Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/WHzpSMd9mPaHgr3dpo4K3i3aiUk.roa
File: WHzpSMd9mPaHgr3dpo4K3i3aiUk.roa (raw, json)
Hash identifier: xPchQEM72VSRA3ovAEuA7FB/3aibJHyqXBEzL5bTPPA=
Subject key identifier: 58:7C:E9:48:C7:7D:98:F6:87:82:BD:DD:A6:8E:0A:DE:2D:DA:89:49
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: FC15B2
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/WHzpSMd9mPaHgr3dpo4K3i3aiUk.roa
Signing time: Sat 01 Jan 2022 11:02:01 +0000
ROA not before: Sat 01 Jan 2022 11:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 91.232.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16520626 (0xfc15b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Jan 1 11:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587ce948c77d98f68782bddda68e0ade2dda8949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:be:29:b4:38:86:49:1f:58:c1:37:a0:42:
2c:c4:65:a3:df:a8:72:3f:1a:f1:8f:5e:6b:e2:7c:
db:18:b8:8f:dd:99:39:07:2f:f3:a5:23:3c:91:2d:
3e:6c:58:c3:3d:61:2b:f2:e9:7a:5a:8f:69:3d:8a:
e1:77:29:a8:eb:ce:06:2e:c3:9f:67:ec:a4:af:f2:
2b:7c:b5:28:b4:db:0f:1a:73:8d:2c:1b:e3:f1:ad:
e9:f8:33:00:cf:93:99:d0:18:86:24:2a:36:6d:6b:
e6:b7:94:34:4e:f1:42:af:af:ae:88:3a:67:ca:32:
2c:87:4a:79:de:12:ed:5c:4c:8c:c1:d2:dd:c5:49:
54:7c:cc:93:ac:b2:e4:be:30:5e:62:b5:88:dd:08:
0b:6c:16:da:24:f4:32:12:41:75:7c:13:c5:68:1a:
3b:b2:95:83:00:3c:b7:8d:69:82:c9:b6:80:bc:1d:
87:d1:e1:3b:e5:c8:a2:bb:e3:6a:7d:3d:7c:a7:c3:
e9:8b:7a:0f:a8:27:33:e5:b8:1f:14:cf:d5:66:d5:
26:95:00:34:ff:0a:38:13:6a:ee:b2:cd:45:c8:46:
10:32:92:c0:f7:7d:09:3e:82:fd:76:60:8a:96:7e:
30:e2:bc:4b:d1:19:14:fb:a2:74:3f:6b:cb:6c:0f:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:E9:48:C7:7D:98:F6:87:82:BD:DD:A6:8E:0A:DE:2D:DA:89:49
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/WHzpSMd9mPaHgr3dpo4K3i3aiUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:66:b8:e5:ff:87:c4:fc:b6:0e:fd:ff:29:33:42:c5:8a:9e:
a5:62:30:62:d1:6c:9a:42:a9:82:54:7d:3e:29:df:91:75:4d:
b6:e6:57:d7:0d:f1:f3:5e:c0:ce:1d:43:08:e2:a4:0a:a2:9b:
39:17:12:51:30:2d:9b:f6:e4:13:74:11:25:0e:b3:c3:33:db:
a3:0d:b5:c5:0b:2d:71:00:f6:5b:a1:ad:8d:7e:d0:01:d8:51:
35:11:ec:dd:4d:20:62:14:80:9d:13:e9:eb:ed:cf:ca:aa:e4:
eb:a1:9c:8e:00:b6:7b:de:67:12:11:ba:31:58:e3:01:49:c0:
6c:23:ce:e9:de:d3:0f:92:f7:67:a9:32:81:d3:85:72:90:95:
e5:63:38:03:6b:63:ea:e9:cc:6b:bb:b2:70:e0:51:74:fe:05:
b7:a6:2b:38:25:1c:61:1c:31:7c:75:da:89:e2:90:88:8c:9e:
ff:71:89:e7:18:6b:5c:14:97:4a:95:e3:85:4f:b2:7c:2e:26:
37:ca:ba:0b:59:98:c8:81:31:36:f9:e6:04:c5:ff:49:7f:d7:
69:74:d8:8b:fb:b0:a3:c5:e9:2e:06:0b:d8:41:a5:4a:3b:03:
36:81:87:a4:2e:d3:1b:4b:17:bf:e8:bd:e2:e4:22:ac:f1:6e:
f7:d7:22:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPwVsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzJiMmIzNmZiNzIyNTA5NDY1ZWQ5ZDk0OGMyYmY4OTExNjBjZDBlMB4XDTIyMDEw
MTExMDIwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTg3Y2U5NDhjNzdk
OThmNjg3ODJiZGRkYTY4ZTBhZGUyZGRhODk0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALA5vim0OIZJH1jBN6BCLMRlo9+ocj8a8Y9ea+J82xi4j92Z
OQcv86UjPJEtPmxYwz1hK/LpelqPaT2K4XcpqOvOBi7Dn2fspK/yK3y1KLTbDxpz
jSwb4/Gt6fgzAM+TmdAYhiQqNm1r5reUNE7xQq+vrog6Z8oyLIdKed4S7VxMjMHS
3cVJVHzMk6yy5L4wXmK1iN0IC2wW2iT0MhJBdXwTxWgaO7KVgwA8t41pgsm2gLwd
h9HhO+XIorvjan09fKfD6Yt6D6gnM+W4HxTP1WbVJpUANP8KOBNq7rLNRchGEDKS
wPd9CT6C/XZgipZ+MOK8S9EZFPuidD9ry2wPXqkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRYfOlIx32Y9oeCvd2mjgreLdqJSTAfBgNVHSMEGDAWgBQcKys2+3IlCUZe
2dlIwr+JEWDNDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hDc3JOdnR5SlFsR1h0blpTTUtfaVJGZ3pRNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvOTc2NWI3LWJlNDQtNDY1Yy05NzU1LWMyMDJmNzE3ZDQ0Ny8x
L1dIenBTTWQ5bVBhSGdyM2RwbzRLM2kzYWlVay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
OTc2NWI3LWJlNDQtNDY1Yy05NzU1LWMyMDJmNzE3ZDQ0Ny8xL0hDc3JOdnR5SlFs
R1h0blpTTUtfaVJGZ3pRNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvoozANBgkqhkiG9w0BAQsFAAOC
AQEAXWa45f+HxPy2Dv3/KTNCxYqepWIwYtFsmkKpglR9PinfkXVNtuZX1w3x817A
zh1DCOKkCqKbORcSUTAtm/bkE3QRJQ6zwzPbow21xQstcQD2W6GtjX7QAdhRNRHs
3U0gYhSAnRPp6+3Pyqrk66GcjgC2e95nEhG6MVjjAUnAbCPO6d7TD5L3Z6kygdOF
cpCV5WM4A2tj6unMa7uycOBRdP4Ft6YrOCUcYRwxfHXaieKQiIye/3GJ5xhrXBSX
SpXjhU+yfC4mN8q6C1mYyIExNvnmBMX/SX/XaXTYi/uwo8XpLgYL2EGlSjsDNoGH
pC7TG0sXv+i94uQirPFu99cizA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:27 2024 by rpki-client on console-ams.rpki-client.org