Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa
File: Twkci76EMQfe8RtlyrTQ9xkzeFU.roa (raw, json)
Hash identifier: qdF8fxvINZ3JiSbCdOq/tU2J7s4rePIJPsWzWyx4dWg=
Subject key identifier: 4F:09:1C:8B:BE:84:31:07:DE:F1:1B:65:CA:B4:D0:F7:19:33:78:55
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01822BF3061BF2D299CB115603817CF4DF78
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa
Signing time: Sat 23 Jul 2022 16:45:23 +0000
ROA not before: Sat 23 Jul 2022 16:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2b:f3:06:1b:f2:d2:99:cb:11:56:03:81:7c:f4:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jul 23 16:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f091c8bbe843107def11b65cab4d0f719337855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:f2:a0:93:c0:b2:7f:98:c2:cb:29:4c:cd:
23:17:cf:6e:5b:c8:4e:b9:bf:39:b2:ff:ee:e4:2f:
db:cb:3f:8b:f1:f5:3a:27:c4:f2:8e:66:e8:40:6d:
da:6b:f9:d4:92:c7:b7:55:fd:a5:98:c1:2c:62:8a:
ef:68:25:b8:ae:af:aa:7e:ae:e5:8a:5f:57:17:51:
ba:fe:f1:0c:4b:89:c8:d9:bd:3d:f2:fb:20:f7:a0:
fb:d2:ef:02:4d:c8:6a:c7:db:77:d6:07:47:cb:e2:
94:4a:9f:e7:4c:44:bc:2f:20:8e:8d:83:b6:cb:b7:
d2:47:c7:6c:38:63:d6:37:2b:62:ed:71:7d:8b:d9:
23:e0:65:35:cb:18:c2:7a:b5:80:4c:26:fd:2a:8e:
ae:a7:29:9c:70:3b:2a:5d:2e:16:c9:f0:a2:31:1f:
55:77:14:c3:01:8b:2c:65:da:52:d5:71:8b:69:56:
52:b4:aa:46:4e:25:28:70:51:c9:46:51:73:eb:72:
cf:e9:5b:73:4d:1a:51:d6:98:8f:34:ba:c9:e2:36:
17:d6:9d:f3:73:7b:b9:d3:fb:85:57:f4:8d:d6:be:
50:e3:7e:ac:d1:dd:f7:c1:a9:61:61:6f:04:58:49:
50:e9:43:e6:ed:31:ce:7e:52:2b:44:c7:38:af:d1:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:1C:8B:BE:84:31:07:DE:F1:1B:65:CA:B4:D0:F7:19:33:78:55
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:24:ea:cb:1d:3a:f7:8e:e9:f4:bc:a8:19:de:c3:c6:37:ae:
5f:fc:77:5c:6d:d7:91:81:70:fe:90:b3:d5:98:60:d4:d1:f3:
c1:f4:54:8e:0a:b3:14:29:4e:04:ce:90:cd:d2:22:8c:0f:e0:
6d:fb:d2:17:81:5e:51:0a:84:2f:e4:c0:9b:2e:2b:05:79:17:
f9:50:3a:8f:49:64:dc:73:95:96:0c:e8:78:0d:31:65:c6:28:
1d:52:3c:4b:14:41:39:17:2a:1b:6c:bc:6c:13:d5:71:5c:6f:
2d:55:e1:11:ff:d9:6b:9a:ab:c6:7d:f0:58:af:7a:97:14:f2:
91:50:dd:ef:9d:9c:62:ef:ed:a3:7d:1a:7e:5b:b9:df:03:c3:
fd:5e:30:83:c7:e5:d2:b6:e9:e0:91:e8:ed:f8:a7:c1:69:63:
25:5a:9f:9f:c1:00:02:ba:27:a5:b6:11:d2:ba:4c:b4:69:73:
08:05:56:fe:c0:10:93:75:c8:71:2b:fe:02:71:12:93:be:ec:
00:d3:1f:de:d0:fe:cd:89:71:85:29:6d:57:cc:81:54:c0:d6:
ba:54:e9:bd:c1:48:ce:ca:dc:ed:d6:1e:4f:2a:b3:76:ac:20:
35:3e:33:19:a3:25:0b:9f:e4:08:ef:73:bc:18:22:c9:45:38:
7b:08:77:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIr8wYb8tKZyxFWA4F89N94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjIwNzIzMTY0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjA5MWM4YmJlODQzMTA3ZGVmMTFiNjVjYWI0ZDBmNzE5MzM3ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspnyoJPAsn+YwsspTM0jF89uW8hO
ub85sv/u5C/byz+L8fU6J8TyjmboQG3aa/nUkse3Vf2lmMEsYorvaCW4rq+qfq7l
il9XF1G6/vEMS4nI2b098vsg96D70u8CTchqx9t31gdHy+KUSp/nTES8LyCOjYO2
y7fSR8dsOGPWNyti7XF9i9kj4GU1yxjCerWATCb9Ko6upymccDsqXS4WyfCiMR9V
dxTDAYssZdpS1XGLaVZStKpGTiUocFHJRlFz63LP6VtzTRpR1piPNLrJ4jYX1p3z
c3u50/uFV/SN1r5Q436s0d33walhYW8EWElQ6UPm7THOflIrRMc4r9ED2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8JHIu+hDEH3vEbZcq00PcZM3hVMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvVHdrY2k3NkVNUWZlOFJ0bHlyVFE5eGt6ZUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/nMA0G
CSqGSIb3DQEBCwUAA4IBAQDGJOrLHTr3jun0vKgZ3sPGN65f/HdcbdeRgXD+kLPV
mGDU0fPB9FSOCrMUKU4EzpDN0iKMD+Bt+9IXgV5RCoQv5MCbLisFeRf5UDqPSWTc
c5WWDOh4DTFlxigdUjxLFEE5FyobbLxsE9VxXG8tVeER/9lrmqvGffBYr3qXFPKR
UN3vnZxi7+2jfRp+W7nfA8P9XjCDx+XStungkejt+KfBaWMlWp+fwQACuielthHS
uky0aXMIBVb+wBCTdchxK/4CcRKTvuwA0x/e0P7NiXGFKW1XzIFUwNa6VOm9wUjO
ytzt1h5PKrN2rCA1PjMZoyULn+QI73O8GCLJRTh7CHcB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org