Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TGymJQLmNHusDC-3L7HS2iGavPE.roa
File: TGymJQLmNHusDC-3L7HS2iGavPE.roa (raw, json)
Hash identifier: N+eX1GyXFR39UtmvQOLEmef42mUxPsUAcHG/bO/TY6k=
Subject key identifier: 4C:6C:A6:25:02:E6:34:7B:AC:0C:2F:B7:2F:B1:D2:DA:21:9A:BC:F1
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 014E3CA8
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TGymJQLmNHusDC-3L7HS2iGavPE.roa
Signing time: Sat 01 Jan 2022 05:52:16 +0000
ROA not before: Sat 01 Jan 2022 05:52:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51735
IP address blocks: 91.220.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21904552 (0x14e3ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Jan 1 05:52:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6ca62502e6347bac0c2fb72fb1d2da219abcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:d9:37:90:f5:0a:44:f6:cc:97:c5:5e:23:
92:3d:bc:fb:24:f2:b5:04:c7:36:bf:e4:ee:3c:95:
03:73:c7:fb:90:b3:3b:90:82:14:e5:c3:e1:03:9e:
dd:f2:11:0c:15:7d:92:fc:49:99:58:67:4c:20:39:
17:b8:69:02:64:47:29:e4:e1:9b:cf:bd:96:a1:e8:
3b:46:45:ad:b0:80:7b:f6:a3:67:4f:eb:15:6c:7e:
fd:f2:74:8e:ca:de:14:b5:d9:66:46:42:01:7f:bf:
ac:ef:7c:30:14:7b:c4:e7:90:95:8a:88:d9:5f:44:
33:1a:69:e1:69:88:07:1d:26:c4:c7:28:c7:d7:f5:
33:f4:4a:a8:ec:ee:11:84:d3:58:f7:22:d5:69:8e:
67:83:8c:4a:fc:56:28:b9:33:c4:a5:f9:f3:fb:11:
7b:f8:21:74:24:c6:f1:92:77:68:1a:80:1d:89:87:
c1:61:f5:6e:c5:8f:7e:1c:ef:d4:e6:e4:76:b9:e8:
97:09:8b:34:f1:82:8d:c7:96:6b:87:8d:3b:85:7a:
8e:6c:c5:e9:31:99:0b:dc:94:77:a5:b9:ef:6a:91:
dc:8c:30:40:e6:80:51:1d:7f:91:f9:d8:ae:69:6d:
d7:01:64:a6:17:18:53:61:da:28:02:01:b5:e1:3e:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:A6:25:02:E6:34:7B:AC:0C:2F:B7:2F:B1:D2:DA:21:9A:BC:F1
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TGymJQLmNHusDC-3L7HS2iGavPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:75:fe:ac:f4:ab:e3:6c:f7:d0:eb:f7:fa:63:32:7d:21:1c:
c5:c6:f5:3c:1f:8e:3f:cd:a2:79:36:d6:36:c6:75:0d:3b:23:
c8:96:c7:cf:5c:b6:ca:47:b8:9f:44:3f:00:ff:ae:08:4c:f4:
d3:6c:64:d7:f1:07:4a:0a:58:65:73:6a:62:6b:2d:57:91:26:
52:87:39:db:64:6e:2f:c9:82:c6:a4:fe:a3:56:f8:e1:9f:f5:
9f:60:55:a8:ca:0b:54:d4:37:de:52:55:e6:ec:98:19:41:11:
98:33:5f:aa:b7:90:64:ca:8d:65:a5:9a:4a:b3:0e:34:99:4e:
7d:2e:18:bb:a2:ec:69:85:fe:66:55:c0:5d:cd:4d:6a:41:f2:
7b:0f:e1:20:c1:a2:05:0c:d0:ee:86:20:46:b5:a0:42:59:4e:
3c:9f:9b:f1:1d:c7:f9:a1:33:99:67:6d:41:2a:4d:69:df:39:
52:10:33:c6:d6:54:49:fd:16:f6:38:38:f2:29:ad:b7:02:97:
97:2f:6b:ac:24:f9:a4:9b:27:16:6f:fb:e7:33:1b:56:27:d1:
41:59:53:6e:9c:15:c8:96:27:1b:58:9d:c1:af:77:bc:19:b5:
de:13:b9:f3:41:2e:87:27:e1:ee:bf:64:f0:fd:f9:cd:b8:8c:
0e:51:bc:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAU48qDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2U0ODhjNjQwMWM4ZjVlOTY5ZTE1ZDY0NjUxZmI0YjJkMmRjZGY3MB4XDTIyMDEw
MTA1NTIxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM2Y2E2MjUwMmU2
MzQ3YmFjMGMyZmI3MmZiMWQyZGEyMTlhYmNmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTP2TeQ9QpE9syXxV4jkj28+yTytQTHNr/k7jyVA3PH+5Cz
O5CCFOXD4QOe3fIRDBV9kvxJmVhnTCA5F7hpAmRHKeThm8+9lqHoO0ZFrbCAe/aj
Z0/rFWx+/fJ0jsreFLXZZkZCAX+/rO98MBR7xOeQlYqI2V9EMxpp4WmIBx0mxMco
x9f1M/RKqOzuEYTTWPci1WmOZ4OMSvxWKLkzxKX58/sRe/ghdCTG8ZJ3aBqAHYmH
wWH1bsWPfhzv1ObkdrnolwmLNPGCjceWa4eNO4V6jmzF6TGZC9yUd6W572qR3Iww
QOaAUR1/kfnYrmlt1wFkphcYU2HaKAIBteE+9wcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMbKYlAuY0e6wML7cvsdLaIZq88TAfBgNVHSMEGDAWgBRM5IjGQByPXpae
FdZGUftLLS3N9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RPU0l4a0FjajE2V25oWFdSbEg3U3kwdHpmYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvYzVjNTk1LTI2NzMtNGQ1Zi04YTg1LWFlOGM4MWY5NmY0Mi8x
L1RHeW1KUUxtTkh1c0RDLTNMN0hTMmlHYXZQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
YzVjNTk1LTI2NzMtNGQ1Zi04YTg1LWFlOGM4MWY5NmY0Mi8xL1RPU0l4a0FjajE2
V25oWFdSbEg3U3kwdHpmYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvcTjANBgkqhkiG9w0BAQsFAAOC
AQEATXX+rPSr42z30Ov3+mMyfSEcxcb1PB+OP82ieTbWNsZ1DTsjyJbHz1y2yke4
n0Q/AP+uCEz002xk1/EHSgpYZXNqYmstV5EmUoc522RuL8mCxqT+o1b44Z/1n2BV
qMoLVNQ33lJV5uyYGUERmDNfqreQZMqNZaWaSrMONJlOfS4Yu6LsaYX+ZlXAXc1N
akHyew/hIMGiBQzQ7oYgRrWgQllOPJ+b8R3H+aEzmWdtQSpNad85UhAzxtZUSf0W
9jg48imttwKXly9rrCT5pJsnFm/75zMbVifRQVlTbpwVyJYnG1idwa93vBm13hO5
80Euhyfh7r9k8P35zbiMDlG8Xw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:10 2025 by rpki-client