Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/nwvzqpHKEQf0XkN8axtNhQLUtcs.roa
File: nwvzqpHKEQf0XkN8axtNhQLUtcs.roa (raw, json)
Hash identifier: bB51LZWiYwtCRR+dOkQrwITuj2eMSCSHb2D2Ll4WTIU=
Subject key identifier: 9F:0B:F3:AA:91:CA:11:07:F4:5E:43:7C:6B:1B:4D:85:02:D4:B5:CB
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 016309
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/nwvzqpHKEQf0XkN8axtNhQLUtcs.roa
Signing time: Tue 14 Jun 2022 07:33:44 +0000
ROA not before: Tue 14 Jun 2022 07:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197639
IP address blocks: 91.223.204.0/24 maxlen: 24
2001:67c:620::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90889 (0x16309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Jun 14 07:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f0bf3aa91ca1107f45e437c6b1b4d8502d4b5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:c7:2e:c5:62:75:56:9a:61:ad:b5:2e:82:
34:9d:d0:ea:30:ce:6e:88:e1:8b:93:47:d9:64:d0:
05:1c:a0:10:94:f4:03:06:75:25:f5:d3:10:53:ab:
07:f4:1a:87:ef:8a:c4:62:33:f5:87:a0:eb:c9:5f:
a3:a7:1b:de:c1:55:41:b3:57:ff:96:e0:b0:74:54:
f0:57:dc:54:c7:c5:5a:eb:2f:5f:9e:5d:69:32:3a:
c9:a9:bf:17:f4:a0:ce:80:66:3e:0b:0f:46:a9:05:
a2:63:30:5e:a7:88:eb:fa:69:2b:80:77:b0:9f:9c:
f3:d5:06:1e:3b:89:47:84:80:a4:c6:6c:7f:5c:69:
88:cb:73:9e:54:8c:54:7b:4a:c2:bb:6f:9a:72:d8:
84:99:64:ed:2b:7c:fe:61:0f:0e:c7:cb:24:3d:b3:
cc:5d:c2:7b:49:a9:4e:d9:33:02:5a:81:eb:dc:99:
27:91:64:30:53:b2:8f:fa:c4:d6:1b:6d:e5:06:91:
56:a2:a4:a1:f0:19:de:a0:9a:2d:c2:0f:a8:b5:c9:
23:b9:0d:bb:9f:30:10:a7:c8:78:83:4b:ed:9a:f1:
cf:c1:17:eb:ca:34:8c:6e:e8:9f:5c:4c:3b:3c:4a:
94:bc:d5:d2:d4:36:2a:71:af:07:4b:f8:69:18:95:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:F3:AA:91:CA:11:07:F4:5E:43:7C:6B:1B:4D:85:02:D4:B5:CB
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/nwvzqpHKEQf0XkN8axtNhQLUtcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.204.0/24
IPv6:
2001:67c:620::/48
Signature Algorithm: sha256WithRSAEncryption
54:89:bc:14:ca:c4:8f:20:7f:5a:5c:5b:51:97:84:0d:1e:4a:
59:f4:c8:e5:46:e4:c9:28:1b:f1:da:42:73:87:a1:89:fa:4d:
f7:b3:d0:d9:55:b6:c2:fc:0c:7e:71:42:c7:16:f5:ce:60:46:
22:f4:78:48:f7:d3:8c:9b:d4:9b:40:b4:b7:fd:dc:74:10:87:
76:f8:5e:fe:a1:b1:45:f3:99:a3:ce:7e:0f:1d:f5:cb:dc:c6:
29:94:f0:4a:a5:ef:73:8d:a0:b1:37:22:e9:65:38:92:a0:ba:
ee:8d:f0:09:7e:03:8e:29:f1:8d:45:15:b1:82:af:b3:70:d4:
24:72:4b:6c:68:7e:bf:2b:c9:b1:85:10:77:97:b1:f9:5b:1a:
9f:75:e3:d4:08:85:95:7b:8a:20:29:94:27:93:c0:2e:96:d9:
d1:ce:9f:93:22:61:ed:f6:65:98:ca:d4:b6:ec:5e:3d:e9:92:
d7:07:66:42:a8:f9:4f:c0:48:c1:f5:50:2f:a1:43:ee:e0:bc:
6b:22:ad:e6:87:3e:bc:28:61:74:9a:26:77:33:4d:81:d1:5b:
e2:3b:ef:36:41:4d:53:03:0f:25:5a:69:d4:54:c0:0b:25:e1:
46:1c:31:48:4b:e4:82:b9:a4:89:41:f2:fc:4a:74:a2:d5:95:
db:36:06:5a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDAWMJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
MmU0MzJlZDg4YmVjMWFkMTQ1NDQ0OTYzMjgxNGQ0Mzk5NmIxZTAwHhcNMjIwNjE0
MDczMzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZjBiZjNhYTkxY2Ex
MTA3ZjQ1ZTQzN2M2YjFiNGQ4NTAyZDRiNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvKbHLsVidVaaYa21LoI0ndDqMM5uiOGLk0fZZNAFHKAQlPQD
BnUl9dMQU6sH9BqH74rEYjP1h6DryV+jpxvewVVBs1f/luCwdFTwV9xUx8Va6y9f
nl1pMjrJqb8X9KDOgGY+Cw9GqQWiYzBep4jr+mkrgHewn5zz1QYeO4lHhICkxmx/
XGmIy3OeVIxUe0rCu2+actiEmWTtK3z+YQ8Ox8skPbPMXcJ7SalO2TMCWoHr3Jkn
kWQwU7KP+sTWG23lBpFWoqSh8BneoJotwg+otckjuQ27nzAQp8h4g0vtmvHPwRfr
yjSMbuifXEw7PEqUvNXS1DYqca8HS/hpGJVGsQIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFJ8L86qRyhEH9F5DfGsbTYUC1LXLMB8GA1UdIwQYMBaAFCguQy7Yi+wa0UVE
SWMoFNQ5lrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
S0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFkLzEv
bnd2enFwSEtFUWYwWGtOOGF4dE5oUUxVdGNzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9j
NjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFkLzEvS0M1REx0aUw3QnJS
UlVSSll5Z1UxRG1Xc2VBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9/MMA8EAgACMAkDBwAgAQZ8BiAw
DQYJKoZIhvcNAQELBQADggEBAFSJvBTKxI8gf1pcW1GXhA0eSln0yOVG5MkoG/Ha
QnOHoYn6Tfez0NlVtsL8DH5xQscW9c5gRiL0eEj304yb1JtAtLf93HQQh3b4Xv6h
sUXzmaPOfg8d9cvcximU8Eql73ONoLE3IullOJKguu6N8Al+A44p8Y1FFbGCr7Nw
1CRyS2xofr8rybGFEHeXsflbGp9149QIhZV7iiAplCeTwC6W2dHOn5MiYe32ZZjK
1LbsXj3pktcHZkKo+U/ASMH1UC+hQ+7gvGsireaHPrwoYXSaJnczTYHRW+I77zZB
TVMDDyVaadRUwAsl4UYcMUhL5IK5pIlB8vxKdKLVlds2Blo=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:37 2025 by rpki-client