Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/J8j7w2j18afBH0axhIYv5-T3Y6Y.roa
File: J8j7w2j18afBH0axhIYv5-T3Y6Y.roa (raw, json)
Hash identifier: 4zWoUn91YuIY9cbWOOhXeGC02zGEitUYY05ILmDBnlo=
Subject key identifier: 27:C8:FB:C3:68:F5:F1:A7:C1:1F:46:B1:84:86:2F:E7:E4:F7:63:A6
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 02517F
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/J8j7w2j18afBH0axhIYv5-T3Y6Y.roa
Signing time: Fri 21 Jan 2022 11:00:23 +0000
ROA not before: Fri 21 Jan 2022 11:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42573
IP address blocks: 91.199.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151935 (0x2517f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Jan 21 11:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c8fbc368f5f1a7c11f46b184862fe7e4f763a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:97:87:ce:fd:df:6b:7c:ad:76:ef:d7:39:
62:68:98:bf:54:b0:60:35:69:32:62:06:f1:90:c0:
f0:3c:3e:64:8c:63:1c:77:20:d1:db:bd:b3:d9:b0:
81:a3:b6:02:7a:7f:0b:e4:0d:b6:9d:d4:32:bb:e6:
1c:c9:15:e0:df:30:9d:b5:0b:2b:ef:4d:ba:01:ca:
57:bf:b7:f7:a6:5c:a3:1f:b6:c8:70:38:bd:e0:cc:
e6:38:aa:16:18:04:f7:82:28:a3:9e:7d:11:0e:b8:
e7:76:68:ad:7e:f4:08:c8:5d:aa:17:c5:87:d2:9a:
87:18:85:86:93:7c:b2:c4:81:12:f7:52:63:2c:1f:
96:f2:56:55:1d:23:31:ae:f7:6e:79:87:01:88:b2:
af:79:a4:80:0d:52:62:a1:26:61:63:65:b1:b6:61:
54:04:25:ee:9e:6f:82:c5:a2:6b:14:bc:30:7d:22:
3b:e8:82:88:52:90:55:bb:fe:52:2c:e1:fd:40:b3:
de:30:08:68:ec:98:f3:8a:46:8a:a4:84:70:43:69:
bf:19:c7:0e:e7:a7:a7:f9:8c:7c:bd:20:1e:c8:93:
5a:7c:5d:27:0d:9b:2d:b1:62:37:b5:f7:e8:23:24:
80:cb:5f:ce:03:55:53:df:ec:ee:27:b8:33:a5:23:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:FB:C3:68:F5:F1:A7:C1:1F:46:B1:84:86:2F:E7:E4:F7:63:A6
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/J8j7w2j18afBH0axhIYv5-T3Y6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e0:1c:23:0d:1f:4c:39:b7:01:e5:19:d5:21:df:24:5f:ff:
d5:36:27:6f:bf:e0:6b:11:e6:53:0a:c7:49:c8:aa:86:9e:d0:
c1:9e:f6:66:1c:ab:3d:da:d1:b7:37:00:57:31:2e:1d:e7:a8:
a4:f9:fd:76:be:6d:6c:c4:0c:00:58:ab:6b:78:63:16:54:b9:
d4:b5:42:99:7d:30:a6:f0:6b:44:a9:7b:29:fb:6e:f0:45:32:
a5:2c:87:e1:67:74:85:47:f4:53:e4:8b:e5:88:33:b6:46:6d:
be:f0:dd:e8:df:b1:7c:87:16:22:e5:7f:3a:8f:d1:a4:c8:2a:
c4:be:fd:a1:af:dc:e8:ff:78:81:9f:be:45:06:86:53:21:3b:
b6:61:ea:67:ef:ed:23:44:2d:50:29:de:ea:9e:ed:59:3e:86:
90:4f:17:1b:49:f8:be:2f:07:a6:10:10:ec:23:d7:37:00:28:
9a:e7:a6:f1:53:dd:d7:44:dd:9c:dd:e4:fa:98:b7:10:50:16:
b9:a3:fb:0e:51:78:47:e9:8b:4d:17:d8:3a:06:62:e0:1a:db:
a1:a4:3d:d5:e1:4b:9d:0f:f6:82:95:ec:5b:70:8c:04:7d:17:
b5:af:f8:05:a1:6d:18:f7:ae:72:73:3a:70:fc:ce:25:25:c1:
be:8e:a5:a4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAlF/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3NWJjOTQwHhcNMjIwMTIx
MTEwMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyN2M4ZmJjMzY4ZjVm
MWE3YzExZjQ2YjE4NDg2MmZlN2U0Zjc2M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2zWXh87932t8rXbv1zliaJi/VLBgNWkyYgbxkMDwPD5kjGMc
dyDR272z2bCBo7YCen8L5A22ndQyu+YcyRXg3zCdtQsr7026AcpXv7f3plyjH7bI
cDi94MzmOKoWGAT3giijnn0RDrjndmitfvQIyF2qF8WH0pqHGIWGk3yyxIES91Jj
LB+W8lZVHSMxrvdueYcBiLKveaSADVJioSZhY2WxtmFUBCXunm+CxaJrFLwwfSI7
6IKIUpBVu/5SLOH9QLPeMAho7JjzikaKpIRwQ2m/GccO56en+Yx8vSAeyJNafF0n
DZstsWI3tffoIySAy1/OA1VT3+zuJ7gzpSNSQQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCfI+8No9fGnwR9GsYSGL+fk92OmMB8GA1UdIwQYMBaAFLgBwzCUoJkiwKEE
htId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhkLzEv
SjhqN3cyajE4YWZCSDBheGhJWXY1LVQzWTZZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81
YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhkLzEvdUFIRE1KU2dtU0xB
b1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dZMA0GCSqGSIb3DQEBCwUAA4IB
AQAb4BwjDR9MObcB5RnVId8kX//VNidvv+BrEeZTCsdJyKqGntDBnvZmHKs92tG3
NwBXMS4d56ik+f12vm1sxAwAWKtreGMWVLnUtUKZfTCm8GtEqXsp+27wRTKlLIfh
Z3SFR/RT5IvliDO2Rm2+8N3o37F8hxYi5X86j9GkyCrEvv2hr9zo/3iBn75FBoZT
ITu2Yepn7+0jRC1QKd7qnu1ZPoaQTxcbSfi+LwemEBDsI9c3ACia56bxU93XRN2c
3eT6mLcQUBa5o/sOUXhH6YtNF9g6BmLgGtuhpD3V4UudD/aClexbcIwEfRe1r/gF
oW0Y965yczpw/M4lJcG+jqWk
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net