Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/VmwmPok0KPEbuWQt-qiAJ7aPYNQ.roa
File: VmwmPok0KPEbuWQt-qiAJ7aPYNQ.roa (raw, json)
Hash identifier: tuYCHk0nyUFlO/K71ldFkg5TniIvAZZ1bJ0PkFZsoFo=
Subject key identifier: 56:6C:26:3E:89:34:28:F1:1B:B9:64:2D:FA:A8:80:27:B6:8F:60:D4
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 0271678A
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/VmwmPok0KPEbuWQt-qiAJ7aPYNQ.roa
Signing time: Sat 01 Jan 2022 09:59:58 +0000
ROA not before: Sat 01 Jan 2022 09:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198955
IP address blocks: 91.240.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40986506 (0x271678a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Jan 1 09:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=566c263e893428f11bb9642dfaa88027b68f60d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:2c:41:e5:02:e0:9c:30:52:0a:b1:92:ad:
08:fe:30:fc:e1:6a:59:67:1b:a2:21:21:00:e6:07:
70:5c:15:55:07:bb:c3:2d:6c:4b:b1:84:b5:30:47:
6d:4c:16:b1:7a:34:5d:2f:a7:14:81:b7:68:9c:b7:
54:e3:bb:24:0f:db:6c:6e:7c:cb:17:37:1a:2c:57:
93:d1:52:ae:c0:57:65:54:c4:c8:73:86:bc:99:8c:
5d:f3:f3:ff:9e:a1:6c:08:d0:e9:72:91:cb:13:11:
31:39:1d:3b:6f:e3:98:f3:08:a6:cf:6e:a5:49:95:
87:c3:a7:4f:55:7c:dc:2a:69:15:93:52:4d:a4:c7:
db:08:6c:43:c9:7c:d1:3c:0a:0a:b4:f7:3f:05:ab:
79:a2:70:ab:e4:65:32:65:d4:d5:ee:c9:87:a1:b9:
b8:13:74:c4:2b:f3:e9:fb:4c:93:52:4e:3f:b3:7a:
93:79:23:60:2e:73:17:bd:7c:95:6a:79:52:78:b7:
b6:89:8e:bf:39:58:2d:67:bf:cf:dc:85:6e:72:dd:
71:de:2e:62:d9:6a:dd:8c:22:0b:4c:d9:b2:a0:0a:
b6:64:3f:c3:86:50:c3:bd:18:9c:75:b1:f4:6f:d9:
4e:98:d0:cb:40:95:10:e2:93:02:3a:da:a5:e5:0b:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:26:3E:89:34:28:F1:1B:B9:64:2D:FA:A8:80:27:B6:8F:60:D4
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/VmwmPok0KPEbuWQt-qiAJ7aPYNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.155.0/24
Signature Algorithm: sha256WithRSAEncryption
37:16:5a:82:aa:e2:f7:9d:b9:7d:a6:19:93:8c:f7:d0:de:06:
89:38:13:13:32:cf:7e:08:9a:21:a7:68:44:be:d5:3a:80:83:
a0:82:01:ef:98:66:be:46:6f:e8:40:9c:97:19:7d:d9:20:23:
2f:f1:9c:23:7d:b4:32:97:9e:35:01:f7:d5:86:1c:0b:cc:7c:
67:0d:e1:81:6a:3c:a5:0f:88:9f:87:a1:58:fa:c5:b3:e5:90:
4f:cc:b8:78:13:a7:33:6e:73:20:82:fd:2e:9a:f2:7e:22:93:
0a:a8:f5:2f:57:b0:c2:74:92:88:51:9c:6d:7f:17:f0:02:d6:
63:7e:1d:14:94:39:1d:ab:80:05:e1:6b:de:18:19:3f:d3:8b:
33:99:5d:78:c6:a7:5e:1f:6f:2e:78:23:da:bb:93:e0:28:12:
4b:ec:94:e1:26:f1:5e:4f:a2:2c:bc:4a:7b:2a:94:aa:c3:8b:
eb:57:73:9a:c6:0c:22:5a:a1:00:5d:67:9b:d5:cc:85:7d:e2:
06:55:4f:b6:a5:a6:28:0d:5f:72:63:37:d9:c7:ce:0b:bd:42:
8b:6f:e1:62:3f:12:74:89:92:aa:2d:bc:3a:bb:9b:9e:de:a6:
0d:c9:4f:b0:5d:15:cd:6e:8b:ce:fb:e7:e4:a7:88:51:23:5c:
c5:12:18:4f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAnFnijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjdlOWY5ZDVmZDQ1ZGEwMTA2OTVjYzQyMTJhZjdlNjdiN2IzNDhmMB4XDTIyMDEw
MTA5NTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY2YzI2M2U4OTM0
MjhmMTFiYjk2NDJkZmFhODgwMjdiNjhmNjBkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI5OLEHlAuCcMFIKsZKtCP4w/OFqWWcboiEhAOYHcFwVVQe7
wy1sS7GEtTBHbUwWsXo0XS+nFIG3aJy3VOO7JA/bbG58yxc3GixXk9FSrsBXZVTE
yHOGvJmMXfPz/56hbAjQ6XKRyxMRMTkdO2/jmPMIps9upUmVh8OnT1V83CppFZNS
TaTH2whsQ8l80TwKCrT3PwWreaJwq+RlMmXU1e7Jh6G5uBN0xCvz6ftMk1JOP7N6
k3kjYC5zF718lWp5Uni3tomOvzlYLWe/z9yFbnLdcd4uYtlq3YwiC0zZsqAKtmQ/
w4ZQw70YnHWx9G/ZTpjQy0CVEOKTAjrapeULrRMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWbCY+iTQo8Ru5ZC36qIAnto9g1DAfBgNVHSMEGDAWgBQSfp+dX9RdoBBp
XMQhKvfme3s0jzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VuNmZuVl9VWGFBUWFWekVJU3IzNW50N05JOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjQvMjRkMWViLTJjZTEtNGU2Zi04M2MyLTE1YTlmMjFjYWE4NS8x
L1Ztd21Qb2swS1BFYnVXUXQtcWlBSjdhUFlOUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQv
MjRkMWViLTJjZTEtNGU2Zi04M2MyLTE1YTlmMjFjYWE4NS8xL0VuNmZuVl9VWGFB
UWFWekVJU3IzNW50N05JOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvwmzANBgkqhkiG9w0BAQsFAAOC
AQEANxZagqri9525faYZk4z30N4GiTgTEzLPfgiaIadoRL7VOoCDoIIB75hmvkZv
6ECclxl92SAjL/GcI320MpeeNQH31YYcC8x8Zw3hgWo8pQ+In4ehWPrFs+WQT8y4
eBOnM25zIIL9LpryfiKTCqj1L1ewwnSSiFGcbX8X8ALWY34dFJQ5HauABeFr3hgZ
P9OLM5ldeManXh9vLngj2ruT4CgSS+yU4SbxXk+iLLxKeyqUqsOL61dzmsYMIlqh
AF1nm9XMhX3iBlVPtqWmKA1fcmM32cfOC71Ci2/hYj8SdImSqi28Orubnt6mDclP
sF0VzW6Lzvvn5KeIUSNcxRIYTw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:25 2023 by rpki-client on console-fra.rpki-client.org