Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/l_Kzkc9NXYHWkh2DYUK2H6dwgXU.roa
File: l_Kzkc9NXYHWkh2DYUK2H6dwgXU.roa (raw, json)
Hash identifier: OeoXdpyant6+XrO+Rw5Eq1nyrw+Do9WD7skINA3xDcE=
Subject key identifier: 97:F2:B3:91:CF:4D:5D:81:D6:92:1D:83:61:42:B6:1F:A7:70:81:75
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 01856D01B0795AD22A9A28A5432E56C0A676
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/l_Kzkc9NXYHWkh2DYUK2H6dwgXU.roa
Signing time: Sun 01 Jan 2023 11:05:05 +0000
ROA not before: Sun 01 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 91.198.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b0:79:5a:d2:2a:9a:28:a5:43:2e:56:c0:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jan 1 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f2b391cf4d5d81d6921d836142b61fa7708175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:fe:1c:1f:fc:cb:18:a7:3f:f9:d5:83:b6:
a2:f6:e4:f9:83:31:c1:e2:90:83:42:d1:57:3a:3a:
1a:7c:98:f9:bb:76:c7:b6:b1:2a:1d:53:80:24:4b:
01:32:3f:c4:a5:4e:d5:ef:2f:c1:a3:77:18:d7:b2:
e2:44:33:71:00:43:01:32:76:f2:15:7b:69:4d:e1:
c3:64:28:d8:b4:6e:84:36:5a:2c:c8:38:da:69:fb:
5f:3a:95:d1:c3:a4:67:13:18:21:a8:19:19:e9:4a:
de:d4:ba:1b:24:56:e7:a5:4a:cf:e5:98:4e:fb:fc:
57:b7:05:dc:2c:23:68:71:24:77:6a:6a:4d:56:21:
30:34:94:0c:e5:cf:b2:c4:47:23:fd:6d:fa:75:ee:
4c:4d:48:5f:c1:19:0c:b6:9c:08:78:97:f8:66:85:
da:e2:90:4f:a8:6d:74:36:ad:e9:fc:ff:f5:7a:9a:
2f:e6:3a:33:2f:9e:e8:93:2b:f8:94:9a:b5:81:6f:
01:7a:e8:49:89:a1:14:ba:4d:0f:c7:13:35:e8:97:
4c:36:85:9e:64:d4:01:ea:01:d6:52:1a:95:39:52:
95:24:d8:16:cb:e7:10:04:e5:0e:b8:89:48:5d:93:
e3:81:7b:40:df:9f:87:cd:ba:e0:92:97:f9:9b:15:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:B3:91:CF:4D:5D:81:D6:92:1D:83:61:42:B6:1F:A7:70:81:75
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/l_Kzkc9NXYHWkh2DYUK2H6dwgXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:03:27:d2:c2:c7:8f:4b:73:47:96:f8:4b:bb:f3:1f:cc:68:
39:b2:04:b2:aa:5f:7e:be:ca:e6:80:2f:60:96:6e:2a:67:08:
da:fd:25:4f:c6:92:08:83:c6:8e:9b:37:7a:2c:13:9a:aa:2f:
81:33:b6:c1:be:1b:33:dd:86:81:ac:28:05:c7:fe:65:9c:60:
d2:1f:8a:2e:d1:cd:4f:8b:9d:c4:7d:32:c1:7b:d5:a3:27:d1:
09:18:07:a6:6f:a6:47:42:84:58:84:ef:4c:7a:bb:98:fb:c6:
16:a7:d1:ed:ad:e8:47:ef:30:42:eb:12:d3:c6:4b:bd:c6:28:
9f:28:10:4f:b2:de:18:0b:86:d7:a2:2c:ce:ae:85:d6:71:11:
32:46:c1:3f:a3:c3:c3:2a:c7:76:f3:73:e4:09:0a:88:b0:04:
77:fd:13:61:9d:79:d3:f5:c9:6e:d1:9d:14:55:4d:5a:c2:90:
ba:68:d9:9e:e6:b7:37:54:b7:a3:84:40:6e:94:55:6e:85:92:
9b:f7:bd:4f:d0:74:df:b5:00:a6:62:ff:95:b9:69:91:1e:14:
72:54:6e:25:cf:64:a9:df:2c:a7:3b:71:f7:e3:d0:f4:ff:1e:
cb:fc:4c:fd:57:fb:e0:5e:11:16:d8:ce:29:e9:c2:f2:fd:91:
49:1c:9d:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAbB5WtIqmiilQy5WwKZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw
YTVmZDQwHhcNMjMwMTAxMTEwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2YyYjM5MWNmNGQ1ZDgxZDY5MjFkODM2MTQyYjYxZmE3NzA4MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTT+HB/8yxinP/nVg7ai9uT5gzHB
4pCDQtFXOjoafJj5u3bHtrEqHVOAJEsBMj/EpU7V7y/Bo3cY17LiRDNxAEMBMnby
FXtpTeHDZCjYtG6ENlosyDjaaftfOpXRw6RnExghqBkZ6Ure1LobJFbnpUrP5ZhO
+/xXtwXcLCNocSR3ampNViEwNJQM5c+yxEcj/W36de5MTUhfwRkMtpwIeJf4ZoXa
4pBPqG10Nq3p/P/1epov5jozL57okyv4lJq1gW8BeuhJiaEUuk0PxxM16JdMNoWe
ZNQB6gHWUhqVOVKVJNgWy+cQBOUOuIlIXZPjgXtA35+Hzbrgkpf5mxXP9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfys5HPTV2B1pIdg2FCth+ncIF1MB8GA1UdIwQY
MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt
YjhlZDY2ZDQyNzgyLzEvbF9LemtjOU5YWUhXa2gyRFlVSzJINmR3Z1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy
LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aJMA0G
CSqGSIb3DQEBCwUAA4IBAQCmAyfSwsePS3NHlvhLu/MfzGg5sgSyql9+vsrmgC9g
lm4qZwja/SVPxpIIg8aOmzd6LBOaqi+BM7bBvhsz3YaBrCgFx/5lnGDSH4ou0c1P
i53EfTLBe9WjJ9EJGAemb6ZHQoRYhO9MeruY+8YWp9HtrehH7zBC6xLTxku9xiif
KBBPst4YC4bXoizOroXWcREyRsE/o8PDKsd283PkCQqIsAR3/RNhnXnT9clu0Z0U
VU1awpC6aNme5rc3VLejhEBulFVuhZKb971P0HTftQCmYv+VuWmRHhRyVG4lz2Sp
3yynO3H349D0/x7L/Ez9V/vgXhEW2M4p6cLy/ZFJHJ3q
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:52 2025 by rpki-client