Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa
File: j7QuS9r7XQ47Igp8veUcLzDhLvM.roa (raw, json)
Hash identifier: 3EtAVoQScgWxlf+yudKsY8noquorDWOtkDD7/qFSaSw=
Subject key identifier: 8F:B4:2E:4B:DA:FB:5D:0E:3B:22:0A:7C:BD:E5:1C:2F:30:E1:2E:F3
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: D94B
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa
Signing time: Mon 16 May 2022 12:08:26 +0000
ROA not before: Mon 16 May 2022 12:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43464
IP address blocks: 91.195.4.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55627 (0xd94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: May 16 12:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fb42e4bdafb5d0e3b220a7cbde51c2f30e12ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:2f:37:76:ec:91:9f:12:e0:e8:a8:66:33:
80:52:9f:1e:a2:16:2e:41:b5:f5:c7:ba:74:6b:e5:
6d:57:3f:74:8c:94:92:9d:92:4c:52:73:c0:10:4c:
ad:cb:df:aa:9b:1d:c6:3b:33:6d:14:f1:47:a6:f9:
6c:34:1e:3f:cf:45:6c:73:e2:55:77:09:f7:26:70:
8a:00:5d:4f:96:4f:39:33:03:1c:0c:df:09:81:8c:
c6:6b:f7:f2:41:4c:16:ab:36:67:5b:ae:d6:ac:b8:
54:9d:52:15:dc:e2:c2:ac:f6:af:49:0f:04:d9:f5:
4f:9f:51:f8:8a:78:d6:ed:3e:f2:33:52:5c:bd:6f:
0d:4f:83:b9:3d:64:f6:4d:08:c0:10:42:33:71:59:
ea:2d:d0:21:31:72:61:6c:e8:d8:1b:98:4b:f0:1c:
26:5b:c0:97:ae:7b:80:13:ce:e6:95:35:9a:f4:9d:
6c:e6:6c:2a:2a:ef:9e:f4:b6:57:19:8a:58:18:b7:
50:15:f2:78:1c:bc:19:94:56:58:03:f3:d0:dc:00:
33:5e:98:68:95:dd:2f:ec:48:05:8f:65:18:2e:b2:
f0:0c:4e:fc:f2:b5:23:57:a8:4a:c2:01:fc:0a:b2:
ac:7b:02:52:35:38:39:25:33:61:54:e2:19:c2:5e:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:2E:4B:DA:FB:5D:0E:3B:22:0A:7C:BD:E5:1C:2F:30:E1:2E:F3
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.4.0/23
Signature Algorithm: sha256WithRSAEncryption
74:4e:a0:8a:81:3b:c9:3b:cb:2c:09:dd:5c:c9:1c:df:13:42:
07:ba:67:1e:b3:bf:80:9b:4a:f4:2d:7c:5b:03:a9:38:83:5a:
ac:3b:c8:39:a3:6c:cd:f0:9d:69:c6:8e:89:7e:59:b5:1d:74:
2e:ff:26:17:f4:5e:cd:47:f1:65:ce:e0:7d:30:45:fe:e4:6b:
7a:a0:90:28:06:0b:3d:59:99:c0:95:14:38:c0:f2:8e:6d:d5:
0b:41:a8:34:87:eb:41:fe:9d:87:94:17:a7:25:dc:18:c3:81:
de:41:29:4d:a6:55:a9:e0:a9:3f:ce:6a:8d:56:d1:ff:23:4b:
81:fe:33:51:47:9a:07:a7:07:db:62:4f:52:b4:6d:58:8a:0c:
2a:5a:2e:c6:ff:c5:47:01:ee:2d:40:20:73:99:b3:89:39:97:
b4:ad:a2:b3:f4:0e:c2:4c:bd:3b:5d:31:73:93:17:e8:42:a8:
63:dc:08:19:b7:3b:59:88:42:70:3e:2e:44:f1:64:72:81:4e:
9f:16:fb:49:82:84:c3:f1:89:c6:82:f8:26:3e:f2:2e:fc:84:
64:b6:18:9f:55:c1:ad:91:98:5b:25:ac:15:70:34:66:98:f3:
80:7b:aa:71:cb:dc:55:6c:bd:b5:ae:5f:87:04:a7:7f:03:67:
ce:74:73:37
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDANlLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI3
YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0OTFlZWMwHhcNMjIwNTE2
MTIwODI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ZmI0MmU0YmRhZmI1
ZDBlM2IyMjBhN2NiZGU1MWMyZjMwZTEyZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl4kvN3bskZ8S4OioZjOAUp8eohYuQbX1x7p0a+VtVz90jJSS
nZJMUnPAEEyty9+qmx3GOzNtFPFHpvlsNB4/z0Vsc+JVdwn3JnCKAF1Plk85MwMc
DN8JgYzGa/fyQUwWqzZnW67WrLhUnVIV3OLCrPavSQ8E2fVPn1H4injW7T7yM1Jc
vW8NT4O5PWT2TQjAEEIzcVnqLdAhMXJhbOjYG5hL8BwmW8CXrnuAE87mlTWa9J1s
5mwqKu+e9LZXGYpYGLdQFfJ4HLwZlFZYA/PQ3AAzXphold0v7EgFj2UYLrLwDE78
8rUjV6hKwgH8CrKsewJSNTg5JTNhVOIZwl6DCQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFI+0Lkva+10OOyIKfL3lHC8w4S7zMB8GA1UdIwQYMBaAFLfFWMQsQ61ZQG6k
Rsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJhLzEv
ajdRdVM5cjdYUTQ3SWdwOHZlVWNMekRoTHZNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83
MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJhLzEvdDhWWXhDeERyVmxB
YnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8MEMA0GCSqGSIb3DQEBCwUAA4IB
AQB0TqCKgTvJO8ssCd1cyRzfE0IHumces7+Am0r0LXxbA6k4g1qsO8g5o2zN8J1p
xo6Jflm1HXQu/yYX9F7NR/FlzuB9MEX+5Gt6oJAoBgs9WZnAlRQ4wPKObdULQag0
h+tB/p2HlBenJdwYw4HeQSlNplWp4Kk/zmqNVtH/I0uB/jNRR5oHpwfbYk9StG1Y
igwqWi7G/8VHAe4tQCBzmbOJOZe0raKz9A7CTL07XTFzkxfoQqhj3AgZtztZiEJw
Pi5E8WRygU6fFvtJgoTD8YnGgvgmPvIu/IRkthifVcGtkZhbJawVcDRmmPOAe6px
y9xVbL21rl+HBKd/A2fOdHM3
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:25 2025 by rpki-client