Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TGxeEU-7slwd9kEECV2PwFcS1Xc.roa
File: TGxeEU-7slwd9kEECV2PwFcS1Xc.roa (raw, json)
Hash identifier: uLrCbW5EvHgIoJBRNG02qNfuy6G7VpDpkHHD8TfndCE=
Subject key identifier: 4C:6C:5E:11:4F:BB:B2:5C:1D:F6:41:04:09:5D:8F:C0:57:12:D5:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018282657071ADCD3702532FB646364CA791
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TGxeEU-7slwd9kEECV2PwFcS1Xc.roa
Signing time: Tue 09 Aug 2022 11:37:42 +0000
ROA not before: Tue 09 Aug 2022 11:37:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:65:70:71:ad:cd:37:02:53:2f:b6:46:36:4c:a7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 9 11:37:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6c5e114fbbb25c1df64104095d8fc05712d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:5c:67:29:89:b3:70:8e:6a:7b:7c:0c:dd:
06:85:96:9a:a1:7d:01:b6:69:48:f2:45:21:72:48:
67:6d:c9:4d:86:e5:58:a8:1d:ee:85:42:a3:50:57:
36:3b:15:21:dd:f9:08:e9:9b:fe:5a:48:48:95:2c:
24:8f:f3:71:f9:9d:61:07:26:29:07:5c:3d:56:54:
8b:27:21:88:4f:a4:ec:88:7f:23:e3:76:10:09:a5:
cb:45:bf:bc:cd:8d:ed:4e:4c:c3:6d:19:cf:84:b2:
85:f2:24:53:1e:73:5a:c5:a7:3e:05:ad:a0:3f:7c:
17:d6:18:79:e8:7f:ab:ff:ed:f8:80:68:93:dc:5f:
53:02:c1:7e:e9:a9:1c:86:77:b1:57:c0:73:a8:fb:
3c:40:18:db:04:8d:91:7c:dc:8e:2e:91:32:c2:c7:
ee:78:56:da:b8:be:d1:21:f2:45:6b:89:91:ef:5f:
5a:fa:89:ad:16:c9:fe:c7:6b:52:c8:8a:db:dc:98:
bd:21:60:af:0d:a7:b1:e0:59:92:a0:7f:95:c3:bd:
1f:ff:2f:c2:cf:47:38:54:45:02:a0:d7:0e:8e:50:
d7:2b:89:64:76:b8:01:2d:3d:fc:4f:69:d3:03:4f:
ae:f3:43:e4:86:26:81:72:73:48:82:7c:8c:de:aa:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:5E:11:4F:BB:B2:5C:1D:F6:41:04:09:5D:8F:C0:57:12:D5:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TGxeEU-7slwd9kEECV2PwFcS1Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.0.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b3:3f:6c:f9:b2:ae:3e:3b:c1:82:33:e3:7e:b0:d5:92:d4:
d0:5f:88:85:6f:09:22:e6:9a:1d:14:bf:eb:76:e1:0f:2b:cb:
1f:35:aa:24:27:7e:a8:e9:f8:98:38:6d:6f:ae:e5:09:e1:77:
d3:00:f4:e2:0c:2b:1b:0f:b7:14:5f:84:2a:ae:57:7f:3b:34:
d2:36:38:26:ae:21:56:8e:97:42:60:54:7d:1a:57:17:50:96:
32:a3:75:85:7b:c2:b5:7a:80:3b:f6:b0:69:d0:e5:06:f7:a3:
9e:f8:82:d3:e6:a3:0a:bc:ef:87:c0:95:47:e0:a7:b7:11:55:
43:4c:85:2c:ad:0a:d0:5f:4e:46:ac:73:96:34:c5:96:33:e0:
e5:f6:1f:a5:6e:e2:20:d1:98:a0:09:41:d1:2c:01:b7:8b:19:
0a:41:6c:58:da:27:f7:ce:a5:53:53:3e:93:a2:d2:20:3c:94:
1f:7e:bc:f4:6d:01:25:12:2d:8c:dd:8e:f9:9c:6e:88:02:48:
35:0d:75:d2:2d:ee:69:af:f2:cd:cb:f2:30:4d:94:a8:e5:6d:
4b:45:23:5c:76:d3:bb:de:a2:2e:da:92:9d:e5:01:a4:7f:2a:
d3:26:6b:b9:07:73:6a:00:7e:54:07:49:d0:e3:61:c3:74:48:
3a:52:09:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKCZXBxrc03AlMvtkY2TKeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwODA5MTEzNzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzZjNWUxMTRmYmJiMjVjMWRmNjQxMDQwOTVkOGZjMDU3MTJkNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk21cZymJs3COant8DN0GhZaaoX0B
tmlI8kUhckhnbclNhuVYqB3uhUKjUFc2OxUh3fkI6Zv+WkhIlSwkj/Nx+Z1hByYp
B1w9VlSLJyGIT6TsiH8j43YQCaXLRb+8zY3tTkzDbRnPhLKF8iRTHnNaxac+Ba2g
P3wX1hh56H+r/+34gGiT3F9TAsF+6akchnexV8BzqPs8QBjbBI2RfNyOLpEywsfu
eFbauL7RIfJFa4mR719a+omtFsn+x2tSyIrb3Ji9IWCvDaex4FmSoH+Vw70f/y/C
z0c4VEUCoNcOjlDXK4lkdrgBLT38T2nTA0+u80PkhiaBcnNIgnyM3qpbbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExsXhFPu7JcHfZBBAldj8BXEtV3MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVEd4ZUVVLTdzbHdkOWtFRUNWMlB3RmNTMVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UAMA0G
CSqGSIb3DQEBCwUAA4IBAQB0sz9s+bKuPjvBgjPjfrDVktTQX4iFbwki5podFL/r
duEPK8sfNaokJ36o6fiYOG1vruUJ4XfTAPTiDCsbD7cUX4Qqrld/OzTSNjgmriFW
jpdCYFR9GlcXUJYyo3WFe8K1eoA79rBp0OUG96Oe+ILT5qMKvO+HwJVH4Ke3EVVD
TIUsrQrQX05GrHOWNMWWM+Dl9h+lbuIg0ZigCUHRLAG3ixkKQWxY2if3zqVTUz6T
otIgPJQffrz0bQElEi2M3Y75nG6IAkg1DXXSLe5pr/LNy/IwTZSo5W1LRSNcdtO7
3qIu2pKd5QGkfyrTJmu5B3NqAH5UB0nQ42HDdEg6Ugnl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org