Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/dtsppSPud1KopElQrhoK5VIwt0s.roa
File: dtsppSPud1KopElQrhoK5VIwt0s.roa (raw, json)
Hash identifier: jiL30Ol9o71VkXR7gXu/dQIzlp91A21SnJKeOzbAqz0=
Subject key identifier: 76:DB:29:A5:23:EE:77:52:A8:A4:49:50:AE:1A:0A:E5:52:30:B7:4B
Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Certificate serial: 0189AB
Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/dtsppSPud1KopElQrhoK5VIwt0s.roa
Signing time: Tue 12 Apr 2022 12:12:57 +0000
ROA not before: Tue 12 Apr 2022 12:12:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48242
IP address blocks: 91.207.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100779 (0x189ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Validity
Not Before: Apr 12 12:12:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76db29a523ee7752a8a44950ae1a0ae55230b74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:1a:93:80:f4:6a:fa:1f:b5:1e:2a:aa:50:
9e:3a:93:4e:49:e8:08:ed:d0:65:0e:8d:2b:14:05:
41:0a:01:14:1d:e4:cc:71:33:26:d4:7c:07:ea:28:
32:be:2e:7c:ca:7f:1f:b3:54:5d:65:44:8b:8e:63:
d3:24:8e:87:f0:d2:55:69:8d:29:cc:fd:42:a3:04:
07:4d:72:ce:f1:6c:c0:51:e1:a1:d4:a2:44:86:99:
59:a9:e2:05:48:f6:ff:9b:01:0b:d8:b6:97:fc:20:
9a:c5:e5:a7:5d:b3:67:fa:2b:15:f6:0f:32:c7:47:
e6:a4:35:07:91:8f:44:d2:b5:90:9e:61:29:5a:3b:
29:73:a2:c3:8b:40:14:95:41:42:fa:0f:7b:22:cc:
79:8d:87:ee:6a:d9:c3:c0:4f:11:1f:48:03:af:e7:
b3:cb:3c:56:3f:ed:63:e8:2c:16:24:d1:9f:5f:d6:
53:81:0c:9d:8c:09:9c:5f:5c:f6:3f:a4:d4:b0:b5:
b7:86:8c:2b:d2:69:05:39:5b:3c:a9:fd:f8:4e:ca:
21:11:1c:f1:1e:7a:db:d9:49:ec:26:78:59:c9:34:
47:56:67:fb:71:4f:56:92:d2:a2:c8:86:11:5e:24:
41:53:60:c2:f5:cc:6e:1a:29:cb:83:06:3f:1f:76:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DB:29:A5:23:EE:77:52:A8:A4:49:50:AE:1A:0A:E5:52:30:B7:4B
X509v3 Authority Key Identifier:
keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/dtsppSPud1KopElQrhoK5VIwt0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.160.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:b8:7a:d5:07:e2:70:e7:b7:05:6a:5d:fb:d6:2d:82:8c:1d:
36:ed:b3:0c:1d:f3:ee:40:54:b6:9a:a5:d1:cf:29:f7:a4:87:
64:ab:f9:2a:28:1d:9e:62:2e:2f:32:7b:79:7b:02:0f:d7:c4:
83:f2:38:cd:b0:3a:53:e1:ab:d5:c8:fb:95:2f:23:be:5f:2f:
61:ea:1a:7f:16:e9:8f:f1:62:7e:db:da:1d:bd:2f:c3:2f:f6:
fd:6a:15:47:bd:37:c1:83:d3:7f:3b:d3:76:d7:68:f5:a8:be:
a5:20:c6:06:a1:94:ef:5a:93:fa:a5:a7:b2:d8:17:34:6f:b5:
df:f7:75:ed:4a:5a:f0:ad:03:c8:4c:0b:4e:ee:90:b9:d1:b0:
f5:2e:10:f3:95:2f:da:4b:f9:f4:78:c8:fe:27:e1:88:df:63:
4d:47:2a:23:66:98:dd:4f:dc:5d:24:08:d3:6c:8f:20:d7:a5:
22:87:c1:29:90:64:49:7d:09:33:f1:3a:30:87:a8:30:1e:98:
ca:b9:77:da:ac:ab:9b:ed:df:57:8d:be:ea:a3:83:a9:0f:6e:
3f:c9:7a:96:11:19:2b:4e:99:8e:25:d5:bb:15:cd:52:2a:ca:
64:ce:42:72:ee:80:3b:6f:e6:a3:3d:69:3f:46:a1:55:f1:9d:
9a:0f:c1:76
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAYmrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
N2NmYmNlMWQ2ZDNhNmEyNGYyNTY1MjA2NWQzMTU3NTgyOGVkYjUwHhcNMjIwNDEy
MTIxMjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3NmRiMjlhNTIzZWU3
NzUyYThhNDQ5NTBhZTFhMGFlNTUyMzBiNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuKsak4D0avoftR4qqlCeOpNOSegI7dBlDo0rFAVBCgEUHeTM
cTMm1HwH6igyvi58yn8fs1RdZUSLjmPTJI6H8NJVaY0pzP1CowQHTXLO8WzAUeGh
1KJEhplZqeIFSPb/mwEL2LaX/CCaxeWnXbNn+isV9g8yx0fmpDUHkY9E0rWQnmEp
Wjspc6LDi0AUlUFC+g97Isx5jYfuatnDwE8RH0gDr+ezyzxWP+1j6CwWJNGfX9ZT
gQydjAmcX1z2P6TUsLW3howr0mkFOVs8qf34TsohERzxHnrb2UnsJnhZyTRHVmf7
cU9WktKiyIYRXiRBU2DC9cxuGinLgwY/H3bLfwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHbbKaUj7ndSqKRJUK4aCuVSMLdLMB8GA1UdIwQYMBaAFK18+84dbTpqJPJW
UgZdMVdYKO21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
clh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lYS8xMTQzNDAtMmM3MC00MWZjLWFiZTctMmZhN2M5YjExMWIxLzEv
ZHRzcHBTUHVkMUtvcEVsUXJob0s1Vkl3dDBzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8x
MTQzNDAtMmM3MC00MWZjLWFiZTctMmZhN2M5YjExMWIxLzEvclh6N3poMXRPbW9r
OGxaU0JsMHhWMWdvN2JVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8+gMA0GCSqGSIb3DQEBCwUAA4IB
AQB7uHrVB+Jw57cFal371i2CjB027bMMHfPuQFS2mqXRzyn3pIdkq/kqKB2eYi4v
Mnt5ewIP18SD8jjNsDpT4avVyPuVLyO+Xy9h6hp/FumP8WJ+29odvS/DL/b9ahVH
vTfBg9N/O9N212j1qL6lIMYGoZTvWpP6paey2Bc0b7Xf93XtSlrwrQPITAtO7pC5
0bD1LhDzlS/aS/n0eMj+J+GI32NNRyojZpjdT9xdJAjTbI8g16Uih8EpkGRJfQkz
8Towh6gwHpjKuXfarKub7d9Xjb7qo4OpD24/yXqWERkrTpmOJdW7Fc1SKspkzkJy
7oA7b+ajPWk/RqFV8Z2aD8F2
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:53:44 2025 by rpki-client