Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TqVlyPu0iqCtI3IRJjLwfJc_MQI.roa
File: TqVlyPu0iqCtI3IRJjLwfJc_MQI.roa (raw, json)
Hash identifier: V7xKhRQJc1IP0ONMyGgmmVOzjfojIe8w1zVAYi/E6aI=
Subject key identifier: 4E:A5:65:C8:FB:B4:8A:A0:AD:23:72:11:26:32:F0:7C:97:3F:31:02
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01827C91C33223B1B1E5D577D0DE8C47F74E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TqVlyPu0iqCtI3IRJjLwfJc_MQI.roa
Signing time: Mon 08 Aug 2022 08:28:23 +0000
ROA not before: Mon 08 Aug 2022 08:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:91:c3:32:23:b1:b1:e5:d5:77:d0:de:8c:47:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 08:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ea565c8fbb48aa0ad2372112632f07c973f3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:4b:b7:a8:c8:75:18:c1:cd:c7:02:39:f1:
31:f1:ef:6d:d0:e0:bd:5f:b1:de:13:7b:fd:1e:9b:
b2:7a:d4:fe:e5:c4:c1:da:e4:66:88:ec:fc:c2:62:
89:08:27:2b:9e:5f:8c:7c:fb:5a:01:8c:59:67:ca:
b7:c1:2e:52:17:e4:7e:b1:d6:51:34:19:98:29:c1:
38:64:f8:ee:bc:5b:8a:d9:7f:45:1c:4e:d4:2f:44:
7e:f7:77:e9:af:39:e6:50:5f:3b:7c:9d:7b:59:65:
71:39:09:a4:22:71:14:ed:00:14:c6:86:24:df:d2:
f0:f3:24:6b:dd:97:4e:54:2b:b9:b0:64:3a:7f:35:
4d:d6:e1:46:85:84:86:0a:3a:c6:f2:3e:12:92:4e:
84:e6:4e:fd:d3:a3:25:e4:e2:7c:1f:a6:03:cc:e1:
3e:82:1d:dd:ff:33:02:53:93:70:62:d2:dc:a7:e4:
73:73:ee:91:f7:43:5a:5f:07:da:b8:63:c2:a4:1c:
f1:e9:b4:34:73:28:0d:db:1d:76:91:ef:ab:eb:2a:
66:4b:86:e4:e8:48:6f:2f:82:c4:06:a4:52:5c:d9:
1f:9c:60:cf:2c:18:8e:60:57:0f:0b:13:74:ba:00:
cb:7e:48:02:0b:20:12:d7:c4:82:8c:00:4b:db:76:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A5:65:C8:FB:B4:8A:A0:AD:23:72:11:26:32:F0:7C:97:3F:31:02
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TqVlyPu0iqCtI3IRJjLwfJc_MQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cc:7a:c4:87:87:a7:40:cf:ef:f1:49:62:fe:67:fa:f2:33:
3d:87:e4:7f:7f:9b:75:75:b9:c8:2d:b7:62:42:53:2e:b6:56:
fc:35:07:64:c9:a5:b3:cd:15:b5:02:e0:57:ae:89:7e:37:81:
d3:66:7d:81:86:91:13:25:19:cf:fb:2d:e1:99:9f:66:d5:70:
e9:96:2d:be:56:07:37:91:1a:ab:82:ad:f0:23:45:d4:af:95:
ae:b5:e9:b1:fa:06:57:ce:cd:7c:4b:27:8f:66:df:be:1d:3c:
52:d6:ca:0c:d5:b9:a0:04:e3:d6:e5:2c:b8:83:69:c3:26:1a:
ad:b5:4a:34:5f:1d:0c:ea:55:78:79:37:ad:9b:89:88:0c:1d:
99:f6:2d:b0:d3:ba:28:ad:c4:ff:ad:8b:53:6b:78:95:8e:61:
fa:82:68:45:e7:fa:0a:92:96:a1:0c:b2:5e:3a:4b:5d:27:ce:
3d:23:18:4e:ec:ae:4f:f1:6f:f6:25:64:dd:cc:12:b8:b1:ee:
3b:c3:a4:0c:19:f5:a1:72:38:c6:b1:04:fb:24:f2:d8:95:47:
f0:85:da:bf:53:b1:37:a0:fe:83:7c:71:16:9a:88:0d:2e:42:
2d:ba:88:db:de:0d:24:bb:8a:e7:78:b0:ea:e9:40:bf:52:ed:
2e:35:67:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJ8kcMyI7Gx5dV30N6MR/dOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwODA4MDgyODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWE1NjVjOGZiYjQ4YWEwYWQyMzcyMTEyNjMyZjA3Yzk3M2YzMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAxLt6jIdRjBzccCOfEx8e9t0OC9
X7HeE3v9HpuyetT+5cTB2uRmiOz8wmKJCCcrnl+MfPtaAYxZZ8q3wS5SF+R+sdZR
NBmYKcE4ZPjuvFuK2X9FHE7UL0R+93fprznmUF87fJ17WWVxOQmkInEU7QAUxoYk
39Lw8yRr3ZdOVCu5sGQ6fzVN1uFGhYSGCjrG8j4Skk6E5k7906Ml5OJ8H6YDzOE+
gh3d/zMCU5NwYtLcp+Rzc+6R90NaXwfauGPCpBzx6bQ0cygN2x12ke+r6ypmS4bk
6EhvL4LEBqRSXNkfnGDPLBiOYFcPCxN0ugDLfkgCCyAS18SCjABL23ZV5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE6lZcj7tIqgrSNyESYy8HyXPzECMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVHFWbHlQdTBpcUN0STNJUkpqTHdmSmNfTVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWVMA0G
CSqGSIb3DQEBCwUAA4IBAQAPzHrEh4enQM/v8Uli/mf68jM9h+R/f5t1dbnILbdi
QlMutlb8NQdkyaWzzRW1AuBXrol+N4HTZn2BhpETJRnP+y3hmZ9m1XDpli2+Vgc3
kRqrgq3wI0XUr5Wutemx+gZXzs18SyePZt++HTxS1soM1bmgBOPW5Sy4g2nDJhqt
tUo0Xx0M6lV4eTetm4mIDB2Z9i2w07oorcT/rYtTa3iVjmH6gmhF5/oKkpahDLJe
OktdJ849IxhO7K5P8W/2JWTdzBK4se47w6QMGfWhcjjGsQT7JPLYlUfwhdq/U7E3
oP6DfHEWmogNLkItuojb3g0ku4rneLDq6UC/Uu0uNWdb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org