Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/RVxAwFjMTkglSHwjQVuGaIZ58rI.roa
File: RVxAwFjMTkglSHwjQVuGaIZ58rI.roa (raw, json)
Hash identifier: 3YEBUQgR07S6xBJdiD7qBXjfWiTzvwwO0aXtm0t8bns=
Subject key identifier: 45:5C:40:C0:58:CC:4E:48:25:48:7C:23:41:5B:86:68:86:79:F2:B2
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 016C3A91
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/RVxAwFjMTkglSHwjQVuGaIZ58rI.roa
Signing time: Sat 01 Jan 2022 14:07:22 +0000
ROA not before: Sat 01 Jan 2022 14:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197663
IP address blocks: 91.240.52.0/24 maxlen: 24
91.240.55.0/24 maxlen: 24
91.240.54.0/24 maxlen: 24
91.240.53.0/24 maxlen: 24
195.47.243.0/24 maxlen: 24
193.35.111.0/24 maxlen: 24
91.225.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23870097 (0x16c3a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Jan 1 14:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=455c40c058cc4e4825487c23415b86688679f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:0a:1c:95:69:6b:c5:1f:09:0c:ad:37:55:
7f:dc:a9:86:37:f2:f0:09:a3:9c:e0:4f:18:98:f6:
07:1d:36:46:6e:4a:49:68:d0:59:43:f3:e5:72:15:
de:b0:19:a4:7e:86:6f:55:4a:b2:8f:23:11:7b:19:
87:ea:a1:83:e5:38:6f:42:8b:22:0f:d6:44:74:14:
50:a9:fd:77:48:5b:47:8d:dd:f5:f2:6e:e4:a3:6d:
46:c9:0c:eb:92:e0:cc:84:96:26:93:5a:e5:07:cd:
bd:61:be:f4:bc:80:c7:ef:02:66:b5:7d:58:35:23:
51:aa:87:29:77:76:9a:0e:28:9a:6c:e4:8e:43:28:
f5:07:32:66:11:df:cd:fb:b7:cb:05:fc:a2:3c:89:
c7:56:e4:52:12:75:f8:6d:76:a0:17:6f:4f:f7:56:
64:b8:ff:f2:1e:3c:31:72:b9:39:74:cc:56:bc:d9:
e3:9d:7f:9f:66:c4:38:a1:9b:30:9a:78:9d:3c:16:
6c:c6:81:bf:d0:48:3a:27:b4:ab:84:32:d1:2d:d8:
8f:66:45:da:a9:89:8c:92:e0:94:40:aa:8f:83:75:
b4:ec:02:55:8c:d8:49:e6:4b:77:40:02:53:fa:e2:
66:fe:bf:37:3e:0f:89:03:cb:8a:b4:c9:00:5f:e2:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:40:C0:58:CC:4E:48:25:48:7C:23:41:5B:86:68:86:79:F2:B2
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/RVxAwFjMTkglSHwjQVuGaIZ58rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.96.0/22
91.240.52.0/22
193.35.111.0/24
195.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4a:fa:aa:94:f1:f3:b9:87:3b:de:11:a7:60:93:d3:03:a9:
1e:03:b7:19:af:9a:4f:53:ea:54:dd:05:55:c5:78:ea:01:9f:
56:12:36:77:86:06:64:21:97:48:c3:0f:4f:99:27:97:dc:f3:
06:26:c4:d1:f8:08:79:41:51:ca:da:bf:06:0f:b7:55:47:65:
f1:40:fc:f7:0b:e7:8e:78:e4:b1:cb:62:8d:09:1e:e5:cb:37:
1b:59:b1:ca:46:e3:43:4d:58:d1:03:d0:4b:81:9d:2a:3a:f4:
9f:69:48:53:b5:60:35:21:55:10:0c:b2:57:6e:02:6b:db:d0:
28:67:14:e6:4c:55:33:73:8e:3c:71:c9:08:c5:f6:9f:bc:09:
d1:0f:75:ab:fa:93:db:a4:7e:3a:cf:e8:27:ef:ec:09:62:1c:
a0:d1:bc:3d:38:2c:fe:bf:c4:20:70:18:72:9f:8e:1b:12:44:
94:d2:b6:8b:90:b2:8d:21:44:ef:75:34:01:6e:9d:07:53:1d:
a5:b0:f3:54:eb:4a:7a:1a:5b:96:86:24:ad:1d:63:e4:dd:fc:
36:9e:8e:e7:b4:9e:d6:38:81:27:77:a8:85:7b:50:7b:b1:81:
3f:d5:41:b0:6b:92:9b:0c:9a:08:61:1c:4e:e4:51:6b:24:b5:
a3:9b:31:f2
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAWw6kTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YmYwYTg0ZmY4ZjUwNTdmOTQ5MWRlZmJlNmFkNTVlZWFlOThjYzA2MB4XDTIyMDEw
MTE0MDcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDU1YzQwYzA1OGNj
NGU0ODI1NDg3YzIzNDE1Yjg2Njg4Njc5ZjJiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJq1ChyVaWvFHwkMrTdVf9yphjfy8AmjnOBPGJj2Bx02Rm5K
SWjQWUPz5XIV3rAZpH6Gb1VKso8jEXsZh+qhg+U4b0KLIg/WRHQUUKn9d0hbR43d
9fJu5KNtRskM65LgzISWJpNa5QfNvWG+9LyAx+8CZrV9WDUjUaqHKXd2mg4ommzk
jkMo9QcyZhHfzfu3ywX8ojyJx1bkUhJ1+G12oBdvT/dWZLj/8h48MXK5OXTMVrzZ
451/n2bEOKGbMJp4nTwWbMaBv9BIOie0q4Qy0S3Yj2ZF2qmJjJLglECqj4N1tOwC
VYzYSeZLd0ACU/riZv6/Nz4PiQPLirTJAF/iGBsCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRFXEDAWMxOSCVIfCNBW4ZohnnysjAfBgNVHSMEGDAWgBSr8KhP+PUFf5SR
3vvmrVXurpjMBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FfQ29UX2oxQlgtVWtkNzc1cTFWN3E2WXpBWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvZjk4YmQ0LWRlMDctNDJjZC05ODQ4LTk0NGNhMWE4MGIxOC8x
L1JWeEF3RmpNVGtnbFNId2pRVnVHYUlaNThySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
Zjk4YmQ0LWRlMDctNDJjZC05ODQ4LTk0NGNhMWE4MGIxOC8xL3FfQ29UX2oxQlgt
VWtkNzc1cTFWN3E2WXpBWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAlvhYAMEAlvwNAMEAMEjbwMEAMMv
8zANBgkqhkiG9w0BAQsFAAOCAQEAGUr6qpTx87mHO94Rp2CT0wOpHgO3Ga+aT1Pq
VN0FVcV46gGfVhI2d4YGZCGXSMMPT5knl9zzBibE0fgIeUFRytq/Bg+3VUdl8UD8
9wvnjnjksctijQke5cs3G1mxykbjQ01Y0QPQS4GdKjr0n2lIU7VgNSFVEAyyV24C
a9vQKGcU5kxVM3OOPHHJCMX2n7wJ0Q91q/qT26R+Os/oJ+/sCWIcoNG8PTgs/r/E
IHAYcp+OGxJElNK2i5CyjSFE73U0AW6dB1MdpbDzVOtKehpbloYkrR1j5N38Np6O
57Se1jiBJ3eohXtQe7GBP9VBsGuSmwyaCGEcTuRRayS1o5sx8g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-fra.rpki-client.org