Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SHqng7xNlRHODsH_OSa2gTWoE5c.roa
File: SHqng7xNlRHODsH_OSa2gTWoE5c.roa (raw, json)
Hash identifier: r4PydUNO2pWMYnn0pYEMCdJhCHrX+cVT5TbbvLMs0Sc=
Subject key identifier: 48:7A:A7:83:BC:4D:95:11:CE:0E:C1:FF:39:26:B6:81:35:A8:13:97
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0B79CDF5
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SHqng7xNlRHODsH_OSa2gTWoE5c.roa
Signing time: Tue 15 Mar 2022 12:35:53 +0000
ROA not before: Tue 15 Mar 2022 12:35:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42295
IP address blocks: 91.229.132.0/24 maxlen: 24
91.229.133.0/24 maxlen: 24
91.229.135.0/24 maxlen: 24
91.229.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192531957 (0xb79cdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 15 12:35:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=487aa783bc4d9511ce0ec1ff3926b68135a81397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:4b:14:e0:9a:7f:96:c5:fc:ac:49:6a:12:
37:c5:ee:e2:a9:32:3d:f6:13:0e:42:d1:0c:99:f1:
7c:70:ea:22:12:d3:53:a4:ee:e6:43:58:c5:b1:98:
d2:b4:b9:25:91:2c:84:a6:5d:c2:59:d7:8d:d5:f1:
b9:39:0a:33:13:04:b6:b6:ee:f5:9a:8e:bc:44:b0:
9b:5e:c9:e8:38:0a:f6:06:92:6a:ef:87:af:45:a1:
89:05:1f:f8:9c:f1:a3:26:6f:89:c0:de:4d:03:ee:
47:59:48:3e:2b:09:e3:fa:03:14:6e:7d:35:9d:47:
e3:30:e3:0c:00:f5:f6:7c:21:91:da:62:52:7e:65:
b0:ba:a7:8f:d0:3f:87:18:ab:28:e8:36:80:16:eb:
37:b7:59:cc:b5:4e:d1:7a:0c:82:07:ba:23:4c:6e:
4f:88:d8:90:c1:27:76:19:76:b1:d8:2f:e1:02:65:
b0:ab:68:18:1e:a8:ae:d6:90:40:62:48:86:d7:69:
c7:88:ce:4d:11:d6:29:20:40:2d:b8:61:44:d9:7a:
79:ea:7a:03:31:03:84:ef:d2:30:7a:4e:40:06:da:
6b:c7:4a:1a:19:c5:7a:3b:6f:e3:2a:54:f4:a6:a2:
06:99:26:c7:b0:d1:31:e8:60:18:31:2f:6e:f6:e4:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:A7:83:BC:4D:95:11:CE:0E:C1:FF:39:26:B6:81:35:A8:13:97
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SHqng7xNlRHODsH_OSa2gTWoE5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:88:49:c9:15:27:92:09:88:2f:07:ce:02:fa:59:23:25:05:
0c:c0:f9:d6:06:4d:11:6a:f1:4a:a2:1c:17:9f:da:33:9d:37:
48:03:c2:79:21:e1:cb:6e:4e:e2:d3:93:35:d6:53:55:9b:b8:
af:cc:a7:55:2d:48:e1:87:9b:cc:12:1c:78:02:83:ec:82:4b:
cf:16:4e:31:e8:7f:8f:aa:42:76:28:10:ad:23:77:2a:1d:92:
6c:a0:b5:06:ec:c5:b5:4f:c0:17:05:c1:c2:44:fc:ad:fe:42:
6b:2c:de:a1:dd:9d:b1:1d:7f:7d:95:9c:be:82:7e:9f:15:d4:
59:bc:8f:4c:29:34:65:be:24:85:71:83:6f:1b:8f:42:91:a4:
f3:37:89:55:1c:bd:11:77:4f:a8:30:98:8f:7b:03:9f:c6:1b:
75:34:ae:e7:43:a1:96:3d:e8:bf:ea:56:6e:1c:90:e1:01:6a:
95:b4:0a:81:66:50:b8:a2:17:bc:b2:f2:95:e4:c8:2c:d4:4a:
fa:0b:3c:46:cc:60:f4:5b:eb:49:22:83:8c:c6:00:be:67:93:
df:39:f8:24:09:db:e7:81:1d:98:7d:89:8a:6a:df:28:d7:ad:
0e:2c:86:a5:4f:95:06:0e:cf:42:1e:e9:19:d4:ce:13:bd:65:
74:06:29:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC3nN9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDMx
NTEyMzU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg3YWE3ODNiYzRk
OTUxMWNlMGVjMWZmMzkyNmI2ODEzNWE4MTM5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyrSxTgmn+WxfysSWoSN8Xu4qkyPfYTDkLRDJnxfHDqIhLT
U6Tu5kNYxbGY0rS5JZEshKZdwlnXjdXxuTkKMxMEtrbu9ZqOvESwm17J6DgK9gaS
au+Hr0WhiQUf+JzxoyZvicDeTQPuR1lIPisJ4/oDFG59NZ1H4zDjDAD19nwhkdpi
Un5lsLqnj9A/hxirKOg2gBbrN7dZzLVO0XoMgge6I0xuT4jYkMEndhl2sdgv4QJl
sKtoGB6ortaQQGJIhtdpx4jOTRHWKSBALbhhRNl6eep6AzEDhO/SMHpOQAbaa8dK
GhnFejtv4ypU9KaiBpkmx7DRMehgGDEvbvbkmY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRIeqeDvE2VEc4Owf85JraBNagTlzAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
L1NIcW5nN3hObFJIT0RzSF9PU2EyZ1RXb0U1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VE
VGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvlhDANBgkqhkiG9w0BAQsFAAOC
AQEA0IhJyRUnkgmILwfOAvpZIyUFDMD51gZNEWrxSqIcF5/aM503SAPCeSHhy25O
4tOTNdZTVZu4r8ynVS1I4YebzBIceAKD7IJLzxZOMeh/j6pCdigQrSN3Kh2SbKC1
BuzFtU/AFwXBwkT8rf5Cayzeod2dsR1/fZWcvoJ+nxXUWbyPTCk0Zb4khXGDbxuP
QpGk8zeJVRy9EXdPqDCYj3sDn8YbdTSu50Ohlj3ov+pWbhyQ4QFqlbQKgWZQuKIX
vLLyleTILNRK+gs8Rsxg9FvrSSKDjMYAvmeT3zn4JAnb54EdmH2JimrfKNetDiyG
pU+VBg7PQh7pGdTOE71ldAYpGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org