Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vqwvGoivaEUwiTbEhC-vDwEDLCI.roa
File: vqwvGoivaEUwiTbEhC-vDwEDLCI.roa (raw, json)
Hash identifier: ASSoUV9LjWbdJx7bYo4bc6DBA5mJob0+/x0Lk6MnYgc=
Subject key identifier: BE:AC:2F:1A:88:AF:68:45:30:89:36:C4:84:2F:AF:0F:01:03:2C:22
Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial: 0F6C3530
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vqwvGoivaEUwiTbEhC-vDwEDLCI.roa
Signing time: Sat 01 Jan 2022 03:53:46 +0000
ROA not before: Sat 01 Jan 2022 03:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42473
IP address blocks: 91.208.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258749744 (0xf6c3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
Validity
Not Before: Jan 1 03:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beac2f1a88af6845308936c4842faf0f01032c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:0f:43:75:30:4b:95:96:08:88:85:40:27:
fd:b9:81:16:c4:ab:64:87:05:a8:1d:d6:90:10:35:
e2:33:0e:9c:41:c0:09:47:9f:c7:7c:32:c4:9d:bf:
5d:0e:0c:8d:3a:ca:46:f9:ea:c3:65:83:41:a0:fe:
76:c6:0e:20:1a:c2:40:10:0f:50:d6:2d:a9:5b:9e:
22:40:e5:f2:24:16:ce:9c:94:70:db:db:e9:ca:82:
0d:92:d2:0c:1d:55:05:52:48:f4:92:74:23:f5:a2:
90:7c:20:da:12:26:13:4b:29:7e:bb:78:c4:55:d0:
9f:8e:f6:d9:4e:b4:6c:a1:69:58:7d:89:74:8d:c1:
37:5c:6d:17:78:81:13:90:10:96:19:c4:6d:8e:99:
8b:62:6e:04:91:b9:bf:46:44:c5:e1:a6:ac:57:f3:
2a:a7:19:4d:1a:ad:aa:f7:8a:95:91:eb:db:38:11:
d6:13:a1:0c:19:5e:4e:0b:78:5d:36:89:06:95:4e:
5d:92:c2:6d:9b:84:6b:4e:1f:d2:ac:30:40:05:c7:
8c:47:b6:21:74:c1:01:90:94:71:2d:58:62:b0:7b:
55:59:96:8b:14:bc:af:60:5a:72:1e:a9:49:b6:24:
d5:43:d3:ac:c9:0c:3b:50:4a:e9:88:46:79:ae:27:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:2F:1A:88:AF:68:45:30:89:36:C4:84:2F:AF:0F:01:03:2C:22
X509v3 Authority Key Identifier:
keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/vqwvGoivaEUwiTbEhC-vDwEDLCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:04:ee:b1:d7:b9:79:cc:c1:19:ac:8f:a2:7b:7e:b3:ec:2b:
a5:e4:22:c0:88:27:0c:02:32:45:7b:55:e4:ae:e9:44:f7:17:
79:fa:7b:d0:5a:67:fd:f5:d1:a2:37:15:28:e9:c0:9f:48:ce:
27:23:02:41:0f:3d:0d:6d:72:ac:5e:26:d8:3d:e9:32:82:69:
cb:1e:a8:6c:c1:8b:9d:48:d3:d2:da:51:35:02:15:32:da:47:
7b:80:77:d1:8c:82:68:53:57:9f:31:6c:39:85:b2:94:91:69:
cc:23:5b:86:55:83:fb:cb:3b:52:34:05:ad:ec:eb:e7:60:27:
98:58:d7:4b:c4:e9:02:5b:72:8b:95:63:e6:e3:49:10:b7:55:
47:d7:96:65:a5:f7:9c:8e:19:e0:87:6f:8b:a0:ec:7b:3a:95:
e0:4c:be:c8:1c:38:44:c9:fd:05:be:3a:09:6e:26:f6:d9:09:
15:7a:d9:4e:96:05:e5:b0:ad:19:5f:84:b2:54:f6:f3:f2:fe:
d9:19:b9:4c:4a:2a:e8:d2:b0:16:86:79:ad:9f:21:37:13:de:
3c:96:1d:46:26:64:40:3c:30:6a:f9:c5:36:a8:98:65:72:d3:
70:13:1b:57:c0:4e:1f:82:3d:1c:ac:db:11:56:25:e7:4e:d5:
fc:f9:f7:74
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED2w1MDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTNmMTc1NDE3MzJmNTdhYmZmMTI5NGM3MWI1MzNlYjU2NzQ2ZmQ2MB4XDTIyMDEw
MTAzNTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmVhYzJmMWE4OGFm
Njg0NTMwODkzNmM0ODQyZmFmMGYwMTAzMmMyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOEtD0N1MEuVlgiIhUAn/bmBFsSrZIcFqB3WkBA14jMOnEHA
CUefx3wyxJ2/XQ4MjTrKRvnqw2WDQaD+dsYOIBrCQBAPUNYtqVueIkDl8iQWzpyU
cNvb6cqCDZLSDB1VBVJI9JJ0I/WikHwg2hImE0spfrt4xFXQn4722U60bKFpWH2J
dI3BN1xtF3iBE5AQlhnEbY6Zi2JuBJG5v0ZExeGmrFfzKqcZTRqtqveKlZHr2zgR
1hOhDBleTgt4XTaJBpVOXZLCbZuEa04f0qwwQAXHjEe2IXTBAZCUcS1YYrB7VVmW
ixS8r2Bach6pSbYk1UPTrMkMO1BK6YhGea4nCF0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+rC8aiK9oRTCJNsSEL68PAQMsIjAfBgNVHSMEGDAWgBTBPxdUFzL1er/x
KUxxtTPrVnRv1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dUOFhWQmN5OVhxXzhTbE1jYlV6NjFaMGI5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvODhhNTVkLTUxNjMtNDMzZS1iNDc4LWQ4YTFjMzI5NWU4OS8x
L3Zxd3ZHb2l2YUVVd2lUYkVoQy12RHdFRExDSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
ODhhNTVkLTUxNjMtNDMzZS1iNDc4LWQ4YTFjMzI5NWU4OS8xL3dUOFhWQmN5OVhx
XzhTbE1jYlV6NjFaMGI5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvQ2TANBgkqhkiG9w0BAQsFAAOC
AQEApgTusde5eczBGayPont+s+wrpeQiwIgnDAIyRXtV5K7pRPcXefp70Fpn/fXR
ojcVKOnAn0jOJyMCQQ89DW1yrF4m2D3pMoJpyx6obMGLnUjT0tpRNQIVMtpHe4B3
0YyCaFNXnzFsOYWylJFpzCNbhlWD+8s7UjQFrezr52AnmFjXS8TpAltyi5Vj5uNJ
ELdVR9eWZaX3nI4Z4Idvi6DsezqV4Ey+yBw4RMn9Bb46CW4m9tkJFXrZTpYF5bCt
GV+EslT28/L+2Rm5TEoq6NKwFoZ5rZ8hNxPePJYdRiZkQDwwavnFNqiYZXLTcBMb
V8BOH4I9HKzbEVYl507V/Pn3dA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net