Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/RkBWxFVpAf1KlSJsXMu77JxOJHM.roa
File: RkBWxFVpAf1KlSJsXMu77JxOJHM.roa (raw, json)
Hash identifier: GDkZzMlUiR69O84ysdJTcjrVsxdyaG4s59TOaay4US8=
Subject key identifier: 46:40:56:C4:55:69:01:FD:4A:95:22:6C:5C:CB:BB:EC:9C:4E:24:73
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01833CD7C15D00CB38D3DA19E56A00C1F415
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/RkBWxFVpAf1KlSJsXMu77JxOJHM.roa
Signing time: Wed 14 Sep 2022 16:31:56 +0000
ROA not before: Wed 14 Sep 2022 16:31:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 91.92.35.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:d7:c1:5d:00:cb:38:d3:da:19:e5:6a:00:c1:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 14 16:31:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=464056c4556901fd4a95226c5ccbbbec9c4e2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:84:92:7b:b2:d2:9d:9a:24:63:be:a1:65:
a5:1a:46:39:4d:90:c3:e3:54:5c:1a:02:46:f0:de:
e3:c8:9e:03:9a:40:fd:b6:e6:43:e6:c8:9a:d9:9d:
57:14:66:ab:f3:a2:58:ac:cd:e6:b6:e7:e5:b7:ff:
c3:9a:91:ef:0e:db:8a:4d:1f:13:db:67:e4:54:54:
48:7c:6c:86:07:99:e4:8a:c6:27:d9:0c:7e:57:62:
f5:92:ec:0e:27:51:ed:7b:3a:9d:cf:5b:6c:8b:df:
45:3b:7c:00:87:31:58:3f:10:aa:b3:21:21:e8:2a:
d2:7d:5e:0b:d8:af:d2:f6:08:cf:64:6a:f6:f5:8a:
d1:ed:ca:ba:8d:a9:19:0f:90:9b:4a:90:8d:98:e8:
50:52:1e:86:16:6c:34:18:c7:8a:79:00:10:3f:d7:
c2:52:2b:bf:5a:a8:b4:56:31:e8:56:d3:12:5f:bd:
88:91:e0:42:51:a2:0b:be:1c:67:c1:74:2c:14:91:
4f:4c:8a:4c:73:76:7b:67:fe:14:e6:ca:c8:b4:b2:
72:74:e8:19:04:86:9d:d8:2d:81:9a:5e:77:20:53:
86:69:33:5b:95:30:22:0c:ee:a2:d0:37:ec:d4:0f:
dd:c1:c3:f8:2e:7d:33:af:26:fd:7d:02:47:b0:a2:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:56:C4:55:69:01:FD:4A:95:22:6C:5C:CB:BB:EC:9C:4E:24:73
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/RkBWxFVpAf1KlSJsXMu77JxOJHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.35.0/24
93.152.215.0/24
93.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b7:e3:ac:74:40:cf:c5:40:76:0f:eb:4f:00:a5:e5:85:ec:
5f:e9:2a:98:bb:c9:15:1b:53:ae:50:dc:f8:ec:b2:74:0f:bd:
ea:cb:1a:8f:27:e1:7d:3b:e8:e5:71:f9:34:28:1a:2a:64:67:
d2:cb:56:3f:0a:91:2e:9c:f6:fd:79:4a:51:dd:07:00:65:02:
67:3f:cb:82:a8:0a:4a:48:3e:7d:e4:4c:58:2a:9b:d8:e3:e2:
c8:a8:94:ef:e8:aa:46:99:5a:02:fe:83:cf:02:58:32:16:03:
ee:c0:d2:6c:f7:eb:95:81:0f:6b:c9:95:7d:66:1e:ad:b0:d6:
8c:59:49:0b:b6:f7:a9:7e:a8:54:e2:a3:b8:db:3b:cc:17:08:
d2:f4:c1:6b:68:66:86:d9:14:61:3a:85:b4:03:91:14:86:46:
da:7a:35:71:90:db:f6:03:20:7e:51:93:ee:f5:61:37:d0:46:
3c:a1:29:8a:6a:ac:5f:2e:88:61:63:2c:da:5c:c7:d8:c4:98:
79:8c:20:ab:ed:b0:5e:eb:d5:cf:79:46:e5:4d:bf:b2:0b:21:
2f:41:35:4c:02:89:b8:18:92:b5:84:12:fe:f6:95:e6:3c:cb:
40:df:cd:01:01:84:09:fd:ee:82:20:5c:0f:84:72:65:0e:3b:
50:99:20:a9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYM818FdAMs409oZ5WoAwfQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjIwOTE0MTYzMTU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQwNTZjNDU1NjkwMWZkNGE5NTIyNmM1Y2NiYmJlYzljNGUyNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9GEknuy0p2aJGO+oWWlGkY5TZDD
41RcGgJG8N7jyJ4DmkD9tuZD5sia2Z1XFGar86JYrM3mtuflt//DmpHvDtuKTR8T
22fkVFRIfGyGB5nkisYn2Qx+V2L1kuwOJ1Htezqdz1tsi99FO3wAhzFYPxCqsyEh
6CrSfV4L2K/S9gjPZGr29YrR7cq6jakZD5CbSpCNmOhQUh6GFmw0GMeKeQAQP9fC
Uiu/Wqi0VjHoVtMSX72IkeBCUaILvhxnwXQsFJFPTIpMc3Z7Z/4U5srItLJydOgZ
BIad2C2Bml53IFOGaTNblTAiDO6i0Dfs1A/dwcP4Ln0zryb9fQJHsKIjUwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEZAVsRVaQH9SpUibFzLu+ycTiRzMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvUmtCV3hGVnBBZjFLbFNKc1hNdTc3SnhPSkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW1wjAwQA
XZjXAwQAXZjgMA0GCSqGSIb3DQEBCwUAA4IBAQB3t+OsdEDPxUB2D+tPAKXlhexf
6SqYu8kVG1OuUNz47LJ0D73qyxqPJ+F9O+jlcfk0KBoqZGfSy1Y/CpEunPb9eUpR
3QcAZQJnP8uCqApKSD595ExYKpvY4+LIqJTv6KpGmVoC/oPPAlgyFgPuwNJs9+uV
gQ9ryZV9Zh6tsNaMWUkLtvepfqhU4qO42zvMFwjS9MFraGaG2RRhOoW0A5EUhkba
ejVxkNv2AyB+UZPu9WE30EY8oSmKaqxfLohhYyzaXMfYxJh5jCCr7bBe69XPeUbl
Tb+yCyEvQTVMAom4GJK1hBL+9pXmPMtA380BAYQJ/e6CIFwPhHJlDjtQmSCp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org