Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QvRzPvz7LfTwM-dlzqHZUhIK7rs.roa
File: QvRzPvz7LfTwM-dlzqHZUhIK7rs.roa (raw, json)
Hash identifier: Yu6uYmEys/AKlgw20yf4eDwx/IlP4DtUpkYx3JT2rqo=
Subject key identifier: 42:F4:73:3E:FC:FB:2D:F4:F0:33:E7:65:CE:A1:D9:52:12:0A:EE:BB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 19314D67
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QvRzPvz7LfTwM-dlzqHZUhIK7rs.roa
Signing time: Sat 01 Jan 2022 11:57:08 +0000
ROA not before: Sat 01 Jan 2022 11:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31554
IP address blocks: 81.181.76.0/24 maxlen: 24
81.181.78.0/23 maxlen: 23
193.226.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422661479 (0x19314d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 11:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42f4733efcfb2df4f033e765cea1d952120aeebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:a0:32:b1:23:78:3a:2d:6c:07:8a:f1:43:
5e:cb:1c:b3:5d:e3:92:b5:7f:1f:3e:fc:28:5a:74:
ec:e2:5b:e7:20:43:e0:34:13:9a:19:e4:bc:6f:5c:
e2:5c:18:e5:2b:39:27:fb:c6:9d:fd:20:71:13:a9:
7e:0e:0c:8e:51:f4:c9:75:8b:b3:6c:7d:5a:be:dd:
52:18:ea:73:24:93:3a:77:e6:15:32:da:6a:9c:57:
bf:cb:33:05:5a:55:83:31:49:0b:a4:b8:b0:29:c5:
44:88:2f:2f:59:3d:16:ce:85:11:1d:cd:e9:d5:ba:
33:ef:6a:c7:7d:fa:8d:37:33:32:e4:08:c6:06:e5:
c2:b0:5f:41:cd:78:2b:91:2f:75:f0:e9:e9:45:60:
17:9a:21:3b:f5:fc:57:4f:9f:53:cd:ce:a9:80:9c:
0b:b8:48:51:84:0a:2f:ae:57:ab:74:8f:1e:fb:eb:
54:33:24:8e:d5:ea:7f:d9:46:de:8e:99:50:99:99:
73:8e:62:b7:07:ba:84:e1:2a:77:a7:8b:32:d5:10:
e3:76:ca:9a:c9:e7:34:36:8b:59:a3:06:e3:30:65:
9f:4f:c0:f7:7f:28:bb:94:34:7d:73:8f:de:b4:6d:
57:37:cb:23:7c:3d:a8:7e:ea:ea:e8:84:38:1c:38:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:73:3E:FC:FB:2D:F4:F0:33:E7:65:CE:A1:D9:52:12:0A:EE:BB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QvRzPvz7LfTwM-dlzqHZUhIK7rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.76.0/24
81.181.78.0/23
193.226.92.0/24
Signature Algorithm: sha256WithRSAEncryption
56:19:3f:01:e0:19:65:d8:d0:07:34:c5:42:61:44:ad:f0:4e:
fd:88:3f:53:27:c3:c6:b0:f1:7b:fb:b9:71:69:f5:74:f1:84:
0a:11:25:53:1c:b8:05:f2:df:00:db:17:6b:36:8b:11:d7:be:
74:82:e2:02:02:54:f7:c8:77:9b:62:6c:d0:9c:3c:a1:6f:74:
51:c5:20:d6:84:39:8b:2c:bc:48:6a:2b:66:6b:07:82:3e:4b:
91:b4:e9:e1:de:c3:c1:48:c0:ea:90:67:b5:d9:c2:a3:4b:83:
76:e5:69:15:83:87:02:02:ea:7c:65:bb:ab:39:90:2f:01:0c:
2d:39:58:64:ce:6f:21:1f:36:fb:25:d0:10:1f:b5:54:ce:9d:
2c:6c:31:a3:70:98:17:0e:fe:a6:4b:49:60:ae:9b:0e:64:f0:
56:93:99:c7:3f:3f:ad:fb:fa:9d:9a:71:34:d6:a3:e6:08:cc:
44:c0:86:66:3a:13:eb:f0:df:3d:a2:4f:eb:81:28:37:f4:8c:
5f:fd:07:bf:b0:65:fb:00:97:d7:59:65:ae:7d:33:17:87:c4:
c9:c1:8e:23:83:80:1e:35:1d:cd:3f:cc:ea:9b:cf:db:f9:e3:
f3:a1:71:5e:0a:cc:c1:1e:60:45:9f:b4:b9:c5:22:4b:64:02:
a1:4f:da:f6
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGTFNZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDEw
MTExNTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDJmNDczM2VmY2Zi
MmRmNGYwMzNlNzY1Y2VhMWQ5NTIxMjBhZWViYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKR0oDKxI3g6LWwHivFDXsscs13jkrV/Hz78KFp07OJb5yBD
4DQTmhnkvG9c4lwY5Ss5J/vGnf0gcROpfg4MjlH0yXWLs2x9Wr7dUhjqcySTOnfm
FTLaapxXv8szBVpVgzFJC6S4sCnFRIgvL1k9Fs6FER3N6dW6M+9qx336jTczMuQI
xgblwrBfQc14K5EvdfDp6UVgF5ohO/X8V0+fU83OqYCcC7hIUYQKL65Xq3SPHvvr
VDMkjtXqf9lG3o6ZUJmZc45itwe6hOEqd6eLMtUQ43bKmsnnNDaLWaMG4zBln0/A
938ou5Q0fXOP3rRtVzfLI3w9qH7q6uiEOBw42bUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRC9HM+/Pst9PAz52XOodlSEgruuzAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
L1F2UnpQdno3TGZUd00tZGx6cUhaVWhJSzdycy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFG1TAMEAVG1TgMEAMHiXDANBgkq
hkiG9w0BAQsFAAOCAQEAVhk/AeAZZdjQBzTFQmFErfBO/Yg/UyfDxrDxe/u5cWn1
dPGEChElUxy4BfLfANsXazaLEde+dILiAgJU98h3m2Js0Jw8oW90UcUg1oQ5iyy8
SGorZmsHgj5LkbTp4d7DwUjA6pBntdnCo0uDduVpFYOHAgLqfGW7qzmQLwEMLTlY
ZM5vIR82+yXQEB+1VM6dLGwxo3CYFw7+pktJYK6bDmTwVpOZxz8/rfv6nZpxNNaj
5gjMRMCGZjoT6/DfPaJP64EoN/SMX/0Hv7Bl+wCX11llrn0zF4fEycGOI4OAHjUd
zT/M6pvP2/nj86FxXgrMwR5gRZ+0ucUiS2QCoU/a9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org