Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/00IQlWeA8iOgOzsffHPhKhc3_wM.roa
File: 00IQlWeA8iOgOzsffHPhKhc3_wM.roa (raw, json)
Hash identifier: IAaD01lvUIQ7LioZRvkNHHCqGjxYtPpVRJCCMHLKRyE=
Subject key identifier: D3:42:10:95:67:80:F2:23:A0:3B:3B:1F:7C:73:E1:2A:17:37:FF:03
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 01857127840D00F19E4E9820DF73F80689B2
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/00IQlWeA8iOgOzsffHPhKhc3_wM.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47760
IP address blocks: 91.208.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:84:0d:00:f1:9e:4e:98:20:df:73:f8:06:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34210956780f223a03b3b1f7c73e12a1737ff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:cd:44:e8:f6:32:c0:3d:32:ce:3e:48:d0:
a5:44:87:ba:58:79:58:da:f4:d6:1c:54:7a:8a:70:
89:40:05:19:84:e4:98:7b:0e:4c:ea:58:87:1c:d4:
d5:ed:64:38:eb:e6:04:a7:b3:9e:58:e1:da:40:00:
d2:92:7a:4b:cf:72:48:38:79:c8:84:7c:c0:83:ad:
4b:98:66:54:cc:1c:54:49:fe:70:7d:e7:ff:12:70:
ab:82:03:ca:06:da:7a:b2:c2:32:ba:72:a5:c3:2b:
98:21:bb:15:69:fc:24:c2:cf:3a:0f:16:1c:e0:4f:
58:d1:d9:2a:56:3b:02:d9:4d:8c:fc:aa:fe:f4:4e:
b1:c2:ae:15:6c:df:53:04:0d:65:99:88:ca:ee:7a:
15:48:00:55:28:6c:56:0c:c2:f4:a1:b5:5e:28:c0:
fa:62:f7:16:d2:6b:4f:46:77:b9:f9:0d:7b:c6:91:
10:da:75:a7:7d:1f:12:a3:af:f3:cb:91:a1:52:32:
e3:53:99:32:87:90:f1:d3:f0:72:00:84:39:6d:9d:
bd:b1:1d:a3:66:36:09:c1:2c:64:53:2f:5c:b6:ec:
8f:77:bf:cd:67:7a:f0:5b:79:be:a7:ee:95:f7:61:
1e:4b:9f:a5:2c:52:25:da:2f:79:07:7f:23:85:ed:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:10:95:67:80:F2:23:A0:3B:3B:1F:7C:73:E1:2A:17:37:FF:03
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/00IQlWeA8iOgOzsffHPhKhc3_wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.96.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2e:de:a0:c6:c6:6d:4d:b7:7e:36:9a:cb:57:8c:f1:ec:1f:
52:f9:a3:80:6b:6f:49:4f:48:d5:7a:90:66:3c:9d:f4:69:f2:
89:56:d0:32:ff:d0:00:8c:7f:38:97:ff:50:b7:2c:23:82:6b:
ea:53:b8:26:e8:45:5c:1b:22:1f:a9:e6:85:a5:bf:77:f5:f1:
d3:02:ad:d0:73:db:6f:a7:a2:b1:2a:57:9a:7f:65:1e:b6:1c:
90:ff:d0:09:7b:80:d7:a9:5b:1d:39:96:63:57:60:7b:15:4e:
26:93:5d:45:ee:e7:17:5b:a2:40:ba:b2:27:7d:2c:f8:21:8c:
77:b7:31:9e:a3:4f:5d:ff:19:ce:26:c6:e8:92:20:69:22:66:
02:41:59:b8:09:73:34:98:04:c1:e3:6f:8f:ba:fc:c1:db:15:
d6:37:b3:2a:f1:08:94:e4:4c:d4:30:1b:b3:65:9e:57:42:af:
40:13:76:49:b2:72:8d:84:d2:42:7d:de:dd:3e:a0:6e:18:6b:
68:95:7e:63:43:bd:a0:6f:7a:ef:05:bc:10:ed:f8:55:dd:b0:
54:c4:db:58:75:8a:3c:a1:c8:f9:e6:51:b0:1f:c1:98:b8:e4:
ce:04:80:53:4c:08:de:eb:1c:be:0a:01:43:18:28:0d:bb:05:
36:ab:79:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ4QNAPGeTpgg33P4BomyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjJmNjUzOTc4MWM1MGJjNDk3YzdhMGI2ZjVkNTA1ZWY4
OGI5ZDYwHhcNMjMwMTAyMDYyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQyMTA5NTY3ODBmMjIzYTAzYjNiMWY3YzczZTEyYTE3MzdmZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydXNROj2MsA9Ms4+SNClRIe6WHlY
2vTWHFR6inCJQAUZhOSYew5M6liHHNTV7WQ46+YEp7OeWOHaQADSknpLz3JIOHnI
hHzAg61LmGZUzBxUSf5wfef/EnCrggPKBtp6ssIyunKlwyuYIbsVafwkws86DxYc
4E9Y0dkqVjsC2U2M/Kr+9E6xwq4VbN9TBA1lmYjK7noVSABVKGxWDML0obVeKMD6
YvcW0mtPRne5+Q17xpEQ2nWnfR8So6/zy5GhUjLjU5kyh5Dx0/ByAIQ5bZ29sR2j
ZjYJwSxkUy9ctuyPd7/NZ3rwW3m+p+6V92EeS5+lLFIl2i95B38jhe3IIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNCEJVngPIjoDs7H3xz4SoXN/8DMB8GA1UdIwQY
MBaAFOYi9lOXgcULxJfHoLb11QXviLnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEt
Njk4ZTZhOGU2NzA4LzEvMDBJUWxXZUE4aU9nT3pzZmZIUGhLaGMzX3dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEtNjk4ZTZhOGU2NzA4
LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BgMA0G
CSqGSIb3DQEBCwUAA4IBAQAZLt6gxsZtTbd+NprLV4zx7B9S+aOAa29JT0jVepBm
PJ30afKJVtAy/9AAjH84l/9QtywjgmvqU7gm6EVcGyIfqeaFpb939fHTAq3Qc9tv
p6KxKleaf2UethyQ/9AJe4DXqVsdOZZjV2B7FU4mk11F7ucXW6JAurInfSz4IYx3
tzGeo09d/xnOJsbokiBpImYCQVm4CXM0mATB42+PuvzB2xXWN7Mq8QiU5EzUMBuz
ZZ5XQq9AE3ZJsnKNhNJCfd7dPqBuGGtolX5jQ72gb3rvBbwQ7fhV3bBUxNtYdYo8
ocj55lGwH8GYuOTOBIBTTAje6xy+CgFDGCgNuwU2q3lz
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:11:36 2025 by rpki-client