Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/djRYmTUsvT6fWhZ06dPvzpmcGiQ.roa
File: djRYmTUsvT6fWhZ06dPvzpmcGiQ.roa (raw, json)
Hash identifier: 7bR5YuQyvpCEFcRTut3HnL2XKPzwfkNCk+p58oukBlc=
Subject key identifier: 76:34:58:99:35:2C:BD:3E:9F:5A:16:74:E9:D3:EF:CE:99:9C:1A:24
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 0189928A588C6EF49C5579A4BC979671140B
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/djRYmTUsvT6fWhZ06dPvzpmcGiQ.roa
Signing time: Wed 26 Jul 2023 14:11:27 +0000
ROA not before: Wed 26 Jul 2023 14:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35680
IP address blocks: 91.228.218.0/24 maxlen: 24
194.143.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:8a:58:8c:6e:f4:9c:55:79:a4:bc:97:96:71:14:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jul 26 14:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76345899352cbd3e9f5a1674e9d3efce999c1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:fa:d0:99:17:09:8a:63:38:28:27:63:2a:
7b:d2:56:c9:4d:ab:73:d7:2b:80:d2:c8:75:d8:94:
a0:a2:8f:d3:7e:33:b0:8b:da:ad:61:d1:fd:79:be:
52:6e:7c:50:7e:1e:a3:f0:be:b0:d7:44:01:04:e2:
c2:27:8b:6f:39:f8:b9:57:de:14:8b:e8:36:0c:4b:
00:48:75:d4:9c:eb:16:de:ab:77:fe:97:9a:60:b9:
2c:39:9a:13:7a:8e:2b:54:0c:54:83:c3:62:84:f2:
18:91:1e:6c:53:cf:f7:50:ee:a5:fe:a1:4a:7d:1e:
dd:0f:e5:a7:81:5f:bd:2c:7f:59:d6:eb:ae:d1:8f:
e5:75:c4:9b:ff:01:f3:c2:f4:57:a6:40:03:fa:ff:
d1:10:aa:66:42:34:60:cc:9d:af:68:43:9b:3a:55:
a7:a4:b8:6e:b6:12:da:a0:73:6a:26:09:a1:e5:de:
f1:71:1e:eb:de:70:c5:03:bb:a7:83:f4:af:14:cf:
e2:4a:99:ee:06:96:c7:81:74:02:a4:91:14:88:20:
87:fa:c9:4e:3e:6e:97:03:58:6a:53:e3:93:01:93:
45:dd:62:f3:e0:85:27:39:11:b8:91:9d:1a:98:61:
af:dd:b8:7f:0c:5e:72:4a:31:9d:91:0d:51:c8:7e:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:58:99:35:2C:BD:3E:9F:5A:16:74:E9:D3:EF:CE:99:9C:1A:24
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/djRYmTUsvT6fWhZ06dPvzpmcGiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.218.0/24
194.143.146.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cd:d0:65:80:16:1e:ac:80:20:8e:41:6d:09:a7:ac:c3:b3:
e5:f0:cd:66:aa:0f:ce:1f:64:44:cd:66:a7:24:1e:3d:68:e1:
43:e7:0f:91:43:a1:39:33:db:12:34:05:00:65:41:69:fa:a9:
89:24:96:a6:42:72:4a:b6:d4:d7:b6:e2:d2:20:1d:90:b7:45:
55:6b:e6:f1:fb:41:a6:5a:47:7d:20:d0:c6:b7:18:eb:28:df:
4c:c1:69:f5:fc:87:a9:9c:6d:0f:eb:63:08:27:02:98:bd:1f:
a8:99:63:c0:e8:44:cc:0d:f6:a1:5d:0a:67:c6:fa:95:c8:36:
4a:1d:09:c2:e3:be:d5:ee:99:9a:56:63:97:9b:48:90:91:66:
f5:da:ba:19:87:79:29:2a:0b:af:75:76:c3:68:d4:a3:c9:ed:
bf:9b:74:59:4f:e1:2f:7f:cf:4c:80:d0:cd:d6:cc:4b:0d:c9:
fb:57:8c:16:a3:60:a4:e6:6e:d2:c3:53:fd:92:02:16:ec:fc:
da:66:b7:a4:1b:55:c1:61:1e:63:e1:61:df:06:9a:0e:7c:10:
9c:0e:ff:eb:4b:5e:31:31:8e:7b:c4:b6:a9:a1:1c:fe:0e:92:
c4:14:9a:b7:45:14:86:0d:f3:48:be:2e:93:91:ce:db:de:7d:
5e:80:16:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmSiliMbvScVXmkvJeWcRQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjMwNzI2MTQxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjM0NTg5OTM1MmNiZDNlOWY1YTE2NzRlOWQzZWZjZTk5OWMxYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24r60JkXCYpjOCgnYyp70lbJTatz
1yuA0sh12JSgoo/TfjOwi9qtYdH9eb5SbnxQfh6j8L6w10QBBOLCJ4tvOfi5V94U
i+g2DEsASHXUnOsW3qt3/peaYLksOZoTeo4rVAxUg8NihPIYkR5sU8/3UO6l/qFK
fR7dD+WngV+9LH9Z1uuu0Y/ldcSb/wHzwvRXpkAD+v/REKpmQjRgzJ2vaEObOlWn
pLhuthLaoHNqJgmh5d7xcR7r3nDFA7ung/SvFM/iSpnuBpbHgXQCpJEUiCCH+slO
Pm6XA1hqU+OTAZNF3WLz4IUnORG4kZ0amGGv3bh/DF5ySjGdkQ1RyH710QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHY0WJk1LL0+n1oWdOnT786ZnBokMB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvZGpSWW1UVXN2VDZmV2haMDZkUHZ6cG1jR2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+TaAwQA
wo+SMA0GCSqGSIb3DQEBCwUAA4IBAQA1zdBlgBYerIAgjkFtCaesw7Pl8M1mqg/O
H2REzWanJB49aOFD5w+RQ6E5M9sSNAUAZUFp+qmJJJamQnJKttTXtuLSIB2Qt0VV
a+bx+0GmWkd9INDGtxjrKN9MwWn1/IepnG0P62MIJwKYvR+omWPA6ETMDfahXQpn
xvqVyDZKHQnC477V7pmaVmOXm0iQkWb12roZh3kpKguvdXbDaNSjye2/m3RZT+Ev
f89MgNDN1sxLDcn7V4wWo2Ck5m7Sw1P9kgIW7PzaZrekG1XBYR5j4WHfBpoOfBCc
Dv/rS14xMY57xLapoRz+DpLEFJq3RRSGDfNIvi6Tkc7b3n1egBZJ
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:21 2025 by rpki-client