Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Tfgo-MZvJad5_t14FRj0tgQfO5M.roa
File: Tfgo-MZvJad5_t14FRj0tgQfO5M.roa (raw, json)
Hash identifier: /a4twJGO2zqkaQ+jsAqbGAKTOG9A98QxALYQ6ILnX1s=
Subject key identifier: 4D:F8:28:F8:C6:6F:25:A7:79:FE:DD:78:15:18:F4:B6:04:1F:3B:93
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 1509D3B7
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Tfgo-MZvJad5_t14FRj0tgQfO5M.roa
Signing time: Sat 01 Jan 2022 15:54:50 +0000
ROA not before: Sat 01 Jan 2022 15:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352965559 (0x1509d3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 1 15:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4df828f8c66f25a779fedd781518f4b6041f3b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:a2:7f:c1:2c:4d:66:4c:7a:d6:79:ae:e8:
ff:ac:ac:66:7a:bd:e5:c2:ec:26:07:a0:92:a6:e0:
ca:1b:14:a6:ce:ff:1f:cd:fc:ee:7e:a3:c3:bc:10:
21:26:1f:0c:92:40:7c:5b:b0:d4:e6:10:92:8b:c2:
80:63:8f:86:78:a5:08:e7:1c:e9:db:71:78:95:7e:
c3:78:25:da:21:d0:f7:d7:db:ca:6c:63:fc:a8:8b:
a6:ef:58:15:a9:81:b1:b9:4f:10:52:ad:54:eb:b3:
81:81:51:87:e9:c0:ac:39:20:27:04:e6:86:47:df:
1b:04:b2:ba:94:35:5d:3f:06:69:ad:81:37:13:90:
3d:10:c9:b8:07:7b:6a:26:47:40:0e:1a:f8:a4:87:
a5:f6:e8:ab:b9:08:7b:ba:8f:81:74:ca:ea:2e:30:
c8:96:fd:5b:d7:fe:27:41:ef:d5:37:03:09:75:b5:
6f:1c:f9:ee:d1:c6:71:44:65:8d:0c:62:92:65:b5:
9f:56:13:4a:82:42:a5:f1:6e:b9:7e:f9:a7:db:74:
71:75:b8:2f:ba:2b:46:17:93:ad:97:0d:da:63:11:
ef:79:24:d9:5a:47:1e:cf:85:ff:1d:bc:0e:80:7e:
84:17:fe:08:ba:ff:90:ac:9e:7b:77:2e:6e:79:73:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:28:F8:C6:6F:25:A7:79:FE:DD:78:15:18:F4:B6:04:1F:3B:93
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Tfgo-MZvJad5_t14FRj0tgQfO5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:e7:5e:b1:11:02:eb:10:26:cc:27:54:9d:93:1d:9b:db:10:
b2:87:6d:8a:eb:26:db:f9:e6:2c:e5:69:89:d4:1e:fa:c9:20:
91:e0:17:1a:8f:1f:da:2a:16:85:f0:19:dc:74:e6:30:a3:05:
79:49:1d:d4:b0:85:53:4f:0d:00:44:e7:f8:72:1e:2c:ef:9e:
f8:63:82:bc:1c:bc:4f:93:f8:36:98:95:61:cc:25:11:dd:c8:
4b:6b:46:04:02:fa:e7:ee:70:ba:17:9d:1b:b9:f5:69:8b:ae:
20:4c:54:8d:99:8c:f2:87:0b:e1:65:a9:44:d6:75:89:8c:76:
06:59:a9:dc:98:c4:04:e4:4c:49:ef:1d:40:8a:3b:b3:98:99:
bc:5f:6d:d2:ab:fd:a9:51:bb:61:54:1d:ea:fc:54:3c:2d:f1:
fb:98:3b:1a:a3:fc:f2:b8:c2:bb:60:94:00:35:67:86:b8:b5:
c1:02:ea:b9:2a:33:9c:f6:37:10:8b:a1:b1:a0:8b:1f:34:32:
49:80:f8:83:db:43:b6:d1:4a:d0:86:34:8c:d2:fb:db:c4:32:
3d:42:14:ba:c8:b1:f7:d5:ab:bd:55:f4:31:a3:1e:15:04:40:
82:a7:af:d7:07:96:4a:27:54:5e:31:0d:e2:99:52:57:de:d3:
0b:03:7a:5f
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEFQnTtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NzE4MmFhYjVhZDllZmEzODBhNmM2ZjA2YzAxNmUxNThiZTk3N2JjMB4XDTIyMDEw
MTE1NTQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGRmODI4ZjhjNjZm
MjVhNzc5ZmVkZDc4MTUxOGY0YjYwNDFmM2I5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkDon/BLE1mTHrWea7o/6ysZnq95cLsJgegkqbgyhsUps7/
H8387n6jw7wQISYfDJJAfFuw1OYQkovCgGOPhnilCOcc6dtxeJV+w3gl2iHQ99fb
ymxj/KiLpu9YFamBsblPEFKtVOuzgYFRh+nArDkgJwTmhkffGwSyupQ1XT8Gaa2B
NxOQPRDJuAd7aiZHQA4a+KSHpfboq7kIe7qPgXTK6i4wyJb9W9f+J0Hv1TcDCXW1
bxz57tHGcURljQxikmW1n1YTSoJCpfFuuX75p9t0cXW4L7orRheTrZcN2mMR73kk
2VpHHs+F/x28DoB+hBf+CLr/kKyee3cubnlzIRUCAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBRN+Cj4xm8lp3n+3XgVGPS2BB87kzAfBgNVHSMEGDAWgBRXGCqrWtnvo4Cm
xvBsAW4Vi+l3vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Z4Z3FxMXJaNzZPQXBzYndiQUZ1Rll2cGQ3dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvOGM1MWNiLWEzYmQtNDc2ZC04ODBmLWE5NmM2MjY2YWJkYi8x
L1RmZ28tTVp2SmFkNV90MTRGUmowdGdRZk81TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
OGM1MWNiLWEzYmQtNDc2ZC04ODBmLWE5NmM2MjY2YWJkYi8xL1Z4Z3FxMXJaNzZP
QXBzYndiQUZ1Rll2cGQ3dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAI0/MA0GCSqGSIb3DQEBCwUAA4IB
AQA4516xEQLrECbMJ1Sdkx2b2xCyh22K6ybb+eYs5WmJ1B76ySCR4Bcajx/aKhaF
8BncdOYwowV5SR3UsIVTTw0AROf4ch4s7574Y4K8HLxPk/g2mJVhzCUR3chLa0YE
Avrn7nC6F50bufVpi64gTFSNmYzyhwvhZalE1nWJjHYGWancmMQE5ExJ7x1Aijuz
mJm8X23Sq/2pUbthVB3q/FQ8LfH7mDsao/zyuMK7YJQANWeGuLXBAuq5KjOc9jcQ
i6GxoIsfNDJJgPiD20O20UrQhjSM0vvbxDI9QhS6yLH31au9VfQxox4VBECCp6/X
B5ZKJ1ReMQ3imVJX3tMLA3pf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:30 2024 by rpki-client on console-ams.rpki-client.org