Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bXe9SVD9P-oO4jwlvVTP9twCxxM.roa
File: bXe9SVD9P-oO4jwlvVTP9twCxxM.roa (raw, json)
Hash identifier: CgxKXnWrlIuKFgFmrcmu+/Jx9lHYmWhmowcOoW9GPFU=
Subject key identifier: 6D:77:BD:49:50:FD:3F:EA:0E:E2:3C:25:BD:54:CF:F6:DC:02:C7:13
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 0182EE7C09A456F166798EB5D18234F75CEB
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bXe9SVD9P-oO4jwlvVTP9twCxxM.roa
Signing time: Tue 30 Aug 2022 11:21:22 +0000
ROA not before: Tue 30 Aug 2022 11:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48609
IP address blocks: 91.209.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:7c:09:a4:56:f1:66:79:8e:b5:d1:82:34:f7:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Aug 30 11:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d77bd4950fd3fea0ee23c25bd54cff6dc02c713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:fa:3f:47:41:4d:c4:0d:31:ba:21:4a:7c:
44:4b:4b:f0:3d:72:1d:0a:cf:8b:07:80:2f:b4:b0:
a8:99:6d:47:61:b2:39:ff:32:39:40:c0:dc:3e:45:
b5:80:1f:ed:aa:3d:f6:cf:85:dc:a3:9a:75:38:a7:
3a:08:8e:39:94:df:2c:c7:82:4b:9a:b4:50:3e:dc:
48:55:db:68:cb:00:02:b5:c7:d2:69:4f:b0:4e:4c:
7f:f2:a7:c0:3c:c7:0d:e2:2a:8e:73:c3:2a:8c:eb:
85:8d:ee:2e:cc:64:8a:db:96:24:b3:42:7f:2f:43:
fb:39:89:e5:af:7f:78:22:4f:e8:56:d5:a9:16:24:
01:45:e3:bf:52:db:82:21:8a:1e:c2:5b:f1:37:8d:
63:92:25:7e:4d:a3:16:61:56:0a:e7:c0:08:fa:d7:
41:e8:11:ee:d2:fa:8a:de:8a:0f:d4:e1:6a:00:1f:
47:4c:bc:f2:bc:e2:22:35:36:f5:01:a1:dc:b9:38:
d5:86:90:30:4c:2e:bb:53:ec:71:f9:3f:45:06:e4:
0f:0c:db:a7:d1:01:a8:33:69:72:2e:82:2d:0c:a2:
e0:d0:e1:a2:11:30:60:61:36:92:e2:f6:90:74:be:
0b:8a:85:ee:e7:c8:e7:ef:48:8c:26:77:a2:40:11:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:BD:49:50:FD:3F:EA:0E:E2:3C:25:BD:54:CF:F6:DC:02:C7:13
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bXe9SVD9P-oO4jwlvVTP9twCxxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:62:44:9b:ca:2d:5e:8e:64:fd:6c:43:1d:80:f0:c9:95:
61:2c:85:41:d1:6f:15:42:e5:4d:d0:34:d9:9e:4f:6c:74:db:
77:b5:50:93:bd:f2:aa:b0:92:be:a8:27:16:ab:dd:9b:fc:15:
0c:dc:51:67:91:76:5b:e5:7f:74:3b:82:f3:a2:9f:bc:ba:87:
e8:25:2f:42:f3:6b:40:d6:26:04:4e:c0:71:c5:15:2b:6b:39:
9e:f3:9b:b4:28:17:b1:6e:17:ea:89:4c:c8:fe:17:a9:7f:f6:
21:f5:a2:2f:b4:8c:6f:6f:44:c2:cd:7f:99:37:dc:e5:64:c8:
ab:94:65:5f:30:28:e1:bc:b6:9d:71:73:58:00:07:55:48:87:
e6:2a:47:7a:29:fd:a5:79:2b:2c:c3:06:32:95:17:ad:a5:37:
16:a5:ba:83:0d:84:73:be:05:48:92:ed:ca:b0:fd:35:9a:f5:
f2:7a:88:7e:78:2d:6a:6c:25:8f:89:d4:8e:f4:ca:73:c4:8a:
e1:e1:9d:8f:52:12:cb:3e:1e:53:5d:77:bd:f5:47:de:d7:34:
1a:1e:8b:d5:3a:73:c2:fa:a2:a6:41:68:6c:7f:34:8f:a9:2c:
6e:3a:47:10:01:a1:f3:00:45:72:70:03:a8:de:be:d4:f5:b4:
64:69:63:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLufAmkVvFmeY610YI091zrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWU2ZTFkNjZmYzA0N2UwZTg5ZmYwNDVjMmQwOGNhMTdk
NTVlYTUwHhcNMjIwODMwMTEyMTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDc3YmQ0OTUwZmQzZmVhMGVlMjNjMjViZDU0Y2ZmNmRjMDJjNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA76P0dBTcQNMbohSnxES0vwPXId
Cs+LB4AvtLComW1HYbI5/zI5QMDcPkW1gB/tqj32z4Xco5p1OKc6CI45lN8sx4JL
mrRQPtxIVdtoywACtcfSaU+wTkx/8qfAPMcN4iqOc8MqjOuFje4uzGSK25Yks0J/
L0P7OYnlr394Ik/oVtWpFiQBReO/UtuCIYoewlvxN41jkiV+TaMWYVYK58AI+tdB
6BHu0vqK3ooP1OFqAB9HTLzyvOIiNTb1AaHcuTjVhpAwTC67U+xx+T9FBuQPDNun
0QGoM2lyLoItDKLg0OGiETBgYTaS4vaQdL4LioXu58jn70iMJneiQBFeAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG13vUlQ/T/qDuI8Jb1Uz/bcAscTMB8GA1UdIwQY
MBaAFDRebh1m/AR+Don/BFwtCMoX1V6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTct
ZGRkNzNkNTA5ZTEyLzEvYlhlOVNWRDlQLW9PNGp3bHZWVFA5dHdDeHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTctZGRkNzNkNTA5ZTEy
LzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HPMA0G
CSqGSIb3DQEBCwUAA4IBAQA2H2JEm8otXo5k/WxDHYDwyZVhLIVB0W8VQuVN0DTZ
nk9sdNt3tVCTvfKqsJK+qCcWq92b/BUM3FFnkXZb5X90O4Lzop+8uofoJS9C82tA
1iYETsBxxRUrazme85u0KBexbhfqiUzI/hepf/Yh9aIvtIxvb0TCzX+ZN9zlZMir
lGVfMCjhvLadcXNYAAdVSIfmKkd6Kf2leSsswwYylRetpTcWpbqDDYRzvgVIku3K
sP01mvXyeoh+eC1qbCWPidSO9MpzxIrh4Z2PUhLLPh5TXXe99Ufe1zQaHovVOnPC
+qKmQWhsfzSPqSxuOkcQAaHzAEVycAOo3r7U9bRkaWPg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org