Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/IC7Ut1DljilT6nwtnKKJWfliXyE.roa
File: IC7Ut1DljilT6nwtnKKJWfliXyE.roa (raw, json)
Hash identifier: xDCIhRaL7vkPZhXKNkCnj3WkjuytEoIxGq6kErkQW0Y=
Subject key identifier: 20:2E:D4:B7:50:E5:8E:29:53:EA:7C:2D:9C:A2:89:59:F9:62:5F:21
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 0182F8E34EC9892B4497BEDA54AABD55EA0E
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/IC7Ut1DljilT6nwtnKKJWfliXyE.roa
Signing time: Thu 01 Sep 2022 11:50:22 +0000
ROA not before: Thu 01 Sep 2022 11:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35297
IP address blocks: 91.209.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:e3:4e:c9:89:2b:44:97:be:da:54:aa:bd:55:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Sep 1 11:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202ed4b750e58e2953ea7c2d9ca28959f9625f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:06:d5:de:e6:c5:fe:0a:87:5c:5c:e7:be:
6a:7b:eb:01:af:1c:c1:73:c0:af:6d:51:68:ed:f2:
66:77:89:a8:f0:20:96:6a:d7:3e:f9:a6:5a:59:79:
9a:6b:ef:f2:5e:f8:41:d6:ab:b4:c5:7a:6c:71:88:
99:6b:a3:ee:bc:1a:85:4c:2e:12:38:1d:f0:ae:2e:
3d:b5:5c:6d:af:7e:69:06:13:c4:80:d6:ff:c6:f8:
cf:a6:80:dc:5f:d8:8b:d4:26:fb:1a:de:5f:96:0a:
37:93:40:b1:8f:b5:10:91:bb:b8:4a:a9:d4:4b:1a:
20:95:42:04:ca:5e:a3:5f:53:c6:c6:79:fd:e5:13:
25:ce:b4:37:68:cf:57:07:b3:e9:ae:5b:03:6e:0a:
89:58:13:b3:23:d4:a6:5c:b1:f2:49:3c:08:93:a2:
43:3c:9a:ba:c3:1a:ec:d2:51:f4:b8:17:b1:f1:fa:
6e:17:b9:46:6b:c0:83:ca:29:6f:b3:53:ad:6c:f3:
7e:14:27:98:75:86:de:43:f9:16:aa:37:3b:6d:78:
07:50:f0:6b:83:b0:d3:dd:1d:65:be:3d:59:db:54:
60:e7:d6:f5:c1:b2:0f:ae:22:8a:4a:c6:f1:cf:67:
c6:0c:de:e7:44:b6:56:3b:66:00:fc:7d:39:f7:54:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:D4:B7:50:E5:8E:29:53:EA:7C:2D:9C:A2:89:59:F9:62:5F:21
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/IC7Ut1DljilT6nwtnKKJWfliXyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.73.0/24
Signature Algorithm: sha256WithRSAEncryption
81:53:77:d5:de:d8:a8:91:6f:ce:b2:c2:6e:68:41:90:02:7c:
43:16:63:c9:e0:e4:ed:62:fc:df:ac:bd:60:d8:da:1a:1c:fc:
ca:c3:f0:9d:a9:bd:29:1d:e8:c8:51:56:e3:e1:94:78:23:0e:
22:ef:dc:d6:c4:6d:e2:be:1e:cb:25:c6:ee:d8:38:5f:03:76:
7a:8d:66:63:ad:4a:91:5d:88:ca:57:8c:b7:19:36:ff:d8:17:
ca:69:f7:4f:ab:86:70:82:1b:73:53:75:d3:21:f5:7e:17:dd:
50:e0:49:ee:73:05:0f:08:57:71:6d:d0:4d:e3:8c:14:f7:39:
bb:cd:98:04:51:7d:2e:b0:32:e6:6f:80:80:ed:f0:0f:6d:67:
54:ca:04:b7:08:d9:39:4c:31:e6:68:f4:9a:ff:3d:c6:0d:68:
fc:0e:42:f8:65:8b:b8:85:f2:03:7b:b6:f9:d5:ee:20:39:4d:
36:2e:9d:c3:a0:a0:b2:99:97:6d:fa:cf:c4:ac:86:65:84:7b:
0c:52:3a:86:e9:91:71:7f:cb:6e:26:a6:b2:73:20:ba:d3:94:
2f:a7:3b:66:a7:80:d8:72:52:12:f8:dd:ec:5e:e3:00:84:ee:
99:2c:13:d4:d5:cb:a9:af:9e:26:7f:37:e5:36:2a:b3:26:24:
1e:ec:65:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL4407JiStEl77aVKq9VeoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MTM3YzU5N2QxZTMwY2I3NTYxOGU1MWY0MmI3Zjc5ZWQ1
ZmZjODgwHhcNMjIwOTAxMTE1MDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDJlZDRiNzUwZTU4ZTI5NTNlYTdjMmQ5Y2EyODk1OWY5NjI1ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbAG1d7mxf4Kh1xc575qe+sBrxzB
c8CvbVFo7fJmd4mo8CCWatc++aZaWXmaa+/yXvhB1qu0xXpscYiZa6PuvBqFTC4S
OB3wri49tVxtr35pBhPEgNb/xvjPpoDcX9iL1Cb7Gt5flgo3k0Cxj7UQkbu4SqnU
SxoglUIEyl6jX1PGxnn95RMlzrQ3aM9XB7PprlsDbgqJWBOzI9SmXLHySTwIk6JD
PJq6wxrs0lH0uBex8fpuF7lGa8CDyilvs1OtbPN+FCeYdYbeQ/kWqjc7bXgHUPBr
g7DT3R1lvj1Z21Rg59b1wbIPriKKSsbxz2fGDN7nRLZWO2YA/H0591TVQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCAu1LdQ5Y4pU+p8LZyiiVn5Yl8hMB8GA1UdIwQY
MBaAFPYTfFl9HjDLdWGOUfQrf3ntX/yIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWhOOFdYMGVNTXQxWVk1UjlDdF9lZTFmX0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wZjFmOWYtNWE1MS00YmQ2LWJmMzAt
MzlhMjQzODhhNWU4LzEvSUM3VXQxRGxqaWxUNm53dG5LS0pXZmxpWHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wZjFmOWYtNWE1MS00YmQ2LWJmMzAtMzlhMjQzODhhNWU4
LzEvOWhOOFdYMGVNTXQxWVk1UjlDdF9lZTFmX0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FJMA0G
CSqGSIb3DQEBCwUAA4IBAQCBU3fV3tiokW/OssJuaEGQAnxDFmPJ4OTtYvzfrL1g
2NoaHPzKw/Cdqb0pHejIUVbj4ZR4Iw4i79zWxG3ivh7LJcbu2DhfA3Z6jWZjrUqR
XYjKV4y3GTb/2BfKafdPq4ZwghtzU3XTIfV+F91Q4EnucwUPCFdxbdBN44wU9zm7
zZgEUX0usDLmb4CA7fAPbWdUygS3CNk5TDHmaPSa/z3GDWj8DkL4ZYu4hfIDe7b5
1e4gOU02Lp3DoKCymZdt+s/ErIZlhHsMUjqG6ZFxf8tuJqaycyC605Qvpztmp4DY
clIS+N3sXuMAhO6ZLBPU1cupr54mfzflNiqzJiQe7GU3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org