Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/TnB3MxsThx_riAGJUNtDxp9isUw.roa
File: TnB3MxsThx_riAGJUNtDxp9isUw.roa (raw, json)
Hash identifier: 1JgA6qEIdWwUo3V8C1STWq+eX4mGFzOHQjw3Ui8d3b0=
Subject key identifier: 4E:70:77:33:1B:13:87:1F:EB:88:01:89:50:DB:43:C6:9F:62:B1:4C
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 08174385
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/TnB3MxsThx_riAGJUNtDxp9isUw.roa
Signing time: Sat 01 Jan 2022 15:02:21 +0000
ROA not before: Sat 01 Jan 2022 15:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198208
IP address blocks: 91.109.208.0/21 maxlen: 24
134.19.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135742341 (0x8174385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jan 1 15:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e7077331b13871feb88018950db43c69f62b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:31:b8:e9:05:17:c3:8b:06:d7:b1:8c:84:
31:66:d8:0e:b4:0c:fb:06:01:85:2f:4b:4d:79:9c:
a5:d9:c0:eb:fc:6e:20:aa:e7:ed:d7:86:a6:f5:9e:
53:2b:62:f4:2b:d5:2f:5b:05:2a:3e:aa:51:fc:28:
8b:b9:58:cb:cf:5b:1f:72:aa:78:57:00:50:1d:f6:
05:c5:b0:b1:3d:08:3e:08:44:91:12:27:58:ae:47:
9f:5f:8c:18:c6:15:6e:85:96:44:97:3c:db:6a:d2:
4c:98:1a:03:76:81:b0:32:92:21:bb:30:db:bd:ca:
d8:3d:ed:b1:21:ac:17:36:8d:b5:03:67:7f:34:21:
b9:65:5c:c6:01:c5:4e:d7:d2:b8:a9:75:2a:d3:30:
93:6f:ec:df:98:e9:3d:3b:c4:2e:40:30:80:79:2e:
30:2e:0b:d8:08:84:c5:c9:63:89:5a:a2:0a:89:a6:
77:6e:59:33:f6:cf:bf:f7:cf:69:44:ef:a6:44:e9:
8b:e7:e7:48:53:77:d6:e3:f2:e2:e7:2b:c1:44:2a:
54:e9:0f:7b:ac:a6:7d:67:88:d7:66:48:b8:39:94:
ec:89:ab:6d:b0:de:e2:9c:a0:2e:0d:e9:43:ca:55:
86:48:de:d4:38:a1:0e:1f:46:1c:f5:54:f6:74:4c:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:77:33:1B:13:87:1F:EB:88:01:89:50:DB:43:C6:9F:62:B1:4C
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/TnB3MxsThx_riAGJUNtDxp9isUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.208.0/21
134.19.200.0/21
Signature Algorithm: sha256WithRSAEncryption
50:35:b7:92:78:b7:15:3a:0d:aa:38:c4:71:d5:b4:79:63:1d:
ea:65:26:5c:fd:ba:ef:57:93:62:cc:81:c9:c9:b7:22:c1:d8:
66:97:0f:04:f7:89:59:dc:66:e2:9e:4a:ba:5a:75:85:41:2b:
93:19:47:54:1f:44:06:32:72:32:52:8d:b0:09:48:31:67:df:
e4:7d:75:a0:2f:8e:ed:5e:48:19:43:8e:73:d2:cc:60:96:69:
4a:11:68:c6:b2:f3:1a:58:75:cc:0e:b1:dc:ab:9c:8b:75:c2:
fa:3e:bf:4c:fa:a2:d2:31:54:13:02:70:77:7a:d4:13:32:9c:
e8:f2:24:3e:1c:9f:b8:06:5c:1d:ca:97:b6:51:fd:2f:4a:69:
50:c4:12:74:0e:38:34:c4:91:07:80:fb:9d:e2:13:04:5e:da:
14:37:4e:52:a0:71:76:2a:46:ce:a4:35:98:a1:68:34:53:0a:
6f:aa:0b:23:fc:e5:d2:13:ab:6c:f4:f8:43:5e:02:50:2e:c9:
f0:29:36:5f:b8:c1:ea:76:97:9e:a5:00:c6:99:c0:80:7f:69:
c7:0f:cd:cd:82:2d:39:65:c3:5f:78:21:40:bd:4e:a1:7b:37:
ff:49:ab:39:9b:30:f1:4d:72:3d:d1:0c:b0:2d:62:bf:85:41:
e0:78:0c:79
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECBdDhTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MmM0YzM4MDZlMWY4OGU5OWJkOGM1ZTQ5MDA3N2Y4ZGU1ZDdjZjA2MB4XDTIyMDEw
MTE1MDIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGU3MDc3MzMxYjEz
ODcxZmViODgwMTg5NTBkYjQzYzY5ZjYyYjE0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSoMbjpBRfDiwbXsYyEMWbYDrQM+wYBhS9LTXmcpdnA6/xu
IKrn7deGpvWeUyti9CvVL1sFKj6qUfwoi7lYy89bH3KqeFcAUB32BcWwsT0IPghE
kRInWK5Hn1+MGMYVboWWRJc822rSTJgaA3aBsDKSIbsw273K2D3tsSGsFzaNtQNn
fzQhuWVcxgHFTtfSuKl1KtMwk2/s35jpPTvELkAwgHkuMC4L2AiExcljiVqiComm
d25ZM/bPv/fPaUTvpkTpi+fnSFN31uPy4ucrwUQqVOkPe6ymfWeI12ZIuDmU7Imr
bbDe4pygLg3pQ8pVhkje1DihDh9GHPVU9nRMtkcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBROcHczGxOHH+uIAYlQ20PGn2KxTDAfBgNVHSMEGDAWgBTSxMOAbh+I6ZvY
xeSQB3+N5dfPBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBzVERnRzRmaU9tYjJNWGtrQWRfamVYWHp3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvZDJiMGEyLTk1ZTMtNDFhMC04Y2RmLWZmODA5ZTdkYWVjYS8x
L1RuQjNNeHNUaHhfcmlBR0pVTnREeHA5aXNVdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
ZDJiMGEyLTk1ZTMtNDFhMC04Y2RmLWZmODA5ZTdkYWVjYS8xLzBzVERnRzRmaU9t
YjJNWGtrQWRfamVYWHp3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1tt0AMEA4YTyDANBgkqhkiG9w0B
AQsFAAOCAQEAUDW3kni3FToNqjjEcdW0eWMd6mUmXP2671eTYsyBycm3IsHYZpcP
BPeJWdxm4p5Kulp1hUErkxlHVB9EBjJyMlKNsAlIMWff5H11oC+O7V5IGUOOc9LM
YJZpShFoxrLzGlh1zA6x3Kuci3XC+j6/TPqi0jFUEwJwd3rUEzKc6PIkPhyfuAZc
HcqXtlH9L0ppUMQSdA44NMSRB4D7neITBF7aFDdOUqBxdipGzqQ1mKFoNFMKb6oL
I/zl0hOrbPT4Q14CUC7J8Ck2X7jB6naXnqUAxpnAgH9pxw/NzYItOWXDX3ghQL1O
oXs3/0mrOZsw8U1yPdEMsC1iv4VB4HgMeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:22 2023 by rpki-client on console-ams.rpki-client.org