Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa
File: tbNuue1rGf02SNv9JAeOfJDYhgM.roa (raw, json)
Hash identifier: A/20dPJN2QoafTy4DLIjZXBR3iTe5MHDWbiocEb7LyI=
Subject key identifier: B5:B3:6E:B9:ED:6B:19:FD:36:48:DB:FD:24:07:8E:7C:90:D8:86:03
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181CEA5EB6E237602949887D4DB2BF6F91C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa
Signing time: Tue 05 Jul 2022 13:56:29 +0000
ROA not before: Tue 05 Jul 2022 13:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.207.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:a5:eb:6e:23:76:02:94:98:87:d4:db:2b:f6:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 13:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5b36eb9ed6b19fd3648dbfd24078e7c90d88603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:e1:fc:d0:9f:d4:9f:ad:a7:85:79:e7:2b:
fc:f1:f3:93:d6:79:11:d8:10:6b:a4:1a:24:d8:68:
aa:e1:3f:ba:52:fa:84:f5:3a:5e:83:4c:9d:55:f6:
05:16:7e:88:e9:c8:34:fb:fa:2b:89:3d:98:00:20:
8a:54:ea:f5:48:4c:ae:ee:a3:48:87:bc:71:70:a2:
b3:1c:96:5d:e2:0f:62:da:7d:41:05:ec:23:7a:03:
52:65:71:a1:f1:67:68:2b:dd:4c:81:43:f7:5b:e1:
bf:d1:ac:7b:52:ba:28:cb:d2:38:61:8d:11:af:68:
11:d8:28:1f:51:98:72:c7:c6:c3:31:35:8d:fc:3c:
bf:f9:07:5c:8b:c1:70:89:6f:8a:87:bd:c5:e6:e3:
3c:fe:98:94:d7:ff:24:d0:42:91:ef:92:5b:5c:98:
e9:85:4e:2e:ae:8f:e3:47:f7:c0:2d:99:3e:03:70:
f7:3f:fb:db:93:1f:10:58:29:e2:e3:22:80:af:ad:
36:2f:da:25:c5:d6:7d:64:5d:1a:b2:e8:3c:76:8f:
d0:24:b1:f9:55:44:da:3d:02:60:2a:62:85:4a:ff:
80:3c:c2:5c:87:77:c9:ad:06:15:89:c5:84:37:66:
e1:31:29:6c:f4:b7:be:b9:7b:dc:77:0d:76:8d:84:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:6E:B9:ED:6B:19:FD:36:48:DB:FD:24:07:8E:7C:90:D8:86:03
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:87:5b:11:e7:b7:d5:db:57:db:0c:a1:9d:aa:ad:89:34:70:
5b:b1:85:91:55:c7:1f:6e:a6:dd:7f:8c:4e:58:53:49:98:64:
48:01:4f:67:a9:1c:8f:31:6d:d3:fd:03:1a:49:0a:3a:69:4b:
83:8e:89:6e:5a:ef:83:2a:a1:e6:38:da:23:5a:0e:84:f7:bb:
d8:7e:d2:db:80:34:79:77:61:af:56:d6:ff:16:2c:59:1f:08:
0c:14:92:c5:ab:9d:b9:1b:b0:83:11:31:c6:77:3d:dc:fe:de:
71:67:eb:96:b1:a0:89:0c:50:d6:dc:df:b7:ce:9c:7c:6a:05:
da:46:74:43:f9:3f:99:22:f0:9e:b2:13:30:4b:05:03:57:c3:
aa:e6:35:39:b8:0e:a4:26:c7:9b:be:3b:70:ec:51:a3:79:3e:
df:6a:7e:b6:9f:54:77:53:c4:56:db:6d:57:27:e6:2c:5f:73:
30:3a:f4:0c:9a:72:30:6b:7a:c8:e8:45:c7:8d:15:68:05:44:
98:96:fa:19:00:f0:86:b2:43:d6:15:ac:e1:fb:29:0a:8c:44:
17:55:b0:44:30:72:88:c2:62:a4:b0:77:f8:9e:2b:71:cd:3e:
17:13:59:8b:46:c4:00:bc:8d:b6:1d:fe:64:a3:69:e9:a2:6a:
75:89:33:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHOpetuI3YClJiH1Nsr9vkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwNzA1MTM1NjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWIzNmViOWVkNmIxOWZkMzY0OGRiZmQyNDA3OGU3YzkwZDg4NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAbh/NCf1J+tp4V55yv88fOT1nkR
2BBrpBok2Giq4T+6UvqE9Tpeg0ydVfYFFn6I6cg0+/oriT2YACCKVOr1SEyu7qNI
h7xxcKKzHJZd4g9i2n1BBewjegNSZXGh8WdoK91MgUP3W+G/0ax7Urooy9I4YY0R
r2gR2CgfUZhyx8bDMTWN/Dy/+Qdci8FwiW+Kh73F5uM8/piU1/8k0EKR75JbXJjp
hU4uro/jR/fALZk+A3D3P/vbkx8QWCni4yKAr602L9olxdZ9ZF0asug8do/QJLH5
VUTaPQJgKmKFSv+APMJch3fJrQYVicWEN2bhMSls9Le+uXvcdw12jYSlPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWzbrntaxn9Nkjb/SQHjnyQ2IYDMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdGJOdXVlMXJHZjAyU052OUpBZU9mSkRZaGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc8MMA0G
CSqGSIb3DQEBCwUAA4IBAQBdh1sR57fV21fbDKGdqq2JNHBbsYWRVccfbqbdf4xO
WFNJmGRIAU9nqRyPMW3T/QMaSQo6aUuDjoluWu+DKqHmONojWg6E97vYftLbgDR5
d2GvVtb/FixZHwgMFJLFq525G7CDETHGdz3c/t5xZ+uWsaCJDFDW3N+3zpx8agXa
RnRD+T+ZIvCeshMwSwUDV8Oq5jU5uA6kJsebvjtw7FGjeT7fan62n1R3U8RW221X
J+YsX3MwOvQMmnIwa3rI6EXHjRVoBUSYlvoZAPCGskPWFazh+ykKjEQXVbBEMHKI
wmKksHf4nitxzT4XE1mLRsQAvI22Hf5ko2npomp1iTM8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:49 2023 by rpki-client on console-fra.rpki-client.org