Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/1-HtEhppCsPnP1G04cMGLAJ_YMRE.roa
File: 1-HtEhppCsPnP1G04cMGLAJ_YMRE.roa (raw, json)
Hash identifier: h2ewks12eEV5V0ai0vns+hqbJS4mAX+gsA8u6gJPsKA=
Subject key identifier: F8:7B:44:86:9A:42:B0:F9:CF:D4:6D:38:70:C1:8B:00:9F:D8:31:11
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0184A9FC95CD44A28C07153496FD77657C60
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/1-HtEhppCsPnP1G04cMGLAJ_YMRE.roa
Signing time: Thu 24 Nov 2022 14:13:33 +0000
ROA not before: Thu 24 Nov 2022 14:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34376
IP address blocks: 91.199.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:fc:95:cd:44:a2:8c:07:15:34:96:fd:77:65:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Nov 24 14:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f87b44869a42b0f9cfd46d3870c18b009fd83111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:2b:24:67:78:c2:24:38:70:07:aa:49:cf:
bc:98:f5:0a:9b:a3:6f:bc:d6:13:8f:ba:35:bc:a9:
c4:6f:a8:db:be:c2:69:6e:7f:56:42:28:d3:25:c2:
a4:c8:ca:9e:d2:b9:b4:51:23:64:34:1f:90:21:e6:
1b:a6:91:09:06:19:18:dc:1e:47:31:5d:db:5e:eb:
c1:34:8a:c2:e6:93:42:7f:b9:5c:bb:08:d5:d9:8e:
35:7b:e8:52:45:39:a7:0f:61:5e:4f:c0:c0:52:9d:
bb:59:c5:4f:5e:13:11:7f:40:59:49:e4:f7:5d:0a:
0c:66:e6:79:41:e8:cc:f7:a2:af:28:1d:61:4b:94:
ad:44:ed:ad:ec:f4:9e:62:e7:b4:31:10:ae:88:cc:
1d:3d:b8:b8:a2:f2:93:e8:80:24:dc:6a:62:58:a8:
8a:4a:48:5c:de:cc:e9:7f:df:77:c6:06:9a:1a:ec:
8b:56:f9:4f:92:02:08:4d:ae:c3:97:2b:c5:63:a3:
e0:b0:47:3e:26:92:f1:34:52:54:30:2b:b1:a3:ea:
09:4a:4b:00:3f:4a:04:c8:cb:7c:fb:cd:78:84:c9:
b5:ff:05:b9:45:03:60:53:75:b9:a4:2d:c7:5c:a2:
9d:6e:a1:3e:20:3d:60:14:d6:09:85:89:08:95:6c:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:44:86:9A:42:B0:F9:CF:D4:6D:38:70:C1:8B:00:9F:D8:31:11
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/1-HtEhppCsPnP1G04cMGLAJ_YMRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.128.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2f:fa:bc:27:21:ea:5f:c3:7f:11:3f:2d:e2:77:56:8e:77:
c7:76:61:11:a8:3f:4d:13:f2:64:5e:09:9b:ce:06:cd:96:38:
51:a1:ea:5d:e8:d7:ae:df:cb:51:cf:3c:0f:17:fe:bb:7a:e5:
00:c2:72:e3:40:6d:11:83:f0:76:c4:52:f6:a1:1f:30:3a:77:
7b:b6:6e:a4:c6:71:ae:bd:09:29:f0:f1:bd:25:1a:a4:b1:1d:
d0:c4:5c:4b:cb:0e:16:0c:ef:13:3d:d9:09:77:2b:7b:38:d5:
fe:0e:54:d9:a3:62:06:1f:bb:db:07:52:0b:21:c8:6c:c3:6b:
e7:7b:f1:10:fd:78:a4:f6:45:73:e1:d0:11:92:d4:1e:7e:39:
ba:2f:ea:ff:d5:4b:2e:c9:0e:aa:bf:73:fb:af:f9:1e:b6:f9:
f1:0b:c3:7d:88:fa:ff:e6:0d:de:82:fc:e1:b9:0d:43:98:70:
67:80:8d:86:7e:15:05:63:1b:62:89:d8:e0:e8:36:29:b7:23:
ed:04:48:dc:37:79:ac:df:8c:11:08:f6:aa:ca:74:eb:d8:14:
3f:40:58:d1:e2:df:3f:4e:5f:53:62:da:34:fa:68:16:2b:5f:
ce:ec:65:f9:90:8e:ab:43:16:80:05:32:09:d3:dc:32:5d:29:
aa:37:b5:1c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSp/JXNRKKMBxU0lv13ZXxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx
YzFkNTAwHhcNMjIxMTI0MTQxMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODdiNDQ4NjlhNDJiMGY5Y2ZkNDZkMzg3MGMxOGIwMDlmZDgzMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw4rJGd4wiQ4cAeqSc+8mPUKm6Nv
vNYTj7o1vKnEb6jbvsJpbn9WQijTJcKkyMqe0rm0USNkNB+QIeYbppEJBhkY3B5H
MV3bXuvBNIrC5pNCf7lcuwjV2Y41e+hSRTmnD2FeT8DAUp27WcVPXhMRf0BZSeT3
XQoMZuZ5QejM96KvKB1hS5StRO2t7PSeYue0MRCuiMwdPbi4ovKT6IAk3GpiWKiK
Skhc3szpf993xgaaGuyLVvlPkgIITa7DlyvFY6PgsEc+JpLxNFJUMCuxo+oJSksA
P0oEyMt8+814hMm1/wW5RQNgU3W5pC3HXKKdbqE+ID1gFNYJhYkIlWxNRwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPh7RIaaQrD5z9RtOHDBiwCf2DERMB8GA1UdIwQY
MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt
ZmRlYmJjOTI3ZDQwLzEvMS1IdEVocHBDc1BuUDFHMDRjTUdMQUpfWU1SRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2MvM2RmMGI2LTQ3YzktNDBmZS04MzU4LWZkZWJiYzkyN2Q0
MC8xL3I0VzdpbEJFUGxCTVNGUE00Q1h2V0RRY0hWQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHgDAN
BgkqhkiG9w0BAQsFAAOCAQEACC/6vCch6l/DfxE/LeJ3Vo53x3ZhEag/TRPyZF4J
m84GzZY4UaHqXejXrt/LUc88Dxf+u3rlAMJy40BtEYPwdsRS9qEfMDp3e7ZupMZx
rr0JKfDxvSUapLEd0MRcS8sOFgzvEz3ZCXcrezjV/g5U2aNiBh+72wdSCyHIbMNr
53vxEP14pPZFc+HQEZLUHn45ui/q/9VLLskOqr9z+6/5Hrb58QvDfYj6/+YN3oL8
4bkNQ5hwZ4CNhn4VBWMbYonY4Og2Kbcj7QRI3Dd5rN+MEQj2qsp069gUP0BY0eLf
P05fU2LaNPpoFitfzuxl+ZCOq0MWgAUyCdPcMl0pqje1HA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org