Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/gfJnTZfIppwytWLtj-jqZKw48aI.roa
File: gfJnTZfIppwytWLtj-jqZKw48aI.roa (raw, json)
Hash identifier: lk/OVK5U2g4n1uKLWCWXRsTuLBzZcouFC0UIyLKAJHY=
Subject key identifier: 81:F2:67:4D:97:C8:A6:9C:32:B5:62:ED:8F:E8:EA:64:AC:38:F1:A2
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 010DFA
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/gfJnTZfIppwytWLtj-jqZKw48aI.roa
Signing time: Wed 23 Feb 2022 15:44:25 +0000
ROA not before: Wed 23 Feb 2022 15:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 91.244.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69114 (0x10dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Feb 23 15:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81f2674d97c8a69c32b562ed8fe8ea64ac38f1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:1f:e2:a2:5d:49:ca:db:f2:83:be:7e:75:
d5:40:65:e3:ee:91:42:ac:99:ee:2d:ee:10:34:28:
23:80:7d:80:3c:7e:24:81:7f:81:e4:8e:df:78:36:
e6:e7:ae:43:0c:da:e6:d9:3e:5c:60:4f:57:11:f6:
24:1b:42:78:69:c1:09:52:cd:17:f8:34:e4:85:92:
b2:16:dc:3e:d4:1c:de:ed:e2:dd:b4:02:81:04:c1:
5c:35:dc:ca:5e:62:3e:fd:a8:08:5e:1b:bc:f0:5c:
27:2f:38:7a:b8:01:10:db:ac:aa:5d:c3:e0:ab:a1:
97:7c:24:e3:38:de:d0:48:df:93:f7:eb:a1:b9:bc:
df:58:33:7a:0b:a4:4e:b3:63:12:61:58:f8:7a:0e:
bd:33:33:42:fc:f1:bf:a9:dc:57:54:10:6b:0b:f4:
10:2e:0e:d4:fa:ea:ce:ae:15:4d:35:30:40:b7:85:
9f:10:bd:66:0a:95:2d:33:ba:04:eb:90:da:b2:49:
4f:5f:bb:c4:87:b2:a8:61:cd:c2:e5:2a:63:84:71:
df:2b:57:d2:f4:dd:fa:02:d7:32:de:fc:52:6d:ae:
be:0b:39:ad:88:60:6c:19:e6:db:e3:ea:07:f0:d4:
8d:32:0f:45:50:5d:f6:b2:38:f2:04:d4:ed:3d:8d:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:67:4D:97:C8:A6:9C:32:B5:62:ED:8F:E8:EA:64:AC:38:F1:A2
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/gfJnTZfIppwytWLtj-jqZKw48aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
34:20:b4:ac:20:06:20:9f:12:03:b5:95:2e:ae:cc:2d:f6:10:
6b:c8:6c:55:95:db:2c:1c:34:f2:d7:4c:00:67:0b:b5:7d:6a:
2b:61:df:7f:0d:af:25:9f:dc:eb:10:9c:de:6a:90:f9:d2:8d:
64:d2:ad:8d:6d:f6:2e:10:80:a4:c2:5e:a1:bd:27:9e:ad:2f:
e5:68:4c:9e:b1:ed:4b:bb:67:7a:5d:33:37:34:e5:76:82:9a:
f4:9a:cd:06:f0:45:dd:c1:cc:21:9f:d7:6d:b4:61:cc:9e:b2:
1a:2e:59:c2:8f:4f:25:af:96:65:58:61:85:28:8f:ab:bb:12:
d6:e5:3c:12:54:55:4e:f3:c8:32:49:69:0b:ca:41:60:5d:50:
40:07:f0:f4:97:e2:dd:87:e3:3e:84:06:90:4e:18:d1:aa:4c:
34:f1:62:68:34:9d:83:16:0d:99:79:fa:4a:9d:d3:00:cc:80:
e9:46:2e:40:f6:1b:60:37:29:1e:ca:73:b0:0c:1d:2d:a1:a7:
27:e4:9f:11:a8:18:6e:94:40:8c:68:52:1f:ad:21:41:26:19:
54:40:55:fa:99:95:19:67:e2:9b:90:f2:72:ef:91:4c:6d:ba:
0b:45:50:2c:54:e9:63:e5:3f:32:b8:86:b4:64:e9:85:98:e1:
54:36:d3:2d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAQ36MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2IwYzI0MTcwHhcNMjIwMjIz
MTU0NDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MWYyNjc0ZDk3Yzhh
NjljMzJiNTYyZWQ4ZmU4ZWE2NGFjMzhmMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwigf4qJdScrb8oO+fnXVQGXj7pFCrJnuLe4QNCgjgH2APH4k
gX+B5I7feDbm565DDNrm2T5cYE9XEfYkG0J4acEJUs0X+DTkhZKyFtw+1Bze7eLd
tAKBBMFcNdzKXmI+/agIXhu88FwnLzh6uAEQ26yqXcPgq6GXfCTjON7QSN+T9+uh
ubzfWDN6C6ROs2MSYVj4eg69MzNC/PG/qdxXVBBrC/QQLg7U+urOrhVNNTBAt4Wf
EL1mCpUtM7oE65DasklPX7vEh7KoYc3C5SpjhHHfK1fS9N36Atcy3vxSba6+Czmt
iGBsGebb4+oH8NSNMg9FUF32sjjyBNTtPY2rOwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIHyZ02XyKacMrVi7Y/o6mSsOPGiMB8GA1UdIwQYMBaAFDcl91QATtvjCrjK
/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
TnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4LzEv
Z2ZKblRaZklwcHd5dFdMdGotanFaS3c0OGFJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8z
YzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1L
dU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/R9MA0GCSqGSIb3DQEBCwUAA4IB
AQA0ILSsIAYgnxIDtZUurswt9hBryGxVldssHDTy10wAZwu1fWorYd9/Da8ln9zr
EJzeapD50o1k0q2NbfYuEICkwl6hvSeerS/laEyese1Lu2d6XTM3NOV2gpr0ms0G
8EXdwcwhn9dttGHMnrIaLlnCj08lr5ZlWGGFKI+ruxLW5TwSVFVO88gySWkLykFg
XVBAB/D0l+Ldh+M+hAaQThjRqkw08WJoNJ2DFg2ZefpKndMAzIDpRi5A9htgNyke
ynOwDB0toacn5J8RqBhulECMaFIfrSFBJhlUQFX6mZUZZ+KbkPJy75FMbboLRVAs
VOlj5T8yuIa0ZOmFmOFUNtMt
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net