Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/TDFFnZZerY3jZbRcp9QNQvBP3ss.roa
File: TDFFnZZerY3jZbRcp9QNQvBP3ss.roa (raw, json)
Hash identifier: nxWsm3aLdtK3BWEhkgkzMREyEAFvOQRguFmcCEFKMqE=
Subject key identifier: 4C:31:45:9D:96:5E:AD:8D:E3:65:B4:5C:A7:D4:0D:42:F0:4F:DE:CB
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38007BBC
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/TDFFnZZerY3jZbRcp9QNQvBP3ss.roa
Signing time: Sat 01 Jan 2022 11:02:18 +0000
ROA not before: Sat 01 Jan 2022 11:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 87.251.22.0/24 maxlen: 24
87.251.23.0/24 maxlen: 24
87.251.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939555772 (0x38007bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 1 11:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c31459d965ead8de365b45ca7d40d42f04fdecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:87:06:d1:f4:18:63:8d:97:49:c3:16:33:
89:61:3e:7e:01:bb:6e:6f:3a:ff:41:23:3c:a8:72:
95:d2:57:8b:3f:43:89:7b:26:d5:59:ce:79:9b:00:
c6:b5:89:4b:df:18:12:c8:73:ec:cd:6c:87:12:21:
b0:c0:dc:9c:36:65:32:76:ef:92:c2:cd:e3:f1:37:
b0:d0:19:02:25:73:0d:c2:15:42:ba:56:29:c0:42:
46:6f:17:e5:a9:41:c5:72:19:b7:71:c0:3d:ab:b6:
c1:32:a7:98:91:36:02:c5:19:51:d9:ef:cb:0c:c9:
57:ec:a8:df:32:f9:3f:96:e1:18:6b:05:fd:4f:9f:
8f:15:a5:a4:f8:c8:df:6b:a3:b8:c9:c3:f7:32:19:
53:3e:ea:46:e9:02:ae:95:ac:70:e5:78:a3:ef:b5:
b6:e0:4b:05:e1:cd:55:6c:f4:11:3f:ac:6a:6c:e5:
ad:f4:d2:02:f9:3f:dc:e3:2a:01:f3:1e:e4:91:04:
f4:60:f0:4d:bc:6c:f7:28:a4:ce:bc:94:6c:be:ba:
c1:9e:9e:f1:ee:7b:7d:83:7a:14:cd:53:74:e3:cc:
97:d8:a4:4a:11:d4:cf:ed:3a:63:3b:78:26:b6:68:
cf:16:cb:d4:03:34:cb:b4:79:71:ff:e8:fd:fa:f8:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:45:9D:96:5E:AD:8D:E3:65:B4:5C:A7:D4:0D:42:F0:4F:DE:CB
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/TDFFnZZerY3jZbRcp9QNQvBP3ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.22.0/23
87.251.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6c:2d:df:a1:76:02:6e:f1:89:71:eb:b4:96:01:05:1b:f9:
f2:e0:a3:bc:5a:61:76:49:a9:0e:26:d0:ce:0c:e5:22:fb:5f:
8d:7f:61:c1:17:d0:84:0c:03:06:2b:00:dd:d3:35:8e:81:86:
50:27:f3:df:b2:0d:22:f5:2f:a8:87:a6:5c:71:a9:27:80:80:
b6:2e:63:40:78:fb:e2:28:7e:70:14:37:d6:64:ac:bf:f3:66:
69:49:ec:15:0b:f1:a8:d0:cc:ca:3c:84:55:df:4c:62:d3:2a:
b4:ff:bf:8c:ae:9e:92:3d:46:8b:46:ab:7e:a8:f6:d6:86:1a:
06:7d:58:ce:ad:fb:58:b3:40:54:fa:9e:b9:d2:f8:04:ba:21:
3c:8a:71:ea:da:8d:bf:66:04:95:6c:4d:56:54:3d:11:39:d8:
c6:1c:3f:ed:d5:b2:4e:13:c4:2c:ae:8f:3c:ee:04:f4:9d:99:
b0:06:b8:59:50:ad:92:03:d2:a4:5b:78:ca:ef:1d:11:39:3d:
bf:30:62:fa:d1:3c:38:c0:52:0c:d7:97:db:a3:91:12:17:cf:
0c:74:ce:08:d5:cf:5e:fa:38:09:71:08:dc:66:70:51:ef:2e:
46:a9:c9:83:28:46:3c:58:d2:a0:a9:73:16:32:db:70:94:7d:
44:62:40:5f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOAB7vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxODE1YzZmOThmM2EyYjYxODRhZmViZjE4ZWEzNDFiZTg4MmVhMB4XDTIyMDEw
MTExMDIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGMzMTQ1OWQ5NjVl
YWQ4ZGUzNjViNDVjYTdkNDBkNDJmMDRmZGVjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObWhwbR9BhjjZdJwxYziWE+fgG7bm86/0EjPKhyldJXiz9D
iXsm1VnOeZsAxrWJS98YEshz7M1shxIhsMDcnDZlMnbvksLN4/E3sNAZAiVzDcIV
QrpWKcBCRm8X5alBxXIZt3HAPau2wTKnmJE2AsUZUdnvywzJV+yo3zL5P5bhGGsF
/U+fjxWlpPjI32ujuMnD9zIZUz7qRukCrpWscOV4o++1tuBLBeHNVWz0ET+samzl
rfTSAvk/3OMqAfMe5JEE9GDwTbxs9yikzryUbL66wZ6e8e57fYN6FM1TdOPMl9ik
ShHUz+06Yzt4JrZozxbL1AM0y7R5cf/o/fr4WLMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRMMUWdll6tjeNltFyn1A1C8E/eyzAfBgNVHSMEGDAWgBTlAYFcb5jzorYY
Sv6/GOo0G+iC6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRR0JYRy1ZODZLMkdFci12eGpxTkJ2b2d1by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvNWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8x
L1RERkZuWlplclkzalpiUmNwOVFOUXZCUDNzcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
NWIwMjIyLWVkNjQtNGY1NS1iNDViLTAwNTlmNzM3ZWYwNS8xLzVRR0JYRy1ZODZL
MkdFci12eGpxTkJ2b2d1by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVf7FgMEAFf7GzANBgkqhkiG9w0B
AQsFAAOCAQEAuGwt36F2Am7xiXHrtJYBBRv58uCjvFphdkmpDibQzgzlIvtfjX9h
wRfQhAwDBisA3dM1joGGUCfz37INIvUvqIemXHGpJ4CAti5jQHj74ih+cBQ31mSs
v/NmaUnsFQvxqNDMyjyEVd9MYtMqtP+/jK6ekj1Gi0arfqj21oYaBn1Yzq37WLNA
VPqeudL4BLohPIpx6tqNv2YElWxNVlQ9ETnYxhw/7dWyThPELK6PPO4E9J2ZsAa4
WVCtkgPSpFt4yu8dETk9vzBi+tE8OMBSDNeX26OREhfPDHTOCNXPXvo4CXEI3GZw
Ue8uRqnJgyhGPFjSoKlzFjLbcJR9RGJAXw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:45 2023 by rpki-client on console-ams.rpki-client.org