Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mCTSk2VpL1zbGCgPfcMgViHa_PA.roa
File: mCTSk2VpL1zbGCgPfcMgViHa_PA.roa (raw, json)
Hash identifier: WIuZdnVi5P7JHHyRvcmXX9FLYSSIMIg/RfwKyLbTzKI=
Subject key identifier: 98:24:D2:93:65:69:2F:5C:DB:18:28:0F:7D:C3:20:56:21:DA:FC:F0
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 02B13FCE
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mCTSk2VpL1zbGCgPfcMgViHa_PA.roa
Signing time: Tue 26 Apr 2022 10:11:30 +0000
ROA not before: Tue 26 Apr 2022 10:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48810
IP address blocks: 91.238.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45170638 (0x2b13fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 26 10:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9824d29365692f5cdb18280f7dc3205621dafcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:5f:64:61:50:ea:9c:f0:57:b6:a6:3e:a5:
09:00:6f:d8:0d:10:b6:d6:4a:86:54:2c:4a:b9:65:
0c:b6:99:80:14:dd:1b:5f:27:4e:19:e4:d4:c6:d7:
03:eb:58:78:b0:ae:3b:e9:fc:60:4c:90:0b:98:1f:
dc:1e:c0:26:69:18:fa:ed:f4:2c:c3:83:c0:06:1f:
0b:80:dc:43:c0:73:7e:45:c5:4d:08:03:11:ae:2d:
61:ee:76:ab:01:f5:bf:bf:82:01:21:1d:ed:07:22:
ba:12:84:bc:2d:ba:b0:35:72:18:9a:4e:e3:80:dd:
ba:84:78:51:a6:23:0f:c2:6c:23:dd:34:ee:63:0b:
26:b2:54:73:84:fb:e7:91:1f:bf:e8:15:59:42:d7:
8c:bf:63:eb:7f:13:bb:12:fe:43:c4:46:1f:5b:af:
5c:39:b0:4b:4d:c4:cf:54:ea:a1:af:9e:21:23:eb:
90:28:64:1d:fa:f2:5b:c7:64:6c:fd:f8:73:6f:14:
49:c7:37:6b:80:5d:c4:ff:98:76:ff:14:2b:d3:e3:
a0:d2:16:a1:f2:79:f6:07:07:63:05:33:eb:06:e6:
51:91:ad:dc:32:a5:a0:7d:3e:4c:17:1e:2a:2b:0c:
4b:5b:38:50:47:cc:aa:a1:ef:c3:b4:a8:39:a0:bc:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:D2:93:65:69:2F:5C:DB:18:28:0F:7D:C3:20:56:21:DA:FC:F0
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mCTSk2VpL1zbGCgPfcMgViHa_PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.37.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d2:12:ac:ed:59:8b:09:8c:b7:03:af:39:99:2f:41:06:63:
88:d6:bf:f6:85:dc:37:c6:45:6c:52:49:0d:63:3c:82:ba:79:
81:e2:e7:da:48:da:97:51:7d:76:78:e6:03:7f:9d:88:23:73:
ff:35:fe:5b:42:8e:85:51:ca:02:98:9a:0b:33:fd:c1:e9:81:
4d:bc:0c:64:29:71:43:66:48:ca:50:8d:47:f3:84:04:73:bb:
22:e6:c4:3b:c9:2f:ad:c5:fd:b6:33:1d:49:40:07:ef:d6:da:
e2:ca:5b:a4:00:4e:a2:d8:9a:8d:06:a5:80:cc:8b:43:f7:66:
a2:7a:cd:09:6a:2e:38:8c:ad:2f:a6:b8:56:42:90:18:5f:92:
ac:a2:f6:f9:10:af:67:03:00:e3:b0:1e:f6:6e:2b:71:6e:9e:
29:97:0c:45:58:37:ee:5f:aa:2f:07:8c:df:e9:ed:5f:ad:01:
59:75:85:0b:04:1e:db:ed:5a:92:24:b4:82:46:71:fd:23:24:
ea:0f:34:97:6d:23:20:5e:c2:97:cb:18:a4:e7:72:fb:4d:80:
b8:50:a6:80:39:e0:30:45:06:6f:c5:80:40:46:e4:23:51:90:
42:ec:08:1b:6e:a9:7d:c1:6b:d7:94:c9:3e:56:9d:e8:27:11:
fa:20:4d:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEArE/zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDRkYjc2MjMyNDFkN2U2Njc4ZmMyNTc1MWZhNGUwYjY2NjUxODZiMB4XDTIyMDQy
NjEwMTEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgyNGQyOTM2NTY5
MmY1Y2RiMTgyODBmN2RjMzIwNTYyMWRhZmNmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIdhX2RhUOqc8Fe2pj6lCQBv2A0QttZKhlQsSrllDLaZgBTd
G18nThnk1MbXA+tYeLCuO+n8YEyQC5gf3B7AJmkY+u30LMODwAYfC4DcQ8BzfkXF
TQgDEa4tYe52qwH1v7+CASEd7QciuhKEvC26sDVyGJpO44DduoR4UaYjD8JsI900
7mMLJrJUc4T755Efv+gVWULXjL9j638TuxL+Q8RGH1uvXDmwS03Ez1Tqoa+eISPr
kChkHfryW8dkbP34c28UScc3a4BdxP+Ydv8UK9PjoNIWofJ59gcHYwUz6wbmUZGt
3DKloH0+TBceKisMS1s4UEfMqqHvw7SoOaC8p2UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYJNKTZWkvXNsYKA99wyBWIdr88DAfBgNVHSMEGDAWgBTATbdiMkHX5meP
wldR+k4LZmUYazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dFMjNZakpCMS1abmo4SlhVZnBPQzJabEdHcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvNmU4NzRlLTczZmUtNGRiYi1iNzRjLTA0MjNmMjYzZjJjYi8x
L21DVFNrMlZwTDF6YkdDZ1BmY01nVmlIYV9QQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
NmU4NzRlLTczZmUtNGRiYi1iNzRjLTA0MjNmMjYzZjJjYi8xL3dFMjNZakpCMS1a
bmo4SlhVZnBPQzJabEdHcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvuJTANBgkqhkiG9w0BAQsFAAOC
AQEAMdISrO1ZiwmMtwOvOZkvQQZjiNa/9oXcN8ZFbFJJDWM8grp5geLn2kjal1F9
dnjmA3+diCNz/zX+W0KOhVHKApiaCzP9wemBTbwMZClxQ2ZIylCNR/OEBHO7IubE
O8kvrcX9tjMdSUAH79ba4spbpABOotiajQalgMyLQ/dmonrNCWouOIytL6a4VkKQ
GF+SrKL2+RCvZwMA47Ae9m4rcW6eKZcMRVg37l+qLweM3+ntX60BWXWFCwQe2+1a
kiS0gkZx/SMk6g80l20jIF7Cl8sYpOdy+02AuFCmgDngMEUGb8WAQEbkI1GQQuwI
G26pfcFr15TJPlad6CcR+iBNgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:59 2024 by rpki-client on console-ams.rpki-client.org