Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/RSzS49YytM-hvPK8uNREyv9s3vc.roa
File: RSzS49YytM-hvPK8uNREyv9s3vc.roa (raw, json)
Hash identifier: AQ6Lj/OI7fXe58BLYEUnyNLIgI+ubW7b3e/qcJzexhw=
Subject key identifier: 45:2C:D2:E3:D6:32:B4:CF:A1:BC:F2:BC:B8:D4:44:CA:FF:6C:DE:F7
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 0301CFCF
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/RSzS49YytM-hvPK8uNREyv9s3vc.roa
Signing time: Sat 01 Jan 2022 12:05:08 +0000
ROA not before: Sat 01 Jan 2022 12:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51932
IP address blocks: 91.221.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50450383 (0x301cfcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Jan 1 12:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452cd2e3d632b4cfa1bcf2bcb8d444caff6cdef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:46:2d:bd:11:44:68:44:83:4c:d6:b0:5f:
77:3e:8a:92:64:55:aa:0a:32:f2:12:5b:02:b8:ed:
70:00:65:34:f8:a5:2c:01:b6:03:13:6f:ba:d0:be:
24:e2:70:c5:e2:a3:7a:19:24:74:1c:06:8b:f8:40:
06:84:dc:f5:28:72:21:1f:8f:b0:e6:99:e6:a5:f8:
31:24:a7:bd:42:37:25:0b:e3:7a:85:9c:33:12:69:
ee:a7:97:3d:7d:c9:2d:6a:8f:9b:56:27:23:0d:6b:
69:83:3f:13:1f:af:ea:a4:60:f6:19:17:86:3b:1e:
c5:c2:bf:18:16:75:35:a0:23:a9:3f:0c:e8:ad:cf:
de:53:8a:08:d6:d8:e5:cb:73:b6:63:46:03:64:e2:
02:96:d9:72:53:66:9a:e2:ad:cb:86:99:64:70:2c:
29:06:bc:af:73:70:62:43:2d:35:f4:d3:6b:b7:9c:
a0:53:3d:08:4b:af:a9:78:ff:12:43:00:d5:8b:72:
60:e7:80:73:d9:e5:65:fa:f5:54:fb:2e:f9:ec:3c:
b8:96:c7:e4:f6:55:06:67:c0:67:a0:b2:6d:79:e0:
be:da:d4:88:a6:bd:1c:2e:64:6d:65:cc:26:cf:29:
6e:21:35:ff:2b:aa:b5:0d:c5:d0:ec:54:73:94:6b:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:D2:E3:D6:32:B4:CF:A1:BC:F2:BC:B8:D4:44:CA:FF:6C:DE:F7
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/RSzS49YytM-hvPK8uNREyv9s3vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.140.0/23
Signature Algorithm: sha256WithRSAEncryption
71:67:80:10:b5:f0:d0:8d:97:da:18:36:4f:c9:44:9e:ed:ec:
9e:a0:b7:9a:53:b7:88:f4:43:2d:1b:7e:3c:66:b8:21:0a:b7:
76:61:78:ec:50:a3:59:cb:4f:e6:09:b0:a4:a7:c0:2a:ee:3a:
0d:6f:1a:d0:d8:5e:50:8e:12:16:0e:f1:59:a8:45:66:18:b5:
17:f7:70:28:91:6b:5a:2f:ad:15:c7:e8:f6:8f:f8:bf:2f:d4:
47:38:e3:91:37:f4:de:f3:86:49:06:5d:2f:f0:e1:09:78:2a:
a6:c8:28:67:ad:ac:da:63:49:ba:ff:67:7d:a0:00:d1:10:af:
89:89:e2:12:fd:67:1d:05:53:08:6a:bc:2f:5d:54:4a:7d:c0:
d7:11:6d:86:8d:63:06:a7:55:22:70:98:c7:eb:53:cb:ac:58:
80:e8:ba:7d:0f:dd:6c:2c:fe:02:f3:39:76:36:2d:6d:d6:18:
d6:08:c3:b7:d0:50:62:34:a0:6c:03:2b:c6:77:d7:05:4b:41:
32:61:9b:01:09:c4:db:68:c8:60:0c:00:23:24:f3:44:a4:84:
be:c5:43:47:4e:1d:1b:16:05:a4:b3:5d:44:81:81:b4:03:b2:
c6:d1:97:5b:5a:db:8e:77:df:ec:27:9c:84:ed:29:3d:a0:55:
cf:b6:cc:97
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAwHPzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzUxMjRhMTdiODcyMTVmNzkyMDVjZDE0ODZmNjE4MzljZjllNmY4MB4XDTIyMDEw
MTEyMDUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDUyY2QyZTNkNjMy
YjRjZmExYmNmMmJjYjhkNDQ0Y2FmZjZjZGVmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALccRi29EURoRINM1rBfdz6KkmRVqgoy8hJbArjtcABlNPil
LAG2AxNvutC+JOJwxeKjehkkdBwGi/hABoTc9ShyIR+PsOaZ5qX4MSSnvUI3JQvj
eoWcMxJp7qeXPX3JLWqPm1YnIw1raYM/Ex+v6qRg9hkXhjsexcK/GBZ1NaAjqT8M
6K3P3lOKCNbY5ctztmNGA2TiApbZclNmmuKty4aZZHAsKQa8r3NwYkMtNfTTa7ec
oFM9CEuvqXj/EkMA1YtyYOeAc9nlZfr1VPsu+ew8uJbH5PZVBmfAZ6CybXngvtrU
iKa9HC5kbWXMJs8pbiE1/yuqtQ3F0OxUc5Rr2eECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRFLNLj1jK0z6G88ry41ETK/2ze9zAfBgNVHSMEGDAWgBQXUSShe4chX3kg
XNFIb2GDnPnm+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YxRWtvWHVISVY5NUlGelJTRzloZzV6NTV2Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvMGQ0YWZmLTQyZGItNDI3ZC1hZDVlLWM2MzdiMGRjZGM4ZS8x
L1JTelM0OVl5dE0taHZQSzh1TlJFeXY5czN2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
MGQ0YWZmLTQyZGItNDI3ZC1hZDVlLWM2MzdiMGRjZGM4ZS8xL0YxRWtvWHVISVY5
NUlGelJTRzloZzV6NTV2Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvdjDANBgkqhkiG9w0BAQsFAAOC
AQEAcWeAELXw0I2X2hg2T8lEnu3snqC3mlO3iPRDLRt+PGa4IQq3dmF47FCjWctP
5gmwpKfAKu46DW8a0NheUI4SFg7xWahFZhi1F/dwKJFrWi+tFcfo9o/4vy/URzjj
kTf03vOGSQZdL/DhCXgqpsgoZ62s2mNJuv9nfaAA0RCviYniEv1nHQVTCGq8L11U
Sn3A1xFtho1jBqdVInCYx+tTy6xYgOi6fQ/dbCz+AvM5djYtbdYY1gjDt9BQYjSg
bAMrxnfXBUtBMmGbAQnE22jIYAwAIyTzRKSEvsVDR04dGxYFpLNdRIGBtAOyxtGX
W1rbjnff7CechO0pPaBVz7bMlw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net