Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/PrEtkaxc3Rb4i5RwcWxceZVpO3c.roa
File: PrEtkaxc3Rb4i5RwcWxceZVpO3c.roa (raw, json)
Hash identifier: DVPR/qyuGrWhZHwj34VYcNNH1tkMvC+jD2FMaP8CEeI=
Subject key identifier: 3E:B1:2D:91:AC:5C:DD:16:F8:8B:94:70:71:6C:5C:79:95:69:3B:77
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 07506C63
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/PrEtkaxc3Rb4i5RwcWxceZVpO3c.roa
Signing time: Sat 01 Jan 2022 04:04:22 +0000
ROA not before: Sat 01 Jan 2022 04:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49478
IP address blocks: 194.150.254.0/23 maxlen: 23
91.234.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122711139 (0x7506c63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jan 1 04:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb12d91ac5cdd16f88b9470716c5c7995693b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:e9:47:b9:e4:21:2e:87:ea:a7:6e:fd:c9:
6c:e6:c6:0a:50:db:1a:ca:f5:7b:2a:1a:dc:88:75:
81:15:e5:c0:e4:d6:3f:f1:55:59:c2:da:2c:5c:bc:
79:ca:c5:27:5b:3d:59:9f:d0:c2:93:2e:9f:ad:8f:
7a:2e:df:5a:1f:97:46:02:85:42:61:d1:8c:58:a1:
96:70:b1:8b:69:bd:36:e7:88:0d:45:8c:01:d9:ef:
c6:49:ea:85:92:07:6c:3e:79:2c:6e:28:fb:b3:df:
19:0b:63:eb:99:20:ed:40:61:8b:ba:2c:40:09:06:
01:be:cd:8d:fd:b0:fd:c6:41:d0:4f:0a:2c:10:8a:
43:0c:4d:9c:4a:60:52:f7:60:58:bd:07:71:77:a4:
49:2f:74:d2:3b:22:a3:b5:53:d5:78:af:6a:3c:27:
b9:4a:1a:ba:b4:80:ce:ea:c6:db:7f:7c:e4:8c:d1:
8f:31:29:ee:3d:48:69:2c:44:36:13:3a:d0:ea:5a:
13:c7:49:6d:47:39:24:cf:08:9c:d7:35:6b:71:58:
1a:1d:03:ca:98:8c:05:68:96:cc:25:71:2a:85:af:
06:e4:14:16:73:2a:90:58:0b:64:6a:a0:ba:52:0d:
3e:6c:16:5a:1d:73:3f:ff:d6:a6:a1:01:70:6b:88:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:2D:91:AC:5C:DD:16:F8:8B:94:70:71:6C:5C:79:95:69:3B:77
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/PrEtkaxc3Rb4i5RwcWxceZVpO3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.164.0/22
194.150.254.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:01:a6:9b:65:bb:27:8a:1f:ae:5a:b6:74:84:0e:8e:3b:2a:
2e:7f:a7:66:ac:bd:18:4d:27:ad:bc:82:d7:75:af:40:35:f9:
66:6d:fd:09:f8:d6:22:45:48:9c:e5:ca:7b:39:f9:d3:3a:0b:
81:2b:e8:b5:9a:77:d0:a5:81:a0:36:3a:20:45:a7:c3:60:7a:
56:ba:51:e1:0d:b3:a3:55:41:24:6b:9a:28:fd:7f:6c:83:f0:
58:e0:e4:58:17:92:eb:63:46:73:fb:7a:d7:64:7e:67:ba:71:
08:a3:b0:cf:1d:8c:4c:ff:ca:a8:eb:f0:9a:14:e0:8a:76:cc:
c4:6c:9c:03:23:b2:aa:cc:f2:86:82:43:c6:41:57:ad:c4:2c:
68:23:47:1c:7c:9c:13:ec:1f:8c:90:4b:bf:ae:c1:14:4d:10:
7e:29:1f:60:ce:ec:4d:c2:ac:c2:17:6a:1a:c2:a0:90:2e:a6:
11:fb:8e:85:42:19:4e:d1:ec:47:30:e5:40:02:36:49:01:d4:
bf:d9:08:a1:91:77:20:ce:da:c8:c7:31:6b:5d:ec:91:d1:ba:
96:62:9c:40:4b:46:4d:f2:41:5a:5f:da:54:ca:68:b3:78:5b:
0a:9f:e8:dc:39:bf:7d:c5:cd:16:0b:cf:fc:56:ff:cb:73:44:
22:59:3b:51
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB1BsYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDBhNjcxOGQ1MzkxNTVjMjczMDA0MDFmMmM0NjY3NTEzZWVjNWIxMB4XDTIyMDEw
MTA0MDQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2ViMTJkOTFhYzVj
ZGQxNmY4OGI5NDcwNzE2YzVjNzk5NTY5M2I3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPX6Ue55CEuh+qnbv3JbObGClDbGsr1eyoa3Ih1gRXlwOTW
P/FVWcLaLFy8ecrFJ1s9WZ/QwpMun62Pei7fWh+XRgKFQmHRjFihlnCxi2m9NueI
DUWMAdnvxknqhZIHbD55LG4o+7PfGQtj65kg7UBhi7osQAkGAb7Njf2w/cZB0E8K
LBCKQwxNnEpgUvdgWL0HcXekSS900jsio7VT1XivajwnuUoaurSAzurG23985IzR
jzEp7j1IaSxENhM60OpaE8dJbUc5JM8InNc1a3FYGh0DypiMBWiWzCVxKoWvBuQU
FnMqkFgLZGqgulINPmwWWh1zP//WpqEBcGuIFWcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ+sS2RrFzdFviLlHBxbFx5lWk7dzAfBgNVHSMEGDAWgBQACmcY1TkVXCcw
BAHyxGZ1E+7FsTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FBcG5HTlU1RlZ3bk1BUUI4c1JtZFJQdXhiRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvYTIzMzQ4LTYyY2YtNGFmYS05NGZjLTlkZDg1NjFjYWVkZS8x
L1ByRXRrYXhjM1JiNGk1UndjV3hjZVpWcE8zYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
YTIzMzQ4LTYyY2YtNGFmYS05NGZjLTlkZDg1NjFjYWVkZS8xL0FBcG5HTlU1RlZ3
bk1BUUI4c1JtZFJQdXhiRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvqpAMEAcKW/jANBgkqhkiG9w0B
AQsFAAOCAQEAqAGmm2W7J4ofrlq2dIQOjjsqLn+nZqy9GE0nrbyC13WvQDX5Zm39
CfjWIkVInOXKezn50zoLgSvotZp30KWBoDY6IEWnw2B6VrpR4Q2zo1VBJGuaKP1/
bIPwWODkWBeS62NGc/t612R+Z7pxCKOwzx2MTP/KqOvwmhTginbMxGycAyOyqszy
hoJDxkFXrcQsaCNHHHycE+wfjJBLv67BFE0QfikfYM7sTcKswhdqGsKgkC6mEfuO
hUIZTtHsRzDlQAI2SQHUv9kIoZF3IM7ayMcxa13skdG6lmKcQEtGTfJBWl/aVMpo
s3hbCp/o3Dm/fcXNFgvP/Fb/y3NEIlk7UQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org