Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AOFce4F9Rs-7hOYOxzFeBa2vXfI.roa
File: AOFce4F9Rs-7hOYOxzFeBa2vXfI.roa (raw, json)
Hash identifier: hkxC5kh/o2y6r637nt5WS7OJSlrevN7DtKtR4LkJS5Q=
Subject key identifier: 00:E1:5C:7B:81:7D:46:CF:BB:84:E6:0E:C7:31:5E:05:AD:AF:5D:F2
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 01000953
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AOFce4F9Rs-7hOYOxzFeBa2vXfI.roa
Signing time: Sat 01 Jan 2022 06:54:37 +0000
ROA not before: Sat 01 Jan 2022 06:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24776
IP address blocks: 91.213.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16779603 (0x1000953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Jan 1 06:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00e15c7b817d46cfbb84e60ec7315e05adaf5df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:bc:a8:c4:32:cf:44:bc:b5:cc:e8:85:ab:
f3:34:89:6e:ea:49:54:c3:73:f2:a8:0f:fa:56:94:
d3:2a:ed:c8:33:e4:ea:aa:a1:de:12:5b:37:97:78:
3a:78:b2:1a:64:c8:28:e1:66:f1:29:44:bc:cb:e1:
c8:43:d7:69:34:61:77:65:33:cf:8d:30:74:55:cd:
6a:d1:b2:48:73:2e:54:d0:aa:b8:c0:98:62:11:49:
46:59:1a:37:e7:a2:82:b1:5a:b3:66:98:59:b1:ae:
51:3d:b2:f7:83:04:72:ef:fe:aa:be:d1:fd:b6:cc:
3b:45:66:6d:94:d0:c2:ec:d5:06:f2:91:62:ed:62:
fc:65:4a:f0:1c:e7:ed:4c:b4:80:d7:b3:00:60:58:
a0:31:32:f1:c9:31:08:bd:ce:a4:bc:6c:2b:9c:f9:
69:3f:15:b0:8f:d7:07:19:cc:23:2a:49:bc:6d:a4:
66:8c:24:84:4d:47:fd:7f:56:f1:e3:cb:32:c7:63:
a8:2e:d2:4e:6f:bc:43:cd:b3:04:40:d4:93:53:87:
76:69:ef:17:9d:f8:cd:25:bc:11:bf:f8:28:65:bc:
48:7f:6e:bd:f7:54:bf:cf:3a:50:28:fc:50:a3:a7:
e6:bb:2a:e4:e0:a4:30:01:a5:f9:ec:75:82:8b:6c:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:5C:7B:81:7D:46:CF:BB:84:E6:0E:C7:31:5E:05:AD:AF:5D:F2
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AOFce4F9Rs-7hOYOxzFeBa2vXfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f9:b5:89:38:8e:84:fa:70:ff:90:a9:d5:cc:7a:bc:16:a1:
5f:8a:3c:69:4e:7e:5e:03:a2:09:11:1d:85:cc:cd:17:3d:70:
62:ea:94:ee:47:22:5b:5a:ad:4b:8b:05:5a:16:09:a5:2d:5e:
c3:00:e0:e3:f7:18:f5:f5:fc:74:7d:87:1d:6c:43:cf:4e:51:
3f:39:39:b0:0b:6c:e6:8d:b8:d3:cd:1b:04:04:b6:ef:0d:7d:
17:d7:25:c1:ff:ff:5c:b4:d2:99:4a:54:e9:ec:4a:23:de:0e:
8f:2e:28:a3:0f:7f:29:a7:8d:c8:55:f7:fe:6d:db:5f:1a:02:
4b:d1:a1:0b:0a:91:ae:29:a8:c9:2f:4d:d0:b7:81:fa:1c:2a:
c2:99:db:81:db:e3:7d:9b:cb:c2:9d:f2:75:33:ea:db:27:b8:
63:2f:78:13:84:3a:a5:d9:d4:5c:59:ca:f9:b4:38:6e:99:e2:
5e:30:6b:e0:df:7b:45:19:88:af:af:39:ae:fb:ea:13:23:18:
89:3c:de:81:70:10:e8:d4:5d:de:f0:e0:6f:34:0b:5c:24:b7:
10:e0:6e:f0:9b:1c:d6:09:de:4f:6b:36:68:c6:ea:b7:83:68:
8d:c4:91:63:bb:82:24:87:9f:40:67:8c:fd:85:02:ac:52:01:
a0:00:f2:6f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQAJUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MWMzNTIxMThmZDVmNzU0NTRjZmM2MWJlNjFhNDJhYmVmNGRjNGY4MB4XDTIyMDEw
MTA2NTQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBlMTVjN2I4MTdk
NDZjZmJiODRlNjBlYzczMTVlMDVhZGFmNWRmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOJYvKjEMs9EvLXM6IWr8zSJbupJVMNz8qgP+laU0yrtyDPk
6qqh3hJbN5d4OniyGmTIKOFm8SlEvMvhyEPXaTRhd2Uzz40wdFXNatGySHMuVNCq
uMCYYhFJRlkaN+eigrFas2aYWbGuUT2y94MEcu/+qr7R/bbMO0VmbZTQwuzVBvKR
Yu1i/GVK8Bzn7Uy0gNezAGBYoDEy8ckxCL3OpLxsK5z5aT8VsI/XBxnMIypJvG2k
ZowkhE1H/X9W8ePLMsdjqC7STm+8Q82zBEDUk1OHdmnvF534zSW8Eb/4KGW8SH9u
vfdUv886UCj8UKOn5rsq5OCkMAGl+ex1gotswTECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQA4Vx7gX1Gz7uE5g7HMV4Fra9d8jAfBgNVHSMEGDAWgBQBw1IRj9X3VFTP
xhvmGkKr703E+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FjTlNFWV9WOTFSVXo4WWI1aHBDcS05TnhQZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvNWU4YTJhLTQ1NzMtNDM2Yi05MDJhLWVmMDFlMWRjN2RhYy8x
L0FPRmNlNEY5UnMtN2hPWU94ekZlQmEydlhmSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
NWU4YTJhLTQ1NzMtNDM2Yi05MDJhLWVmMDFlMWRjN2RhYy8xL0FjTlNFWV9WOTFS
VXo4WWI1aHBDcS05TnhQZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvVKTANBgkqhkiG9w0BAQsFAAOC
AQEASvm1iTiOhPpw/5Cp1cx6vBahX4o8aU5+XgOiCREdhczNFz1wYuqU7kciW1qt
S4sFWhYJpS1ewwDg4/cY9fX8dH2HHWxDz05RPzk5sAts5o24080bBAS27w19F9cl
wf//XLTSmUpU6exKI94Ojy4oow9/KaeNyFX3/m3bXxoCS9GhCwqRrimoyS9N0LeB
+hwqwpnbgdvjfZvLwp3ydTPq2ye4Yy94E4Q6pdnUXFnK+bQ4bpniXjBr4N97RRmI
r685rvvqEyMYiTzegXAQ6NRd3vDgbzQLXCS3EOBu8Jsc1gneT2s2aMbqt4NojcSR
Y7uCJIefQGeM/YUCrFIBoADybw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:00 2024 by rpki-client on console-ams.rpki-client.org