Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/PkTGOekTEtLNhdMlbAI73Cds75U.roa
File: PkTGOekTEtLNhdMlbAI73Cds75U.roa (raw, json)
Hash identifier: CmEPHYzPtGf0aNVm69V1hqIH40rcr7oGTOucT8JskxQ=
Subject key identifier: 3E:44:C6:39:E9:13:12:D2:CD:85:D3:25:6C:02:3B:DC:27:6C:EF:95
Certificate issuer: /CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Certificate serial: 058B4AAD
Authority key identifier: 39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/PkTGOekTEtLNhdMlbAI73Cds75U.roa
Signing time: Sat 01 Jan 2022 07:59:34 +0000
ROA not before: Sat 01 Jan 2022 07:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56693
IP address blocks: 91.226.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93014701 (0x58b4aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Validity
Not Before: Jan 1 07:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e44c639e91312d2cd85d3256c023bdc276cef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:85:67:f2:4b:50:c5:b1:cd:90:28:06:bb:
36:59:1e:75:5b:41:4a:83:ab:13:b4:0f:73:ca:56:
0e:2d:7e:2f:14:0e:5d:05:38:69:ac:59:c2:42:77:
e5:49:a2:21:d8:dc:25:65:a5:69:ca:11:79:79:a5:
36:1e:f8:c3:73:ab:99:1f:22:2b:c6:dd:87:c0:3d:
cf:18:46:a1:fa:7d:ef:6e:39:ca:04:f3:10:62:e5:
18:66:c4:fa:84:b2:b2:a7:e2:05:06:f1:a3:7b:bd:
4a:57:4e:44:7c:90:bd:d4:cb:9e:8c:43:3b:ff:99:
7d:18:59:b4:72:37:4f:99:b9:29:fd:7b:5d:b8:02:
70:0c:7d:42:fd:61:c8:18:7f:75:3c:e1:83:14:aa:
dd:31:81:5d:60:74:04:d1:19:55:31:3d:1a:b2:b6:
60:70:53:8e:b7:35:63:ad:5c:c4:a4:de:bd:8f:4f:
a8:c3:a3:23:01:d4:4f:eb:ce:75:fd:71:cf:1f:54:
c7:0c:27:43:9c:0d:e2:5d:1c:ba:7e:52:3e:85:b0:
9f:0c:46:4b:51:78:c6:c3:c3:dc:53:9c:c8:5d:8e:
5b:54:96:e5:94:8c:37:29:ea:d2:31:b2:29:ef:bb:
df:b6:31:5c:6b:9e:55:04:72:e6:2c:e2:a3:1b:c1:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:C6:39:E9:13:12:D2:CD:85:D3:25:6C:02:3B:DC:27:6C:EF:95
X509v3 Authority Key Identifier:
keyid:39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/PkTGOekTEtLNhdMlbAI73Cds75U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/Oc7y4t9bStoh5HNrALfrieTT6zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.182.0/23
Signature Algorithm: sha256WithRSAEncryption
15:60:83:5c:72:da:13:af:02:d4:5e:c8:e5:75:98:88:a7:d9:
7f:74:e1:98:12:bb:fc:14:81:ec:f7:9c:d2:16:c4:a8:39:15:
3e:20:3b:4f:13:76:cd:f8:44:18:cd:23:f2:97:b3:db:ab:86:
32:91:f6:e6:ca:64:f5:32:fb:64:e2:09:3b:37:44:c6:c2:c1:
cf:df:5f:89:d2:86:2a:1f:be:58:cb:a0:27:21:e9:3c:b7:4b:
e5:33:0e:63:c4:f2:eb:cf:6d:08:ff:0c:ab:65:cb:a2:44:64:
e9:68:4e:bd:bb:15:3f:be:89:ac:23:3b:19:ad:ab:25:cd:fc:
c1:72:c6:b0:f1:7f:96:9a:c8:45:f5:be:6f:cc:a5:96:55:19:
6e:6f:51:d5:ed:e0:98:b1:0d:f1:63:17:22:6c:dc:c5:24:0d:
4e:33:6b:f5:ec:e5:9e:e7:5a:ce:cb:37:67:33:b0:24:69:c7:
2e:66:7e:62:c7:80:65:23:3d:2d:62:aa:fa:e5:07:bf:27:2e:
b0:67:e2:b3:cf:c8:c6:9e:d4:20:f5:dc:ec:80:87:89:f8:7a:
40:e9:b1:df:db:3e:7e:27:10:5b:aa:74:91:33:8a:d3:2a:44:
7c:f9:16:26:86:3c:11:10:17:9c:f0:68:6e:99:16:ca:d5:4f:
b9:f9:00:05
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBYtKrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OWNlZjJlMmRmNWI0YWRhMjFlNDczNmIwMGI3ZWI4OWU0ZDNlYjM5MB4XDTIyMDEw
MTA3NTkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U0NGM2MzllOTEz
MTJkMmNkODVkMzI1NmMwMjNiZGMyNzZjZWY5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN9ChWfyS1DFsc2QKAa7NlkedVtBSoOrE7QPc8pWDi1+LxQO
XQU4aaxZwkJ35UmiIdjcJWWlacoReXmlNh74w3OrmR8iK8bdh8A9zxhGofp97245
ygTzEGLlGGbE+oSysqfiBQbxo3u9SldORHyQvdTLnoxDO/+ZfRhZtHI3T5m5Kf17
XbgCcAx9Qv1hyBh/dTzhgxSq3TGBXWB0BNEZVTE9GrK2YHBTjrc1Y61cxKTevY9P
qMOjIwHUT+vOdf1xzx9UxwwnQ5wN4l0cun5SPoWwnwxGS1F4xsPD3FOcyF2OW1SW
5ZSMNynq0jGyKe+737YxXGueVQRy5izioxvByZ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ+RMY56RMS0s2F0yVsAjvcJ2zvlTAfBgNVHSMEGDAWgBQ5zvLi31tK2iHk
c2sAt+uJ5NPrOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09jN3k0dDliU3RvaDVITnJBTGZyaWVUVDZ6ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvNGIxYjQ5LWJiN2EtNGE2ZS1iYTljLWYyMjRkZTYwYjQ5Yi8x
L1BrVEdPZWtURXRMTmhkTWxiQUk3M0Nkczc1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
NGIxYjQ5LWJiN2EtNGE2ZS1iYTljLWYyMjRkZTYwYjQ5Yi8xL09jN3k0dDliU3Rv
aDVITnJBTGZyaWVUVDZ6ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvitjANBgkqhkiG9w0BAQsFAAOC
AQEAFWCDXHLaE68C1F7I5XWYiKfZf3ThmBK7/BSB7Pec0hbEqDkVPiA7TxN2zfhE
GM0j8pez26uGMpH25spk9TL7ZOIJOzdExsLBz99fidKGKh++WMugJyHpPLdL5TMO
Y8Ty689tCP8Mq2XLokRk6WhOvbsVP76JrCM7Ga2rJc38wXLGsPF/lprIRfW+b8yl
llUZbm9R1e3gmLEN8WMXImzcxSQNTjNr9ezlnudazss3ZzOwJGnHLmZ+YseAZSM9
LWKq+uUHvycusGfis8/Ixp7UIPXc7ICHifh6QOmx39s+ficQW6p0kTOK0ypEfPkW
JoY8ERAXnPBobpkWytVPufkABQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:25 2024 by rpki-client on console-ams.rpki-client.org