Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tfVgm2X9UD2V1f_yGRtw2YfjAA4.roa
File: tfVgm2X9UD2V1f_yGRtw2YfjAA4.roa (raw, json)
Hash identifier: qU5QfOEcax2hkZsEe4f/CNLHe4hp1q7re4gSj6oflDI=
Subject key identifier: B5:F5:60:9B:65:FD:50:3D:95:D5:FF:F2:19:1B:70:D9:87:E3:00:0E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 197B38C8
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tfVgm2X9UD2V1f_yGRtw2YfjAA4.roa
Signing time: Fri 03 Jun 2022 14:58:53 +0000
ROA not before: Fri 03 Jun 2022 14:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34653
IP address blocks: 213.91.198.0/24 maxlen: 24
37.157.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427505864 (0x197b38c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 3 14:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f5609b65fd503d95d5fff2191b70d987e3000e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:ee:8b:6a:f9:52:0f:b2:7e:8a:62:29:aa:
43:b9:5d:41:38:23:c8:c6:68:65:40:49:22:f7:8e:
96:ae:af:84:21:3b:4c:7e:8a:fe:d2:9a:47:1d:e8:
20:15:8f:9e:96:88:59:93:77:f8:01:dc:95:74:b3:
38:5b:f9:81:50:92:b5:1b:3d:e6:1a:c9:ba:53:cb:
72:d5:1a:2a:81:fe:6a:73:33:4e:44:1e:d3:53:89:
24:2b:5e:99:49:da:e8:22:1c:17:8a:78:c5:36:18:
1b:db:cc:29:f7:d6:5d:12:d1:c7:28:cd:ae:ea:80:
4f:10:b2:95:b5:d5:96:69:26:a8:79:2a:0a:97:10:
e9:91:fe:a5:9d:24:a9:94:ed:19:3b:5c:06:71:cb:
f2:c6:48:ac:b0:42:47:73:8b:f1:29:51:09:ba:5f:
56:7d:c6:dc:5a:57:f1:2f:87:c8:02:fa:71:48:23:
11:fb:8b:1a:eb:dc:d8:18:35:ca:0d:ef:41:46:47:
9f:7c:9e:bf:e9:55:2c:1e:35:b5:7f:54:2b:6a:c5:
7c:d9:12:f3:6e:9a:66:47:d0:e0:0f:a6:79:2c:4e:
f2:37:2c:87:1a:a7:c7:e1:e1:bc:cd:b3:a4:c1:8f:
01:0d:64:2b:fa:93:93:44:bc:dd:3e:58:ea:f1:ed:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:60:9B:65:FD:50:3D:95:D5:FF:F2:19:1B:70:D9:87:E3:00:0E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tfVgm2X9UD2V1f_yGRtw2YfjAA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.160.0/24
213.91.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:59:86:d7:6f:c8:cd:79:c6:30:89:85:10:09:75:79:5a:60:
b5:b2:b6:a0:c2:67:8d:d9:ef:36:04:13:e9:71:8e:bb:28:a1:
7e:ad:fe:6e:d3:1f:88:d1:88:93:29:9a:4d:ff:15:3e:3c:e1:
cb:eb:58:60:fb:c1:bb:3e:1f:c3:cc:8b:31:83:a3:9f:d0:4b:
c7:8f:65:84:ff:e7:fb:19:90:00:ff:e2:75:ce:14:1a:f5:61:
72:b6:8d:ca:b9:5d:13:c1:54:12:ed:d7:c5:01:31:7d:89:3d:
f7:d5:f2:8e:a7:13:e1:af:7f:29:93:00:77:ec:4f:04:36:fa:
ea:ec:38:02:4f:6f:38:88:e3:95:8f:79:e1:b2:c5:aa:07:e1:
5b:de:7d:8c:c6:46:1d:c8:ab:f1:60:23:91:da:5a:b0:52:17:
05:37:75:c1:2b:eb:75:36:b9:09:a7:b2:2a:61:c8:1d:31:ae:
98:a2:36:d4:47:2e:42:1f:97:5e:28:08:00:ce:d1:c0:f6:a1:
95:39:04:80:c6:28:ef:15:91:e2:70:0d:3a:ea:6d:aa:83:17:
c3:c9:7c:f9:6f:c4:52:78:ec:60:1e:66:3c:9e:aa:41:83:31:
a4:cd:b2:b7:f6:63:2e:b8:5e:f9:ed:fe:4f:c0:e8:0d:3b:32:
3a:3d:07:0b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGXs4yDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIyZjRmYTUxNjNhZjk2MTY4ZTg4ZmJmOWNiNGVkMWVkOGZiNGM0MB4XDTIyMDYw
MzE0NTg1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjVmNTYwOWI2NWZk
NTAzZDk1ZDVmZmYyMTkxYjcwZDk4N2UzMDAwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfv7otq+VIPsn6KYimqQ7ldQTgjyMZoZUBJIveOlq6vhCE7
TH6K/tKaRx3oIBWPnpaIWZN3+AHclXSzOFv5gVCStRs95hrJulPLctUaKoH+anMz
TkQe01OJJCtemUna6CIcF4p4xTYYG9vMKffWXRLRxyjNruqATxCylbXVlmkmqHkq
CpcQ6ZH+pZ0kqZTtGTtcBnHL8sZIrLBCR3OL8SlRCbpfVn3G3FpX8S+HyAL6cUgj
EfuLGuvc2Bg1yg3vQUZHn3yev+lVLB41tX9UK2rFfNkS826aZkfQ4A+meSxO8jcs
hxqnx+HhvM2zpMGPAQ1kK/qTk0S83T5Y6vHtQbUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS19WCbZf1QPZXV//IZG3DZh+MADjAfBgNVHSMEGDAWgBSEsvT6UWOvlhaO
iPv5y07R7Y+0xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMTDAtbEZqcjVZV2pvajctY3RPMGUyUHRNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8x
L3RmVmdtMlg5VUQyVjFmX3lHUnR3MllmakFBNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8xL2hMTDAtbEZqcjVZ
V2pvajctY3RPMGUyUHRNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACWdoAMEANVbxjANBgkqhkiG9w0B
AQsFAAOCAQEATlmG12/IzXnGMImFEAl1eVpgtbK2oMJnjdnvNgQT6XGOuyihfq3+
btMfiNGIkymaTf8VPjzhy+tYYPvBuz4fw8yLMYOjn9BLx49lhP/n+xmQAP/idc4U
GvVhcraNyrldE8FUEu3XxQExfYk999XyjqcT4a9/KZMAd+xPBDb66uw4Ak9vOIjj
lY954bLFqgfhW959jMZGHcir8WAjkdpasFIXBTd1wSvrdTa5CaeyKmHIHTGumKI2
1EcuQh+XXigIAM7RwPahlTkEgMYo7xWR4nANOuptqoMXw8l8+W/EUnjsYB5mPJ6q
QYMxpM2yt/ZjLrhe+e3+T8DoDTsyOj0HCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org