Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/TiZ3Lg7zGUYOEFPPSIHY_Qubjhg.roa
File: TiZ3Lg7zGUYOEFPPSIHY_Qubjhg.roa (raw, json)
Hash identifier: jsqg+9Uvg+4qmgANIw+AJZQ80wRIkq/b8Atoya26nNU=
Subject key identifier: 4E:26:77:2E:0E:F3:19:46:0E:10:53:CF:48:81:D8:FD:0B:9B:8E:18
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 0D8239A9
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/TiZ3Lg7zGUYOEFPPSIHY_Qubjhg.roa
Signing time: Sat 01 Jan 2022 01:55:59 +0000
ROA not before: Sat 01 Jan 2022 01:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 86.39.128.0/17 maxlen: 24
185.115.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226638249 (0xd8239a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jan 1 01:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e26772e0ef319460e1053cf4881d8fd0b9b8e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:4d:85:67:f9:f3:26:9e:9f:54:ca:11:14:
24:c7:56:79:26:f0:62:bc:c2:7a:28:35:cb:94:e2:
ce:c8:7e:67:80:25:42:77:34:32:c3:a4:e4:cc:23:
58:b4:70:86:74:11:8e:47:8e:cf:d6:eb:36:2e:f8:
57:4b:63:44:dc:70:a6:b4:31:1f:d7:87:be:e5:4e:
38:1e:59:1c:1c:cd:07:6e:ad:6d:1d:08:c1:2d:c7:
1c:0c:5b:f4:18:d7:52:6a:42:a0:14:de:10:8c:eb:
69:08:ad:b0:8f:23:84:5d:1b:8b:ee:ca:3b:f7:8e:
8a:2a:a3:90:cd:a4:f8:24:77:c4:bf:b0:0d:39:ed:
d2:ff:79:6f:4f:0f:11:7a:86:89:11:5a:a0:99:42:
b3:3b:bc:b6:31:b6:8d:b8:8f:dd:86:b3:a1:25:6d:
bc:85:71:11:85:f6:94:df:fc:d7:2d:1c:d5:7e:89:
98:2f:5e:10:a0:9b:29:62:56:18:b2:f1:82:44:db:
f3:8a:ff:e2:b8:fe:ed:44:58:7e:c1:c4:3b:cf:3a:
78:1e:8e:db:e0:fe:dd:c4:01:bf:22:89:20:f1:64:
db:16:8b:cc:a0:6b:5d:23:ff:02:1c:65:fe:2c:81:
01:62:ae:e7:c5:93:d9:58:e6:f4:cf:09:00:ef:4c:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:77:2E:0E:F3:19:46:0E:10:53:CF:48:81:D8:FD:0B:9B:8E:18
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/TiZ3Lg7zGUYOEFPPSIHY_Qubjhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.39.128.0/17
185.115.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:20:0a:10:c2:69:af:b0:03:d3:92:eb:b7:e6:1c:13:64:91:
f9:1e:f3:86:be:b9:cf:4d:80:57:42:cd:8b:80:4a:da:1b:a0:
2f:36:14:e6:8b:86:1a:e6:5f:d4:78:01:f8:5c:68:bf:94:bd:
4c:81:91:e7:92:25:8d:53:79:1d:c0:80:0b:59:78:b5:2b:93:
c9:17:9e:60:df:8f:5f:95:ce:2c:b1:5d:d7:fa:56:dd:d4:3a:
10:81:a6:d0:47:53:f2:2b:dc:76:c9:fe:a5:26:f9:0a:33:52:
f3:a2:da:17:f3:11:d9:8d:ee:6b:5a:1e:c1:84:01:2e:8c:32:
5a:04:f2:92:4c:3d:2f:46:55:4d:cd:f3:88:72:48:ad:e3:9d:
3b:cf:aa:a4:c2:27:18:b3:32:c1:d2:f5:a5:bd:d5:89:64:fa:
63:30:c9:65:c4:80:7c:f9:67:30:76:01:0b:b3:ac:3f:55:56:
91:b8:d6:a9:fb:f4:78:84:b2:ab:12:79:d1:7c:8c:6d:a8:62:
86:55:f6:a2:0b:4e:06:97:5a:1d:f7:fc:c2:ba:5b:5d:3c:95:
70:c2:fe:f0:31:b5:f5:27:e5:d7:b9:6b:2e:90:20:41:8f:ea:
9b:11:c0:dc:5a:e3:eb:55:9f:62:4a:67:2b:a8:2c:c9:32:6c:
f3:24:b1:f0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDYI5qTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NjgyODkwYjdlZDIzMzQ3NDc4ZDRkNjVkYjA5NDhjM2RiMjNlYmU3MB4XDTIyMDEw
MTAxNTU1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGUyNjc3MmUwZWYz
MTk0NjBlMTA1M2NmNDg4MWQ4ZmQwYjliOGUxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANowTYVn+fMmnp9UyhEUJMdWeSbwYrzCeig1y5Tizsh+Z4Al
Qnc0MsOk5MwjWLRwhnQRjkeOz9brNi74V0tjRNxwprQxH9eHvuVOOB5ZHBzNB26t
bR0IwS3HHAxb9BjXUmpCoBTeEIzraQitsI8jhF0bi+7KO/eOiiqjkM2k+CR3xL+w
DTnt0v95b08PEXqGiRFaoJlCszu8tjG2jbiP3YazoSVtvIVxEYX2lN/81y0c1X6J
mC9eEKCbKWJWGLLxgkTb84r/4rj+7URYfsHEO886eB6O2+D+3cQBvyKJIPFk2xaL
zKBrXSP/Ahxl/iyBAWKu58WT2Vjm9M8JAO9MKkkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBROJncuDvMZRg4QU89Igdj9C5uOGDAfBgNVHSMEGDAWgBRmgokLftIzR0eN
TWXbCUjD2yPr5zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pvS0pDMzdTTTBkSGpVMWwyd2xJdzlzajYtYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjEvMmE5ODFkLTY3ZjUtNDg0ZS1iZTFiLWZmNjRhOWJhNTk3Yy8x
L1RpWjNMZzd6R1VZT0VGUFBTSUhZX1F1YmpoZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MmE5ODFkLTY3ZjUtNDg0ZS1iZTFiLWZmNjRhOWJhNTk3Yy8xL1pvS0pDMzdTTTBk
SGpVMWwyd2xJdzlzajYtYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEB1YngAMEArlz2DANBgkqhkiG9w0B
AQsFAAOCAQEAOiAKEMJpr7AD05Lrt+YcE2SR+R7zhr65z02AV0LNi4BK2hugLzYU
5ouGGuZf1HgB+Fxov5S9TIGR55IljVN5HcCAC1l4tSuTyReeYN+PX5XOLLFd1/pW
3dQ6EIGm0EdT8ivcdsn+pSb5CjNS86LaF/MR2Y3ua1oewYQBLowyWgTykkw9L0ZV
Tc3ziHJIreOdO8+qpMInGLMywdL1pb3ViWT6YzDJZcSAfPlnMHYBC7OsP1VWkbjW
qfv0eISyqxJ50XyMbahihlX2ogtOBpdaHff8wrpbXTyVcML+8DG19Sfl17lrLpAg
QY/qmxHA3Frj61WfYkpnK6gsyTJs8ySx8A==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:05 2025 by rpki-client