Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/dYMhD5pbVgysFOCmXEC_K2N0l4U.roa
File: dYMhD5pbVgysFOCmXEC_K2N0l4U.roa (raw, json)
Hash identifier: GTdAH8fIBmjSmCJwDJlnLBtNp54zX8HLr2moNDFZGZw=
Subject key identifier: 75:83:21:0F:9A:5B:56:0C:AC:14:E0:A6:5C:40:BF:2B:63:74:97:85
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0B32230A
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/dYMhD5pbVgysFOCmXEC_K2N0l4U.roa
Signing time: Thu 17 Mar 2022 22:25:17 +0000
ROA not before: Thu 17 Mar 2022 22:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 91.151.93.0/24 maxlen: 32
91.151.90.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187835146 (0xb32230a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Mar 17 22:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7583210f9a5b560cac14e0a65c40bf2b63749785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:68:fe:28:72:4f:d4:af:fa:8c:5e:c0:0f:
7a:85:40:fc:8e:57:7b:2c:c4:00:b4:d8:83:68:9c:
a7:c8:e4:87:51:7c:63:66:43:dd:e1:9e:70:e4:5b:
9c:26:14:bb:1c:8d:c7:85:82:ed:0c:f2:1b:3d:bc:
17:33:11:bb:ef:c0:6d:3b:14:f6:ed:90:a9:07:be:
3e:02:35:21:ab:e3:f6:38:ed:ca:7c:07:7f:8d:c7:
1d:c3:bf:0d:06:13:1e:2b:ce:68:08:9e:10:52:95:
41:75:a4:c4:01:b0:4b:df:b9:b3:47:37:92:b0:e2:
85:5e:7d:82:6c:2d:3d:88:85:80:9e:b6:25:2a:58:
32:94:03:fa:0a:64:3d:cb:98:fc:bd:64:cf:6c:eb:
30:53:b0:b5:d4:37:fd:e3:da:db:04:4c:67:62:79:
9f:b9:8e:d3:ec:3c:f5:f0:69:22:a2:5d:6f:62:7f:
e7:d3:17:43:7e:65:24:5d:7b:ba:a4:8b:21:63:9f:
8a:93:c4:9c:be:90:3a:e3:40:9b:af:68:4f:04:d0:
70:83:d3:89:57:5a:0a:fd:f2:ec:03:e4:0c:77:29:
33:10:84:f3:c9:78:a4:48:f7:78:97:26:f3:07:41:
8f:7d:b1:7a:ab:08:ca:e0:02:c3:86:3b:8b:76:21:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:21:0F:9A:5B:56:0C:AC:14:E0:A6:5C:40:BF:2B:63:74:97:85
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/dYMhD5pbVgysFOCmXEC_K2N0l4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
91.151.93.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:68:ee:a7:b0:84:09:14:b8:0e:03:1b:23:67:c4:7b:2f:bb:
2a:1e:6a:21:20:85:24:55:73:00:00:4a:f7:8f:38:6c:92:ce:
b1:67:5b:bd:91:32:35:c7:7c:da:19:29:a9:ef:e7:c6:bd:16:
a1:c5:17:81:e5:23:56:bb:fb:2b:48:39:6d:1f:bf:b3:dd:04:
ed:cc:fe:17:0e:12:cf:4f:d4:5d:cb:f9:ce:d8:5b:ea:63:23:
6a:97:0a:b3:06:a8:9b:31:cf:a0:8b:3c:8f:6a:cd:25:63:92:
24:c5:8e:83:4f:94:8a:16:50:c4:4d:93:53:ff:20:a5:e2:2b:
0f:b9:5b:41:5e:46:d3:be:06:e5:b5:9f:ac:e8:c2:2d:b1:46:
9c:93:0e:aa:a0:0f:8b:6c:2a:75:91:af:96:28:4e:f5:d6:c2:
2c:1b:9f:6d:51:d6:a5:4b:45:62:74:c1:28:19:8f:c3:1c:9d:
b8:1c:3a:92:7e:bc:b4:aa:d7:67:28:e8:c0:e7:24:c8:4d:9b:
b9:81:7d:d4:1b:56:60:71:df:1f:3c:bc:01:3b:9b:85:c9:00:
8d:42:42:1d:e8:cd:66:71:7c:04:89:c6:72:83:f8:56:f1:2e:
4a:dc:15:bc:c0:bb:a4:16:1e:34:d2:a7:00:3c:e8:4e:88:42:
12:50:fd:b1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECzIjCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjcxZTliMTNmNWMzMzlhNTg2OTJlZWFiZTcyZWFhNDA2YmJiZDdkMB4XDTIyMDMx
NzIyMjUxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU4MzIxMGY5YTVi
NTYwY2FjMTRlMGE2NWM0MGJmMmI2Mzc0OTc4NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALY+aP4ock/Ur/qMXsAPeoVA/I5XeyzEALTYg2icp8jkh1F8
Y2ZD3eGecORbnCYUuxyNx4WC7QzyGz28FzMRu+/AbTsU9u2QqQe+PgI1Iavj9jjt
ynwHf43HHcO/DQYTHivOaAieEFKVQXWkxAGwS9+5s0c3krDihV59gmwtPYiFgJ62
JSpYMpQD+gpkPcuY/L1kz2zrMFOwtdQ3/ePa2wRMZ2J5n7mO0+w89fBpIqJdb2J/
59MXQ35lJF17uqSLIWOfipPEnL6QOuNAm69oTwTQcIPTiVdaCv3y7APkDHcpMxCE
88l4pEj3eJcm8wdBj32xeqsIyuACw4Y7i3YhngUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBR1gyEPmltWDKwU4KZcQL8rY3SXhTAfBgNVHSMEGDAWgBSrcemxP1wzmlhp
Luq+cuqkBru9fTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EzSHBzVDljTTVwWWFTN3F2bkxxcEFhN3ZYMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvNmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8x
L2RZTWhENXBiVmd5c0ZPQ21YRUNfSzJOMGw0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
NmJhMzljLWVmMWQtNGQ0OC05ODJiLWNmNGI5MDA5OTdhMC8xL3EzSHBzVDljTTVw
WWFTN3F2bkxxcEFhN3ZYMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFuXWgMEAFuXXTANBgkqhkiG9w0B
AQsFAAOCAQEAv2jup7CECRS4DgMbI2fEey+7Kh5qISCFJFVzAABK9484bJLOsWdb
vZEyNcd82hkpqe/nxr0WocUXgeUjVrv7K0g5bR+/s90E7cz+Fw4Sz0/UXcv5zthb
6mMjapcKswaomzHPoIs8j2rNJWOSJMWOg0+UihZQxE2TU/8gpeIrD7lbQV5G074G
5bWfrOjCLbFGnJMOqqAPi2wqdZGvlihO9dbCLBufbVHWpUtFYnTBKBmPwxyduBw6
kn68tKrXZyjowOckyE2buYF91BtWYHHfHzy8ATubhckAjUJCHejNZnF8BInGcoP4
VvEuStwVvMC7pBYeNNKnADzoTohCElD9sQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:01 2025 by rpki-client