Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/dVtYPnWT23KeZs44HWucj4c1oZk.roa
File: dVtYPnWT23KeZs44HWucj4c1oZk.roa (raw, json)
Hash identifier: Oave2rCOWS7LxJsvanRdmStVXbd2fcwz9WgeLbuNqaA=
Subject key identifier: 75:5B:58:3E:75:93:DB:72:9E:66:CE:38:1D:6B:9C:8F:87:35:A1:99
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 978A1C
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/dVtYPnWT23KeZs44HWucj4c1oZk.roa
Signing time: Sat 01 Jan 2022 01:55:45 +0000
ROA not before: Sat 01 Jan 2022 01:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48367
IP address blocks: 91.210.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9931292 (0x978a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jan 1 01:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=755b583e7593db729e66ce381d6b9c8f8735a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:5c:49:ac:e9:99:27:b7:c1:61:15:7b:42:
b4:e4:b1:c8:87:9e:03:88:25:ac:82:e4:36:93:b2:
90:5c:fa:e4:4e:5a:8a:9c:30:ed:e4:55:39:9a:5a:
41:a0:ea:ca:e8:ae:c3:02:5b:6c:c1:ad:eb:45:e7:
81:d9:50:2a:db:db:cf:85:f9:06:32:d3:b0:b6:fa:
a9:3a:91:6b:89:49:5c:0b:de:9a:6b:30:2b:09:55:
2d:a6:13:c3:51:7a:b6:37:92:c4:c5:a8:78:40:95:
ca:34:f0:ed:e4:89:c8:38:e6:07:a2:33:90:92:07:
9a:ed:4b:b4:66:22:54:66:f7:c4:34:45:e5:89:a7:
8e:53:7c:11:82:e7:88:70:94:d9:38:a9:aa:b4:e8:
6c:60:08:23:b7:d5:80:06:15:8b:48:89:1c:8e:e7:
43:c4:7a:a7:31:01:8a:70:a0:d5:c2:32:c0:a4:4a:
05:c9:d9:ef:83:b2:60:4c:ac:97:7e:0a:cc:f1:83:
25:bb:62:8f:a6:87:3e:ad:c9:fc:47:fb:ad:17:39:
f6:5c:21:2a:36:b1:39:22:2e:f2:2f:44:2c:bf:85:
57:b4:bc:7d:a1:bc:e5:71:5f:09:82:3a:7a:62:cd:
eb:c6:6f:ce:dd:bf:1f:56:10:27:79:da:2a:49:48:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:58:3E:75:93:DB:72:9E:66:CE:38:1D:6B:9C:8F:87:35:A1:99
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/dVtYPnWT23KeZs44HWucj4c1oZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.220.0/22
Signature Algorithm: sha256WithRSAEncryption
61:ae:74:4a:9d:5e:f5:de:1c:d9:05:00:d6:e2:15:08:fe:3b:
eb:d1:65:da:82:6b:cc:cb:83:d6:36:bf:d8:13:b3:b0:88:d8:
b6:31:1f:30:24:bf:fb:a0:7d:1e:3e:a4:41:1d:e3:fa:79:75:
e3:c5:90:5a:52:da:51:4f:dd:1e:ce:f9:6f:15:09:99:0c:be:
8f:3b:ec:1a:fd:5a:aa:3a:50:05:e1:3b:89:63:e5:ce:10:64:
4c:10:18:ef:9c:45:75:33:94:0f:bf:1b:bc:6f:2a:48:fd:85:
00:36:64:ac:6d:3a:49:a0:0b:13:b3:ef:ed:7b:57:a3:5c:f8:
ea:46:3e:77:9c:34:22:de:70:6b:22:0c:a9:4e:64:18:a4:56:
ea:4d:22:28:41:28:24:33:62:5f:b9:9c:e3:58:87:9e:e4:72:
ab:4d:88:da:a6:a4:92:67:0e:a3:b0:a5:90:c2:e5:8f:18:61:
7d:61:9d:06:0b:33:f9:8a:eb:20:90:33:70:6f:32:1b:13:4c:
d6:b3:a5:6a:f3:16:c8:48:71:13:ee:96:2f:ca:32:84:d6:9c:
c0:35:e2:0f:11:0e:3e:57:d1:fb:07:75:bc:60:0d:15:5c:5c:
85:e6:0c:42:53:1a:4a:82:67:de:6e:ac:4c:53:e4:e3:6c:10:
f5:14:d4:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJeKHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MjJkNTUzYjI4YzVkMGVhNWIxZWY2MGM5YmNlMzNkZjUwYmNiNDkzMB4XDTIyMDEw
MTAxNTU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU1YjU4M2U3NTkz
ZGI3MjllNjZjZTM4MWQ2YjljOGY4NzM1YTE5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALo/XEms6Zknt8FhFXtCtOSxyIeeA4glrILkNpOykFz65E5a
ipww7eRVOZpaQaDqyuiuwwJbbMGt60XngdlQKtvbz4X5BjLTsLb6qTqRa4lJXAve
mmswKwlVLaYTw1F6tjeSxMWoeECVyjTw7eSJyDjmB6IzkJIHmu1LtGYiVGb3xDRF
5YmnjlN8EYLniHCU2TipqrTobGAII7fVgAYVi0iJHI7nQ8R6pzEBinCg1cIywKRK
BcnZ74OyYEysl34KzPGDJbtij6aHPq3J/Ef7rRc59lwhKjaxOSIu8i9ELL+FV7S8
faG85XFfCYI6emLN68Zvzt2/H1YQJ3naKklIwhkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR1W1g+dZPbcp5mzjgda5yPhzWhmTAfBgNVHSMEGDAWgBTCLVU7KMXQ6lse
9gybzjPfULy0kzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dpMVZPeWpGME9wYkh2WU1tODR6MzFDOHRKTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvZTE3NjQ0LTkzZDQtNDQ1Ny04ZTVlLTk2NzUwNjg4NTdmMS8x
L2RWdFlQbldUMjNLZVpzNDRIV3VjajRjMW9aay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
ZTE3NjQ0LTkzZDQtNDQ1Ny04ZTVlLTk2NzUwNjg4NTdmMS8xL3dpMVZPeWpGME9w
Ykh2WU1tODR6MzFDOHRKTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvS3DANBgkqhkiG9w0BAQsFAAOC
AQEAYa50Sp1e9d4c2QUA1uIVCP4769Fl2oJrzMuD1ja/2BOzsIjYtjEfMCS/+6B9
Hj6kQR3j+nl148WQWlLaUU/dHs75bxUJmQy+jzvsGv1aqjpQBeE7iWPlzhBkTBAY
75xFdTOUD78bvG8qSP2FADZkrG06SaALE7Pv7XtXo1z46kY+d5w0It5wayIMqU5k
GKRW6k0iKEEoJDNiX7mc41iHnuRyq02I2qakkmcOo7ClkMLljxhhfWGdBgsz+Yrr
IJAzcG8yGxNM1rOlavMWyEhxE+6WL8oyhNacwDXiDxEOPlfR+wd1vGANFVxcheYM
QlMaSoJn3m6sTFPk42wQ9RTU/g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net