Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/A2sCVu3bxH9nQJruky-jYD2CxgY.roa
File: A2sCVu3bxH9nQJruky-jYD2CxgY.roa (raw, json)
Hash identifier: VZoaf7QpkF9UMCxc0d9oXO3T916RSCKIBFQIlkDGG6I=
Subject key identifier: 03:6B:02:56:ED:DB:C4:7F:67:40:9A:EE:93:2F:A3:60:3D:82:C6:06
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 03B68EE3
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/A2sCVu3bxH9nQJruky-jYD2CxgY.roa
Signing time: Sat 01 Jan 2022 04:52:49 +0000
ROA not before: Sat 01 Jan 2022 04:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44049
IP address blocks: 91.199.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62295779 (0x3b68ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jan 1 04:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=036b0256eddbc47f67409aee932fa3603d82c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:39:da:b6:99:12:49:4a:c4:a5:a6:c5:24:
13:36:37:20:32:38:eb:f0:68:d8:bf:39:8f:3b:5a:
10:98:b3:64:2c:f6:77:e4:9e:59:f4:4f:6e:40:1b:
b5:b1:48:20:06:6e:6e:55:6d:53:49:a4:dd:80:93:
56:e5:da:8c:e6:f4:4c:fb:93:66:85:fa:e0:29:ad:
40:61:19:63:41:78:eb:d1:6c:f5:32:04:20:ea:ee:
3a:21:0a:8d:5d:e8:52:d1:60:9a:93:94:d2:05:ec:
8c:58:38:69:66:b0:0e:68:9e:4d:ee:41:e3:3b:a8:
9f:8a:bb:b0:98:00:0f:f3:7e:3a:1a:8b:f3:51:3a:
da:13:af:61:52:74:83:8b:e2:5e:22:ea:2b:fe:0d:
d3:85:d0:c6:d2:03:98:44:5b:ab:6d:69:91:92:ab:
57:c1:cc:d8:87:38:d3:a5:ae:30:b3:08:3b:1a:f5:
d9:41:af:b7:a0:9f:e8:0b:c9:1a:74:bc:57:32:08:
e8:f5:8f:98:84:6b:f2:a3:63:9c:49:8b:15:0c:29:
6b:f4:7e:3d:6d:8e:02:59:ef:c6:4b:2f:0d:f1:9b:
c2:5d:d8:a0:a5:92:f0:45:c7:03:5d:1d:3f:fa:b2:
a5:bc:fc:99:b1:11:e1:e5:1f:64:e7:a2:f5:b1:9b:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:02:56:ED:DB:C4:7F:67:40:9A:EE:93:2F:A3:60:3D:82:C6:06
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/A2sCVu3bxH9nQJruky-jYD2CxgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.13.0/24
Signature Algorithm: sha256WithRSAEncryption
39:66:77:90:f4:6b:f0:8a:f4:af:ae:bf:70:aa:92:6d:ab:46:
40:84:bf:b4:42:e8:d8:1d:31:bf:e9:dc:70:42:d5:bb:d4:40:
30:16:14:14:4f:97:1c:e2:03:1e:15:77:27:8b:d1:4a:bd:1e:
28:c4:33:69:b0:da:84:57:29:dc:83:8c:37:24:11:7c:c5:72:
98:5b:ea:bf:15:cf:31:11:c3:5f:5f:ce:10:e4:11:1f:f7:4c:
34:e4:66:56:24:11:b1:e5:53:d8:31:f9:eb:9d:2c:a4:dd:44:
d4:06:58:04:e0:e8:9e:bf:dc:23:a8:da:2c:38:f1:2a:97:02:
65:45:65:4a:56:cc:19:d2:ce:31:83:ec:7a:4f:65:c8:9f:96:
fa:b6:9c:b0:8b:52:7d:fc:79:00:02:50:78:1a:aa:95:35:5f:
f7:9b:dd:d3:0a:81:a6:00:c4:82:53:2e:c7:74:30:c4:0f:29:
20:c0:62:ff:3f:ed:b3:9d:af:e2:e8:d6:56:cd:6a:cd:32:ab:
89:f3:17:44:bf:21:01:bc:b9:b2:33:ad:8b:26:3a:de:29:90:
79:11:c7:99:a4:79:b6:99:01:41:36:80:b0:ee:b9:24:d0:12:
69:13:b0:7a:95:5d:66:46:0c:1f:a8:d2:43:1a:a6:08:bc:ff:
c9:89:c1:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7aO4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjQzMjc4YmFhNmQ5YmQ0ZTQzNjcxMDRlMWEwYjE4NGNiOWZiMmRjMB4XDTIyMDEw
MTA0NTI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM2YjAyNTZlZGRi
YzQ3ZjY3NDA5YWVlOTMyZmEzNjAzZDgyYzYwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHJOdq2mRJJSsSlpsUkEzY3IDI46/Bo2L85jztaEJizZCz2
d+SeWfRPbkAbtbFIIAZublVtU0mk3YCTVuXajOb0TPuTZoX64CmtQGEZY0F469Fs
9TIEIOruOiEKjV3oUtFgmpOU0gXsjFg4aWawDmieTe5B4zuon4q7sJgAD/N+OhqL
81E62hOvYVJ0g4viXiLqK/4N04XQxtIDmERbq21pkZKrV8HM2Ic406WuMLMIOxr1
2UGvt6Cf6AvJGnS8VzII6PWPmIRr8qNjnEmLFQwpa/R+PW2OAlnvxksvDfGbwl3Y
oKWS8EXHA10dP/qypbz8mbER4eUfZOei9bGb2v8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQDawJW7dvEf2dAmu6TL6NgPYLGBjAfBgNVHSMEGDAWgBSSQyeLqm2b1OQ2
cQThoLGEy5+y3DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2trTW5pNnB0bTlUa05uRUU0YUN4aE11ZnN0dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvMzBlN2NmLWI0YjgtNDI3Mi04N2FiLTRjMmZiZGQ1NjI3OS8x
L0Eyc0NWdTNieEg5blFKcnVreS1qWUQyQ3hnWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
MzBlN2NmLWI0YjgtNDI3Mi04N2FiLTRjMmZiZGQ1NjI3OS8xL2trTW5pNnB0bTlU
a05uRUU0YUN4aE11ZnN0dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHDTANBgkqhkiG9w0BAQsFAAOC
AQEAOWZ3kPRr8Ir0r66/cKqSbatGQIS/tELo2B0xv+nccELVu9RAMBYUFE+XHOID
HhV3J4vRSr0eKMQzabDahFcp3IOMNyQRfMVymFvqvxXPMRHDX1/OEOQRH/dMNORm
ViQRseVT2DH5650spN1E1AZYBODonr/cI6jaLDjxKpcCZUVlSlbMGdLOMYPsek9l
yJ+W+racsItSffx5AAJQeBqqlTVf95vd0wqBpgDEglMux3QwxA8pIMBi/z/ts52v
4ujWVs1qzTKrifMXRL8hAby5sjOtiyY63imQeRHHmaR5tpkBQTaAsO65JNASaROw
epVdZkYMH6jSQxqmCLz/yYnBoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:04 2024 by rpki-client on console-ams.rpki-client.org