Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/oftzB7NNn2bVUIV3BFRg4kLdxK4.roa
File: oftzB7NNn2bVUIV3BFRg4kLdxK4.roa (raw, json)
Hash identifier: QqiyjPrPessJBFyf+7V61gDG2c0EEZqrl4KX/mrwxRM=
Subject key identifier: A1:FB:73:07:B3:4D:9F:66:D5:50:85:77:04:54:60:E2:42:DD:C4:AE
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 0D1D1E
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/oftzB7NNn2bVUIV3BFRg4kLdxK4.roa
Signing time: Sat 01 Jan 2022 01:02:08 +0000
ROA not before: Sat 01 Jan 2022 01:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209907
IP address blocks: 91.228.217.0/24 maxlen: 24
176.121.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859422 (0xd1d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Jan 1 01:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1fb7307b34d9f66d5508577045460e242ddc4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:1f:2c:cb:a4:d9:e8:95:92:5e:25:ee:e4:
56:b9:c6:1d:63:86:39:04:6e:20:e1:56:12:48:53:
72:29:0e:b5:83:18:e3:fb:b0:ae:e5:ee:66:68:ea:
9f:a1:42:e3:be:7e:1b:0f:2d:18:60:77:80:15:16:
6f:93:e9:98:ec:3a:65:2e:86:87:da:ee:4f:d6:9d:
85:15:17:3b:20:e6:08:ad:ef:0b:f7:43:b0:0e:5c:
8c:6a:68:d2:3b:ab:65:8f:83:c6:98:8d:d5:3a:89:
eb:96:ca:d6:a4:4b:d9:d4:c3:e1:6e:1c:92:5b:21:
a2:9e:86:81:de:0a:95:eb:8c:19:2c:38:db:f9:33:
66:4e:f4:b3:2c:21:75:e0:f4:79:63:89:22:96:c7:
b5:da:d2:02:0c:50:48:6b:cc:a4:dd:88:f0:b1:e4:
12:63:93:9d:14:4a:71:bc:8f:41:e6:a8:42:9c:be:
a1:71:b5:0c:f0:a5:ee:57:1f:98:57:77:37:f5:e4:
d5:97:51:ac:68:0b:3d:16:f5:30:3c:ed:0d:b8:78:
74:9a:bf:01:18:fd:3a:d5:2b:fc:bb:bf:93:87:d1:
98:fb:d8:9d:6d:c6:3d:58:7f:9a:45:35:c0:44:16:
26:8c:97:a4:8d:be:0b:c4:6e:ea:1b:0e:91:f7:b1:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:73:07:B3:4D:9F:66:D5:50:85:77:04:54:60:E2:42:DD:C4:AE
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/oftzB7NNn2bVUIV3BFRg4kLdxK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.217.0/24
176.121.1.0/24
Signature Algorithm: sha256WithRSAEncryption
80:be:5a:b9:08:5f:a9:89:46:51:bf:62:4b:e4:7a:e5:c4:cf:
48:a3:33:9f:fa:6a:06:88:32:c7:54:58:79:70:c6:b5:f8:ba:
7a:10:27:ec:66:10:80:66:66:31:f9:69:10:b7:0b:d1:01:74:
07:61:e4:f3:e2:52:13:5a:8a:2e:64:e1:3e:8f:f7:e4:99:4d:
8e:ac:84:1a:01:03:09:a0:71:d1:5b:9a:38:5b:67:03:3a:75:
7c:33:9f:23:90:59:08:38:f4:46:81:59:31:a5:c2:0a:df:08:
8a:b2:a2:b2:6f:cf:3e:90:a2:59:da:04:48:21:6f:cc:a3:e8:
45:c1:6d:9e:e7:e0:6a:69:d7:72:43:e5:53:95:5b:93:ee:a6:
df:6b:0b:18:3f:7b:d9:31:1d:89:1b:88:1c:be:66:f7:c4:c4:
a2:8e:32:5e:51:c8:57:2c:a1:3f:be:22:5a:eb:94:6c:0e:c1:
6e:db:af:f6:f5:01:8b:d3:bd:c6:8f:ce:80:80:49:ab:52:57:
29:b0:5e:52:b3:f6:6d:8f:d6:ec:d2:34:3d:c3:0c:1c:28:6d:
29:2c:9c:f4:06:f3:a6:88:47:b5:a7:5e:fe:16:13:2e:f7:b0:
62:0d:9b:9b:7e:7e:3a:59:ce:00:8f:ae:44:ac:fc:0e:9c:9f:
76:1c:3a:06
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDDR0eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3NGYxNDcwHhcNMjIwMTAx
MDEwMjA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMWZiNzMwN2IzNGQ5
ZjY2ZDU1MDg1NzcwNDU0NjBlMjQyZGRjNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsSwfLMuk2eiVkl4l7uRWucYdY4Y5BG4g4VYSSFNyKQ61gxjj
+7Cu5e5maOqfoULjvn4bDy0YYHeAFRZvk+mY7DplLoaH2u5P1p2FFRc7IOYIre8L
90OwDlyMamjSO6tlj4PGmI3VOonrlsrWpEvZ1MPhbhySWyGinoaB3gqV64wZLDjb
+TNmTvSzLCF14PR5Y4kilse12tICDFBIa8yk3YjwseQSY5OdFEpxvI9B5qhCnL6h
cbUM8KXuVx+YV3c39eTVl1GsaAs9FvUwPO0NuHh0mr8BGP061Sv8u7+Th9GY+9id
bcY9WH+aRTXARBYmjJekjb4LxG7qGw6R97G3lwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFKH7cwezTZ9m1VCFdwRUYOJC3cSuMB8GA1UdIwQYMBaAFMcucWNT7HM6tLUI
UwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3LzEv
b2Z0ekI3Tk5uMmJWVUlWM0JGUmc0a0xkeEs0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9j
NDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEw
dFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+TZAwQAsHkBMA0GCSqGSIb3DQEB
CwUAA4IBAQCAvlq5CF+piUZRv2JL5HrlxM9IozOf+moGiDLHVFh5cMa1+Lp6ECfs
ZhCAZmYx+WkQtwvRAXQHYeTz4lITWoouZOE+j/fkmU2OrIQaAQMJoHHRW5o4W2cD
OnV8M58jkFkIOPRGgVkxpcIK3wiKsqKyb88+kKJZ2gRIIW/Mo+hFwW2e5+Bqaddy
Q+VTlVuT7qbfawsYP3vZMR2JG4gcvmb3xMSijjJeUchXLKE/viJa65RsDsFu26/2
9QGL073Gj86AgEmrUlcpsF5Ss/Ztj9bs0jQ9wwwcKG0pLJz0BvOmiEe1p17+FhMu
97BiDZubfn46Wc4Aj65ErPwOnJ92HDoG
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net