Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/tZ4qRf98atVEOAdnWZa7qhgqQiA.roa
File: tZ4qRf98atVEOAdnWZa7qhgqQiA.roa (raw, json)
Hash identifier: 5TJ1RenOqLZgjWl3Fe/8gEY+xD2gcddGDNanKLmlOIM=
Subject key identifier: B5:9E:2A:45:FF:7C:6A:D5:44:38:07:67:59:96:BB:AA:18:2A:42:20
Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial: 016E4699
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/tZ4qRf98atVEOAdnWZa7qhgqQiA.roa
Signing time: Wed 22 Jun 2022 07:49:44 +0000
ROA not before: Wed 22 Jun 2022 07:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207655
IP address blocks: 194.36.0.128/25 maxlen: 25
194.36.0.0/24 maxlen: 24
194.36.0.0/25 maxlen: 25
2a12:3840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24004249 (0x16e4699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Validity
Not Before: Jun 22 07:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b59e2a45ff7c6ad5443807675996bbaa182a4220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:f5:d8:b1:1b:41:35:75:df:dc:46:e4:55:
10:10:31:49:a6:f0:02:27:f6:39:a4:71:c2:30:8d:
8b:a3:45:f4:db:4e:98:cb:2e:5d:17:38:cc:90:4d:
f6:78:34:2e:ac:e5:ec:1d:e8:af:eb:3b:72:3a:42:
5e:37:d0:39:7d:69:9d:25:2f:84:b8:20:fe:5c:31:
61:2d:d2:8c:20:f9:b0:24:00:a0:f6:b9:69:e3:16:
6b:53:8d:b0:2c:00:88:ed:e4:d3:36:64:f4:12:f9:
1f:e5:46:cb:d7:37:59:21:0b:33:05:b9:0c:00:74:
df:0b:c3:1a:a3:4d:ae:32:eb:fd:10:c3:98:fd:7f:
06:27:8e:d3:b4:5e:21:88:a5:8a:f6:57:82:09:f0:
c9:fb:c3:ed:28:1e:6a:fa:d5:82:65:21:dd:0d:98:
42:4c:61:cb:d9:c6:ea:86:cd:9d:65:c5:6e:05:ae:
2d:ad:8b:65:d1:0c:58:26:9c:af:ad:82:a1:ab:c8:
62:33:c5:d0:ec:34:0f:72:d7:09:2b:28:a4:a6:1a:
47:0e:f9:05:58:ed:9e:cf:f6:99:4d:5e:c0:72:72:
79:e6:3e:43:67:76:d7:93:f4:13:fc:22:50:26:ea:
ed:ed:51:57:7d:a0:38:7a:00:7b:53:c9:24:8a:99:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:2A:45:FF:7C:6A:D5:44:38:07:67:59:96:BB:AA:18:2A:42:20
X509v3 Authority Key Identifier:
keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/tZ4qRf98atVEOAdnWZa7qhgqQiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
IPv6:
2a12:3840::/29
Signature Algorithm: sha256WithRSAEncryption
9e:f7:3a:5e:b7:bb:71:4e:f9:88:21:04:dc:b9:04:31:c0:e7:
2c:93:64:54:04:ef:12:7a:8b:70:21:76:41:08:26:e6:cf:d8:
97:37:ea:47:ce:98:2a:61:d4:35:41:c3:82:bf:ea:a9:e0:b7:
ee:da:41:d1:9b:15:d0:01:f1:51:2f:1e:d5:d4:82:47:1a:30:
d4:12:1a:4e:0d:45:bd:6d:10:bc:f7:5a:04:27:4d:0f:6c:12:
0b:3f:25:50:85:b0:42:31:96:fe:a2:ec:36:ee:56:43:52:67:
af:a8:45:44:40:10:62:3b:5b:00:aa:fe:23:2e:96:47:4c:1e:
99:2a:71:4f:c4:e3:05:c3:6a:bd:f9:21:c2:e1:7d:dc:fd:0f:
c2:fa:a1:1d:d9:aa:03:90:5a:ba:71:8e:00:e7:7c:78:c1:ca:
24:8b:e1:44:83:9d:2d:ec:84:94:17:43:77:5e:02:c5:c9:bf:
6a:c1:d1:53:ae:16:3f:9f:cb:06:bf:d4:93:87:f8:8f:46:b5:
ed:72:f6:bf:0f:1a:1e:cd:6a:83:e3:03:5f:5f:d3:7d:fb:2a:
18:a3:c3:df:fd:40:22:61:6c:15:60:19:2e:52:2b:cd:1d:a0:
ae:bd:c8:6e:76:4a:f2:9c:3c:32:5a:f4:63:3c:56:b5:63:93:
b0:c7:60:46
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAW5GmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjFiOWJjOGM3ZTBmYzQ3YmY4YjBhNTcyZDFhNTcyZDZhNjk2YmI3MB4XDTIyMDYy
MjA3NDk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjU5ZTJhNDVmZjdj
NmFkNTQ0MzgwNzY3NTk5NmJiYWExODJhNDIyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPb9dixG0E1dd/cRuRVEBAxSabwAif2OaRxwjCNi6NF9NtO
mMsuXRc4zJBN9ng0Lqzl7B3or+s7cjpCXjfQOX1pnSUvhLgg/lwxYS3SjCD5sCQA
oPa5aeMWa1ONsCwAiO3k0zZk9BL5H+VGy9c3WSELMwW5DAB03wvDGqNNrjLr/RDD
mP1/BieO07ReIYilivZXggnwyfvD7SgeavrVgmUh3Q2YQkxhy9nG6obNnWXFbgWu
La2LZdEMWCacr62CoavIYjPF0Ow0D3LXCSsopKYaRw75BVjtns/2mU1ewHJyeeY+
Q2d215P0E/wiUCbq7e1RV32gOHoAe1PJJIqZo08CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS1nipF/3xq1UQ4B2dZlruqGCpCIDAfBgNVHSMEGDAWgBQbG5vIx+D8R7+L
ClctGlctamlrtzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d4dWJ5TWZnX0VlX2l3cFhMUnBYTFdwcGE3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNGQyYTlmLTZmNzgtNGNjNi05YWQ2LTBmNmI4NDY4Yzc5ZC8x
L3RaNHFSZjk4YXRWRU9BZG5XWmE3cWhncVFpQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NGQyYTlmLTZmNzgtNGNjNi05YWQ2LTBmNmI4NDY4Yzc5ZC8xL0d4dWJ5TWZnX0Vl
X2l3cFhMUnBYTFdwcGE3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMIkADANBAIAAjAHAwUDKhI4QDAN
BgkqhkiG9w0BAQsFAAOCAQEAnvc6Xre7cU75iCEE3LkEMcDnLJNkVATvEnqLcCF2
QQgm5s/YlzfqR86YKmHUNUHDgr/qqeC37tpB0ZsV0AHxUS8e1dSCRxow1BIaTg1F
vW0QvPdaBCdND2wSCz8lUIWwQjGW/qLsNu5WQ1Jnr6hFREAQYjtbAKr+Iy6WR0we
mSpxT8TjBcNqvfkhwuF93P0PwvqhHdmqA5BaunGOAOd8eMHKJIvhRIOdLeyElBdD
d14Cxcm/asHRU64WP5/LBr/Uk4f4j0a17XL2vw8aHs1qg+MDX1/TffsqGKPD3/1A
ImFsFWAZLlIrzR2grr3IbnZK8pw8Mlr0YzxWtWOTsMdgRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org