG26L8sh9bGnPsYniduKq+fUS
BqTuShBLPpaS6KeoPxCP1Jibv8kaiTBecwoNYB2vkyUMb+C101/S0uWugRTf65dT
aQ3cjL/klnwxzWXTNIrpktwtBrFtQIon0LsoRf6zMePRNaZj1voT2eU+uV+V309h
wBaWhyIrV0q+GINifJxw2QhRv/NhqIJr9jCr/Pc+AXLlxvzAjFxJciISpkPwDAtv
YCPAVs+9NwuuaHTIC/Lq61zeVSm/tc1OwtCbLuQAC7WmhUdNTjLh9/emB0xFerTn
qYuXy/fnX/XpEc3o1ITFOchWuo//al8x7Od+eoUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQDM0vcJGyzOtorUToCyzlwc4mhDzAfBgNVHSMEGDAWgBQ0nAKzCtvxD3H5
vg9GREJEmCY98zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Kd0Nzd3JiOFE5eC1iNFBSa1JDUkpnbVBmTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvODEzODIxLTI0ZjQtNDg1Zi05YzRiLTQzMzQwM2QzMGE4My8x
L0F6TkwzQ1Jzc3pyYUsxRTZBc3M1Y0hPSm9ROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
ODEzODIxLTI0ZjQtNDg1Zi05YzRiLTQzMzQwM2QzMGE4My8xL05Kd0Nzd3JiOFE5
eC1iNFBSa1JDUkpnbVBmTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCW+KUAwQAW+KWMA0GCSqGSIb3
DQEBCwUAA4IBAQAB/1nd9pIGIs4mm3J4Hs9n3bcUqvEf5M1eKtfLhW9prW8R6HdU
n4oa/aHlpQFRm+UAi1FDrijVZZx43Q7E4Z/G9ZHJ2BeehkYeLT7Rn7xrgl3hKSQo
cgm5xN2F0dANtUB3nZYvFnWI6GD1tMC1N4Y+m8uMfvwvw5jsxLYvbAOuVh+g+yT/
L9UDb48pH2v+PILN+KGamVvfYThtZyoKtVL7LvBfEVMRbo8+7/LrE0WPktQ/Ni6Q
bEXqhNGfv4DNIR7ywwZqhXcNYbWkL15MvYMYBv110RvhTBnVf9pj7AiA9Oqhc4FZ
KQvjkKvpNhkNdW6RuWy1rFA2aezevsjlyCgN
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:40 2025 by rpki-client