Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/TdKPIChJFS5Nlooy9uX2ses9bNk.roa
File: TdKPIChJFS5Nlooy9uX2ses9bNk.roa (raw, json)
Hash identifier: NeFsvlNEmKG0oQTWeXa00IqRpLgDeGkjsWZrrSNoS14=
Subject key identifier: 4D:D2:8F:20:28:49:15:2E:4D:96:8A:32:F6:E5:F6:B1:EB:3D:6C:D9
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 3FE38660
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/TdKPIChJFS5Nlooy9uX2ses9bNk.roa
Signing time: Sat 01 Jan 2022 04:56:36 +0000
ROA not before: Sat 01 Jan 2022 04:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 195.176.160.0/19 maxlen: 19
86.119.0.0/16 maxlen: 16
192.86.166.0/24 maxlen: 24
195.176.0.0/17 maxlen: 17
195.176.224.0/19 maxlen: 19
130.59.0.0/16 maxlen: 16
192.65.94.0/24 maxlen: 24
192.65.92.0/23 maxlen: 23
2001:620::/29 maxlen: 29
2001:620::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071875680 (0x3fe38660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Jan 1 04:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dd28f202849152e4d968a32f6e5f6b1eb3d6cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:2b:ab:81:73:48:a6:b3:46:b4:2d:54:a2:
ad:aa:ac:a5:a4:00:1c:8c:7e:b3:af:f2:33:21:10:
ab:c7:30:2e:70:ca:b9:96:30:dc:7f:04:8b:fb:74:
84:ec:e0:85:b5:6f:a1:b6:8f:79:55:3d:d9:f6:08:
97:93:53:06:65:e8:b1:ac:bf:6a:aa:8c:a8:48:3c:
b8:f5:38:90:ad:5f:cc:e3:04:cf:84:2d:2b:dc:9f:
3f:74:0e:56:7b:4f:42:0d:b3:5e:75:91:68:84:51:
4a:23:58:7e:8a:0f:04:c5:73:36:db:c8:31:cb:51:
68:6e:ab:e3:43:57:1d:c8:c1:a5:bf:3a:f0:87:30:
2b:3f:96:eb:f5:10:0a:48:53:f2:01:2d:47:1e:27:
76:7f:bd:22:55:dc:33:84:19:3a:2b:c2:9d:88:bc:
6e:a5:44:fa:85:3c:7d:43:06:cb:3b:79:17:d9:cf:
2f:b3:de:5b:84:04:36:f2:41:be:5d:4c:1a:6c:9e:
d8:fe:61:d6:49:b7:28:f0:ce:42:ac:45:9b:ec:6f:
4f:18:94:d2:c6:00:99:f1:85:2d:4f:a9:ea:f9:01:
68:38:38:6b:cc:cf:9e:99:64:e5:cc:7f:67:91:93:
9e:f4:ea:da:80:dc:67:e7:bc:8e:1b:d3:56:12:f5:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:8F:20:28:49:15:2E:4D:96:8A:32:F6:E5:F6:B1:EB:3D:6C:D9
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/TdKPIChJFS5Nlooy9uX2ses9bNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.119.0.0/16
130.59.0.0/16
192.65.92.0-192.65.94.255
192.86.166.0/24
195.176.0.0/17
195.176.160.0/19
195.176.224.0/19
IPv6:
2001:620::/29
Signature Algorithm: sha256WithRSAEncryption
ab:79:66:9b:20:31:be:b9:d6:fa:c4:f8:76:ea:d6:4e:6d:72:
6a:f3:7b:7f:fb:25:96:9e:69:bb:b8:e9:74:f3:54:0e:d6:d0:
45:8e:a5:7c:6f:de:13:5b:57:f6:9d:f5:4f:3d:b5:19:4b:2f:
66:dc:7c:d3:d4:29:e5:29:98:ab:ac:d8:53:06:2e:7b:b9:0b:
76:46:0c:76:65:73:a3:e7:a7:66:72:5f:1d:47:a5:38:a8:af:
ab:92:33:b1:2c:54:fb:8b:90:45:b4:89:97:26:45:9a:3f:fa:
31:1c:e5:39:50:69:d7:96:a6:e7:4d:d3:3d:dc:d0:a9:35:20:
58:31:94:96:1a:06:01:54:a9:02:70:9a:8a:b3:46:5b:34:73:
e3:9d:8f:f5:90:e3:14:3a:8f:c4:dd:01:63:bb:a4:8f:25:49:
f2:2f:30:8a:e6:0f:64:47:8b:68:57:58:f5:c7:b0:aa:f3:66:
04:ed:29:91:a5:78:0a:ac:f5:49:95:e4:d0:fc:89:b8:73:22:
4d:ac:64:45:b1:61:c4:5a:e8:41:d0:9d:41:65:44:6a:d5:71:
b4:ee:75:b0:2b:e7:88:42:a7:2c:f9:5f:37:1e:7d:dd:70:1d:
9d:d9:1c:16:24:99:4d:17:7c:db:6d:8a:f4:d5:1f:fe:0a:6e:
18:fc:25:44
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIEP+OGYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MzExYTlkNGMxMDI1MmZiZjczYjcxNjVmMzVhY2MxZGNlOWYwYTkzMB4XDTIyMDEw
MTA0NTYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGRkMjhmMjAyODQ5
MTUyZTRkOTY4YTMyZjZlNWY2YjFlYjNkNmNkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKJK6uBc0ims0a0LVSiraqspaQAHIx+s6/yMyEQq8cwLnDK
uZYw3H8Ei/t0hOzghbVvobaPeVU92fYIl5NTBmXosay/aqqMqEg8uPU4kK1fzOME
z4QtK9yfP3QOVntPQg2zXnWRaIRRSiNYfooPBMVzNtvIMctRaG6r40NXHcjBpb86
8IcwKz+W6/UQCkhT8gEtRx4ndn+9IlXcM4QZOivCnYi8bqVE+oU8fUMGyzt5F9nP
L7PeW4QENvJBvl1MGmye2P5h1km3KPDOQqxFm+xvTxiU0sYAmfGFLU+p6vkBaDg4
a8zPnplk5cx/Z5GTnvTq2oDcZ+e8jhvTVhL1Fh0CAwEAAaOCAkIwggI+MB0GA1Ud
DgQWBBRN0o8gKEkVLk2WijL25fax6z1s2TAfBgNVHSMEGDAWgBRjEanUwQJS+/c7
cWXzWswdzp8KkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1l4R3AxTUVDVXZ2M08zRmw4MXJNSGM2ZkNwTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvNWVkNWQzLWI5OWMtNDg2Yi1hZjljLTdjZmQ5NTdmMDhmZi8x
L1RkS1BJQ2hKRlM1Tmxvb3k5dVgyc2VzOWJOay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
NWVkNWQzLWI5OWMtNDg2Yi1hZjljLTdjZmQ5NTdmMDhmZi8xL1l4R3AxTUVDVXZ2
M08zRmw4MXJNSGM2ZkNwTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMDAFZ3AwMAgjswDAMEAsBBXAMEAMBB
XgMEAMBWpgMEB8OwAAMEBcOwoAMEBcOw4DANBAIAAjAHAwUDIAEGIDANBgkqhkiG
9w0BAQsFAAOCAQEAq3lmmyAxvrnW+sT4durWTm1yavN7f/sllp5pu7jpdPNUDtbQ
RY6lfG/eE1tX9p31Tz21GUsvZtx809Qp5SmYq6zYUwYue7kLdkYMdmVzo+enZnJf
HUelOKivq5IzsSxU+4uQRbSJlyZFmj/6MRzlOVBp15am503TPdzQqTUgWDGUlhoG
AVSpAnCairNGWzRz452P9ZDjFDqPxN0BY7ukjyVJ8i8wiuYPZEeLaFdY9cewqvNm
BO0pkaV4Cqz1SZXk0PyJuHMiTaxkRbFhxFroQdCdQWVEatVxtO51sCvniEKnLPlf
Nx593XAdndkcFiSZTRd8222K9NUf/gpuGPwlRA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:00 2025 by rpki-client