Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/dvgewXSj3OLziO953xfavP_zhBs.roa
File: dvgewXSj3OLziO953xfavP_zhBs.roa (raw, json)
Hash identifier: 6PbXdDl8DBFp1lqwTa6ujPM9LaOKRQ3vjQxLBroRo7s=
Subject key identifier: 76:F8:1E:C1:74:A3:DC:E2:F3:88:EF:79:DF:17:DA:BC:FF:F3:84:1B
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 01BA3E
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/dvgewXSj3OLziO953xfavP_zhBs.roa
Signing time: Fri 01 Apr 2022 08:04:44 +0000
ROA not before: Fri 01 Apr 2022 08:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15870
IP address blocks: 91.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113214 (0x1ba3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Apr 1 08:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76f81ec174a3dce2f388ef79df17dabcfff3841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:e6:80:d0:52:6e:67:f8:72:12:06:79:d6:
5e:c1:38:6d:e9:8b:f8:9b:0b:02:3c:f9:d0:40:8d:
5b:69:89:86:03:56:e6:1a:94:ef:36:57:0f:f5:f3:
f7:b6:2f:df:80:d8:ec:d9:a4:54:d3:bd:3e:a4:96:
18:2b:ee:b6:6d:9a:e4:99:f8:c4:78:43:a7:90:84:
cf:1d:44:27:53:90:31:bd:1a:53:34:c0:81:bb:40:
89:57:f4:d9:64:5c:4e:88:52:50:7d:68:2d:22:d2:
9c:85:f2:08:77:79:a9:9c:bf:32:bd:40:fa:ab:cb:
60:42:29:c4:2d:f0:f3:54:a0:b5:39:a7:ff:0f:a9:
a4:16:53:37:92:aa:18:82:50:b2:e4:4e:1c:82:4d:
bb:01:ae:fe:41:d2:4e:c2:c2:bf:aa:1e:af:8a:8c:
6d:ed:54:43:f4:3d:8f:a7:33:a1:fa:42:43:d8:76:
3b:bb:42:19:c1:27:58:e8:68:52:72:85:56:15:4b:
c2:95:97:c7:b0:07:5c:ec:c5:dd:da:45:aa:f0:84:
e7:17:2c:df:86:6f:b2:54:21:c6:01:4a:84:da:08:
7a:b3:3f:5f:42:54:04:53:60:2d:f1:3d:3e:94:a6:
ca:d9:56:38:50:e8:aa:85:1f:b2:fc:6c:fc:d6:b2:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:1E:C1:74:A3:DC:E2:F3:88:EF:79:DF:17:DA:BC:FF:F3:84:1B
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/dvgewXSj3OLziO953xfavP_zhBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.46.0/24
Signature Algorithm: sha256WithRSAEncryption
06:26:ed:47:4b:ac:d7:d3:77:8b:7f:3a:b2:a9:cd:a4:ee:14:
a0:d8:43:77:f2:4f:a6:83:12:e7:b9:56:92:a6:0e:e9:c7:bc:
51:3b:7e:cd:a9:4c:07:cc:9a:10:43:4a:fb:0b:5a:7b:a3:c8:
b5:56:80:52:b4:2d:39:0c:8f:80:2e:1c:a2:91:12:89:28:a4:
21:1a:4f:b9:76:fc:a2:fe:d9:90:ec:8c:14:65:0a:84:bc:24:
76:c2:93:ba:30:d9:ab:a0:68:ed:09:17:a4:80:33:ca:f4:30:
1b:f1:74:d7:03:88:44:83:36:58:be:30:a6:1c:cd:10:be:c0:
73:53:2a:61:9e:1e:46:56:e8:ec:04:9f:5d:a0:7b:ea:7e:df:
bf:d0:de:43:6a:7d:b0:42:ce:ab:93:2e:fa:d2:7e:28:1b:14:
f3:6b:a4:e8:8f:f7:32:8d:aa:89:13:06:df:f6:b9:e4:f2:14:
6b:75:0d:58:d1:a0:13:07:1b:9a:08:a9:ad:c6:c4:ed:c0:0d:
2a:57:bf:46:2c:c9:35:a6:7b:db:44:43:a0:b7:29:9c:43:6d:
34:b5:20:04:9c:0e:7d:20:a6:70:e5:46:fa:db:03:6b:36:e3:
c5:4b:eb:af:1c:7a:f1:9d:5c:6e:3f:d0:48:f3:cc:ef:98:55:
90:d4:70:78
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAbo+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcz
ODBjNzU5ZjU1OGY5YzZiZTg4ZGQyMjZhNDM5ZDk5YzllYWNmMGMwHhcNMjIwNDAx
MDgwNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3NmY4MWVjMTc0YTNk
Y2UyZjM4OGVmNzlkZjE3ZGFiY2ZmZjM4NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvELmgNBSbmf4chIGedZewTht6Yv4mwsCPPnQQI1baYmGA1bm
GpTvNlcP9fP3ti/fgNjs2aRU070+pJYYK+62bZrkmfjEeEOnkITPHUQnU5AxvRpT
NMCBu0CJV/TZZFxOiFJQfWgtItKchfIId3mpnL8yvUD6q8tgQinELfDzVKC1Oaf/
D6mkFlM3kqoYglCy5E4cgk27Aa7+QdJOwsK/qh6vioxt7VRD9D2PpzOh+kJD2HY7
u0IZwSdY6GhScoVWFUvClZfHsAdc7MXd2kWq8ITnFyzfhm+yVCHGAUqE2gh6sz9f
QlQEU2At8T0+lKbK2VY4UOiqhR+y/Gz81rIduwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHb4HsF0o9zi84jved8X2rz/84QbMB8GA1UdIwQYMBaAFHOAx1n1WPnGvojd
ImpDnZnJ6s8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YzRESFdmVlktY2EtaU4waWFrT2RtY25xend3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lMi9iODAwMDAtMDYwOS00ODhmLWEzNGEtMmNhNjI2Y2ZlZDQ1LzEv
ZHZnZXdYU2ozT0x6aU85NTN4ZmF2UF96aEJzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9i
ODAwMDAtMDYwOS00ODhmLWEzNGEtMmNhNjI2Y2ZlZDQ1LzEvYzRESFdmVlktY2Et
aU4waWFrT2RtY25xend3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9guMA0GCSqGSIb3DQEBCwUAA4IB
AQAGJu1HS6zX03eLfzqyqc2k7hSg2EN38k+mgxLnuVaSpg7px7xRO37NqUwHzJoQ
Q0r7C1p7o8i1VoBStC05DI+ALhyikRKJKKQhGk+5dvyi/tmQ7IwUZQqEvCR2wpO6
MNmroGjtCRekgDPK9DAb8XTXA4hEgzZYvjCmHM0QvsBzUyphnh5GVujsBJ9doHvq
ft+/0N5Dan2wQs6rky760n4oGxTza6Toj/cyjaqJEwbf9rnk8hRrdQ1Y0aATBxua
CKmtxsTtwA0qV79GLMk1pnvbREOgtymcQ200tSAEnA59IKZw5Ub62wNrNuPFS+uv
HHrxnVxuP9BI88zvmFWQ1HB4
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-fra.rpki-client.org