Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/0n5a9Y7rtKbawgkJyOMUWi3ZnNI.roa
File: 0n5a9Y7rtKbawgkJyOMUWi3ZnNI.roa (raw, json)
Hash identifier: 6GoXS8qnVFy+oZKSvfq4l9ikbwkPWe6JatKqGHMDtD0=
Subject key identifier: D2:7E:5A:F5:8E:EB:B4:A6:DA:C2:09:09:C8:E3:14:5A:2D:D9:9C:D2
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 0549E79C
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/0n5a9Y7rtKbawgkJyOMUWi3ZnNI.roa
Signing time: Sat 01 Jan 2022 16:06:16 +0000
ROA not before: Sat 01 Jan 2022 16:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198975
IP address blocks: 91.240.130.0/24 maxlen: 24
91.240.136.0/24 maxlen: 24
91.240.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88729500 (0x549e79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jan 1 16:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d27e5af58eebb4a6dac20909c8e3145a2dd99cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:22:44:69:11:c5:61:4b:00:92:71:cd:d9:
ac:0a:31:56:40:b4:fc:2c:ca:43:fb:f0:c9:3e:48:
d1:3b:12:7c:07:67:a9:a5:33:ee:e2:7d:0d:27:a0:
0c:f8:67:99:37:70:82:ea:6e:40:e9:1c:f9:90:79:
16:be:b1:35:f0:d2:b8:05:71:59:5c:6a:0d:dd:46:
af:dd:a0:e6:6c:80:a8:b7:05:90:d1:b5:28:25:22:
47:b8:8b:50:09:aa:85:e3:f8:4f:82:f1:3d:59:4c:
72:ad:81:8c:69:c1:6f:18:2e:86:90:30:2e:c3:dd:
40:47:03:e6:36:73:4a:72:40:0d:5f:f5:cc:22:05:
70:db:8d:d0:40:ff:ed:38:4e:93:ae:6d:5e:f0:62:
11:c1:b0:aa:6b:d2:61:34:f4:ba:88:ac:ab:3f:8f:
06:79:9e:3a:35:5f:2a:67:ab:d1:de:f5:98:d4:22:
49:3e:a8:a2:b7:48:86:e9:42:97:65:94:11:3e:27:
23:d5:8b:b2:f0:ff:68:4b:b5:98:ab:72:bb:b5:4f:
78:c7:2b:d4:29:7c:8e:a5:7d:74:fe:ad:16:b2:12:
cf:1d:b4:27:9e:ea:1c:da:4e:43:ae:9d:8c:af:c3:
b7:08:ce:9b:e1:0a:80:f9:47:c8:a4:9a:e5:29:5c:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:5A:F5:8E:EB:B4:A6:DA:C2:09:09:C8:E3:14:5A:2D:D9:9C:D2
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/0n5a9Y7rtKbawgkJyOMUWi3ZnNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.130.0/24
91.240.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:be:e9:55:17:63:35:32:86:a8:bf:4f:f2:b3:0f:0c:12:7b:
35:e4:3c:1f:72:3f:49:6a:91:6e:0d:33:45:c4:cc:68:06:57:
b6:8f:17:56:78:de:50:13:26:33:fe:c8:70:2a:64:5a:fb:96:
2f:15:34:6b:1b:e9:fe:2d:6c:8b:0c:ef:94:b5:01:78:9c:3c:
57:14:16:b2:81:6c:08:b9:50:e5:38:1f:1d:2f:b5:64:06:7b:
a3:a1:6a:46:6b:60:b4:4a:82:be:10:fe:df:ad:79:ce:95:59:
ff:eb:47:23:07:dc:4d:4b:5e:ee:c7:5a:0e:4e:2c:80:ca:9b:
92:4a:95:cb:45:d2:cb:d7:d0:cc:39:be:d7:11:56:95:bb:34:
87:8b:61:09:55:bf:28:c4:c9:f7:86:41:c9:e6:21:e8:87:18:
66:e5:84:2a:c6:67:55:f2:85:3d:9d:9e:04:c3:c2:8e:f8:d7:
13:38:2f:b0:bc:df:02:d1:12:3a:0b:3b:81:61:97:7d:57:ee:
d4:d3:29:2d:f6:60:0b:6f:76:1c:bd:32:4c:92:00:88:14:41:
5a:f5:eb:18:78:1a:b7:04:98:d6:7a:df:9a:27:9a:bb:aa:b1:
ee:e0:8d:93:da:d2:63:91:64:04:b3:14:49:fe:9d:c7:55:72:
d2:a8:65:a6
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBUnnnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MzcxMDRkOTI3ZTdlMWVmOGZlYmJmZmRkZjI4MTQ1NDk1MDExMDk0MB4XDTIyMDEw
MTE2MDYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI3ZTVhZjU4ZWVi
YjRhNmRhYzIwOTA5YzhlMzE0NWEyZGQ5OWNkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANFsIkRpEcVhSwCScc3ZrAoxVkC0/CzKQ/vwyT5I0TsSfAdn
qaUz7uJ9DSegDPhnmTdwgupuQOkc+ZB5Fr6xNfDSuAVxWVxqDd1Gr92g5myAqLcF
kNG1KCUiR7iLUAmqheP4T4LxPVlMcq2BjGnBbxguhpAwLsPdQEcD5jZzSnJADV/1
zCIFcNuN0ED/7ThOk65tXvBiEcGwqmvSYTT0uoisqz+PBnmeOjVfKmer0d71mNQi
ST6oordIhulCl2WUET4nI9WLsvD/aEu1mKtyu7VPeMcr1Cl8jqV9dP6tFrISzx20
J57qHNpOQ66djK/DtwjOm+EKgPlHyKSa5SlcWB0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTSflr1juu0ptrCCQnI4xRaLdmc0jAfBgNVHSMEGDAWgBRjcQTZJ+fh74/r
v/3fKBRUlQEQlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kzRUUyU2ZuNGUtUDY3XzkzeWdVVkpVQkVKUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvZGQxZGRmLTczY2YtNGJiMi04YTZlLTZlNGFlYzg2ZmUxZS8x
LzBuNWE5WTdydEtiYXdna0p5T01VV2kzWm5OSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
ZGQxZGRmLTczY2YtNGJiMi04YTZlLTZlNGFlYzg2ZmUxZS8xL1kzRUUyU2ZuNGUt
UDY3XzkzeWdVVkpVQkVKUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvwggMEAlvwiDANBgkqhkiG9w0B
AQsFAAOCAQEALb7pVRdjNTKGqL9P8rMPDBJ7NeQ8H3I/SWqRbg0zRcTMaAZXto8X
VnjeUBMmM/7IcCpkWvuWLxU0axvp/i1siwzvlLUBeJw8VxQWsoFsCLlQ5TgfHS+1
ZAZ7o6FqRmtgtEqCvhD+3615zpVZ/+tHIwfcTUte7sdaDk4sgMqbkkqVy0XSy9fQ
zDm+1xFWlbs0h4thCVW/KMTJ94ZByeYh6IcYZuWEKsZnVfKFPZ2eBMPCjvjXEzgv
sLzfAtESOgs7gWGXfVfu1NMpLfZgC292HL0yTJIAiBRBWvXrGHgatwSY1nrfmiea
u6qx7uCNk9rSY5FkBLMUSf6dx1Vy0qhlpg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net