Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/tgbJd58bWbzuOu8L4fCp0C6tlpc.roa
File: tgbJd58bWbzuOu8L4fCp0C6tlpc.roa (raw, json)
Hash identifier: oONfxLkLPtWrr9QHHTysYFqewkvs44LIUuKgfa4Ly4k=
Subject key identifier: B6:06:C9:77:9F:1B:59:BC:EE:3A:EF:0B:E1:F0:A9:D0:2E:AD:96:97
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 15B9C77A
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/tgbJd58bWbzuOu8L4fCp0C6tlpc.roa
Signing time: Sat 01 Jan 2022 11:56:29 +0000
ROA not before: Sat 01 Jan 2022 11:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199422
IP address blocks: 185.92.20.0/24 maxlen: 24
77.95.64.0/23 maxlen: 23
77.95.64.0/22 maxlen: 22
77.95.66.0/23 maxlen: 23
2a03:9180:8000::/33 maxlen: 33
2a03:9180::/33 maxlen: 33
2a03:9180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364496762 (0x15b9c77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jan 1 11:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b606c9779f1b59bcee3aef0be1f0a9d02ead9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:fd:8c:36:02:9d:05:ce:38:42:fe:48:97:
5a:c6:ee:a7:ff:98:0e:7e:3d:d7:18:d3:b1:c3:23:
9e:8f:3a:86:0c:34:2d:b4:e3:4d:9c:e9:e5:96:15:
e7:59:7a:8e:20:04:b0:02:4d:cf:11:0e:64:43:9a:
23:2f:34:61:5d:a2:d6:b4:fd:62:59:9b:7c:86:ae:
12:ed:d8:64:60:d9:f4:88:f1:99:b5:69:3e:c8:7c:
3b:18:f1:c0:04:a5:8c:ef:1e:e6:f5:98:18:7b:1a:
f8:f5:9e:28:3d:23:3c:b9:cf:66:fe:18:49:ec:44:
ca:e1:72:34:d8:46:9b:da:bb:d7:b4:f2:76:69:e5:
38:a0:9b:53:e9:6e:d3:e9:7a:45:d6:1f:14:b0:81:
0e:6e:2f:f8:18:36:63:42:bc:b0:04:a4:4a:66:cb:
8e:ac:43:d7:31:b1:1d:c7:43:e9:01:7b:b9:1a:86:
4c:05:2d:2b:2f:ed:97:79:53:97:53:c7:14:9f:fc:
14:db:bc:33:8a:d8:69:28:31:bb:fa:be:96:30:96:
42:af:e8:29:ec:9e:bb:78:2e:39:03:ea:3f:a8:86:
71:84:cc:1f:43:19:cc:22:75:12:07:75:35:4a:d7:
9f:7a:ff:e6:c4:ba:b8:00:12:e6:f0:03:35:02:d6:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:C9:77:9F:1B:59:BC:EE:3A:EF:0B:E1:F0:A9:D0:2E:AD:96:97
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/tgbJd58bWbzuOu8L4fCp0C6tlpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.64.0/22
185.92.20.0/24
IPv6:
2a03:9180::/32
Signature Algorithm: sha256WithRSAEncryption
71:59:27:37:75:1f:56:22:36:c2:42:2a:95:cb:6a:3b:3e:7e:
20:a9:15:e2:ed:fb:14:d4:70:9d:8b:01:47:74:c9:c3:c3:24:
4e:8e:39:e6:fa:29:6b:5c:49:d6:b9:2d:62:7a:ac:85:ff:6e:
9b:e4:dc:12:a2:d9:75:77:7d:eb:38:94:bc:72:fe:a7:a5:4e:
13:32:4a:73:14:fd:a8:4a:a7:44:5a:5c:30:67:bb:49:1f:2f:
36:eb:89:14:bc:70:eb:16:6e:91:68:51:54:cb:78:b5:00:6c:
9c:85:74:59:ef:ff:5a:48:d6:8b:bb:0a:40:ae:59:61:fb:71:
3a:8d:51:fc:e8:99:33:21:5e:9d:d8:53:38:88:a3:af:9a:93:
4e:03:72:8a:2a:fe:11:bd:cd:08:23:78:fe:4c:70:ee:85:cc:
bf:28:c5:7a:12:a4:05:0a:ec:1f:e7:3f:c5:94:39:c7:c9:f7:
5c:58:ab:4d:e7:00:bc:53:05:2b:e8:69:34:00:90:f8:1d:e8:
42:9f:96:e7:da:60:8e:12:e0:6b:fc:6f:07:ea:7a:b4:b5:86:
06:aa:7b:85:6d:24:6f:c1:dd:fa:f3:12:ae:ec:a7:8e:47:60:
4c:02:4c:61:95:43:4b:3f:46:01:8d:76:b5:51:47:dc:37:cf:
2b:41:58:b0
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEFbnHejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTFkNjJiN2ZkOWZjZmM4N2RmZWE5ODc1MTU3NjdjODM4ZTIxYmI5MB4XDTIyMDEw
MTExNTYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjYwNmM5Nzc5ZjFi
NTliY2VlM2FlZjBiZTFmMGE5ZDAyZWFkOTY5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMV/Yw2Ap0FzjhC/kiXWsbup/+YDn491xjTscMjno86hgw0
LbTjTZzp5ZYV51l6jiAEsAJNzxEOZEOaIy80YV2i1rT9YlmbfIauEu3YZGDZ9Ijx
mbVpPsh8OxjxwASljO8e5vWYGHsa+PWeKD0jPLnPZv4YSexEyuFyNNhGm9q717Ty
dmnlOKCbU+lu0+l6RdYfFLCBDm4v+Bg2Y0K8sASkSmbLjqxD1zGxHcdD6QF7uRqG
TAUtKy/tl3lTl1PHFJ/8FNu8M4rYaSgxu/q+ljCWQq/oKeyeu3guOQPqP6iGcYTM
H0MZzCJ1Egd1NUrXn3r/5sS6uAAS5vADNQLWQhsCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBS2Bsl3nxtZvO467wvh8KnQLq2WlzAfBgNVHSMEGDAWgBQxHWK3/Z/PyH3+
qYdRV2fIOOIbuTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01SMWl0XzJmejhoOV9xbUhVVmRueURqaUc3ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNTc2ODhlLWE5NjQtNDkzMy04NjMxLTg1MGYzNDkwNjIyOS8x
L3RnYkpkNThiV2J6dU91OEw0ZkNwMEM2dGxwYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NTc2ODhlLWE5NjQtNDkzMy04NjMxLTg1MGYzNDkwNjIyOS8xL01SMWl0XzJmejho
OV9xbUhVVmRueURqaUc3ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAk1fQAMEALlcFDANBAIAAjAHAwUA
KgORgDANBgkqhkiG9w0BAQsFAAOCAQEAcVknN3UfViI2wkIqlctqOz5+IKkV4u37
FNRwnYsBR3TJw8MkTo455vopa1xJ1rktYnqshf9um+TcEqLZdXd96ziUvHL+p6VO
EzJKcxT9qEqnRFpcMGe7SR8vNuuJFLxw6xZukWhRVMt4tQBsnIV0We//WkjWi7sK
QK5ZYftxOo1R/OiZMyFendhTOIijr5qTTgNyiir+Eb3NCCN4/kxw7oXMvyjFehKk
BQrsH+c/xZQ5x8n3XFirTecAvFMFK+hpNACQ+B3oQp+W59pgjhLga/xvB+p6tLWG
Bqp7hW0kb8Hd+vMSruynjkdgTAJMYZVDSz9GAY12tVFH3DfPK0FYsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org