Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TU5bZ66UkpzSjy62e5rhrX42SoA.roa
File: TU5bZ66UkpzSjy62e5rhrX42SoA.roa (raw, json)
Hash identifier: 9Bjmeox+9Qdmp25/kGr/wZYMQFN+c/ZKI6aHpj1D30M=
Subject key identifier: 4D:4E:5B:67:AE:94:92:9C:D2:8F:2E:B6:7B:9A:E1:AD:7E:36:4A:80
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D172CED
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TU5bZ66UkpzSjy62e5rhrX42SoA.roa
Signing time: Fri 29 Apr 2022 09:40:13 +0000
ROA not before: Fri 29 Apr 2022 09:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209767
IP address blocks: 91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.245.92.0/22 maxlen: 24
109.207.133.0/24 maxlen: 24
109.207.143.0/24 maxlen: 24
109.207.142.0/24 maxlen: 24
176.113.176.0/22 maxlen: 24
176.124.172.0/22 maxlen: 22
91.229.30.0/24 maxlen: 24
91.246.204.0/22 maxlen: 22
91.246.216.0/24 maxlen: 24
178.213.176.0/22 maxlen: 24
176.116.229.0/24 maxlen: 24
91.239.224.0/24 maxlen: 24
176.116.237.0/24 maxlen: 24
91.224.213.0/24 maxlen: 24
46.174.204.0/22 maxlen: 22
91.239.179.0/24 maxlen: 24
91.226.52.0/23 maxlen: 23
91.226.54.0/23 maxlen: 23
31.132.192.0/22 maxlen: 22
31.132.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488058093 (0x1d172ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 29 09:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d4e5b67ae94929cd28f2eb67b9ae1ad7e364a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:a7:31:14:47:9c:89:16:79:09:0d:07:44:
a7:81:e8:a7:61:ea:97:59:fe:5f:39:6b:c8:13:ee:
1a:cd:ac:55:52:0c:4c:97:99:34:9d:96:87:f7:b4:
23:43:cc:12:a1:d8:ef:cd:03:70:a4:80:bd:26:92:
d4:fb:e8:6d:fd:d1:c4:92:aa:73:58:14:c6:1e:5b:
c3:0f:c9:2f:3b:35:0d:be:15:43:eb:cc:04:8a:33:
99:61:48:1e:ce:14:91:e4:e8:03:14:92:19:a0:ac:
47:c1:17:80:a9:b4:b3:89:25:dd:40:e0:07:09:80:
f4:88:ba:c5:d8:2c:2e:a8:d4:39:fd:c6:65:db:14:
63:e6:21:57:fa:a7:04:66:54:39:ca:aa:00:f0:44:
45:f0:f9:86:a6:7d:2f:9e:d3:b5:76:fd:44:e7:39:
9f:af:9f:8e:fb:9d:25:12:00:f8:92:7a:b4:22:49:
2a:f8:d6:e5:46:92:18:09:a6:9b:72:ea:9b:3a:bb:
90:87:91:78:44:ee:11:ea:7b:66:68:24:4c:7c:a0:
e7:cf:63:74:b0:99:4f:71:97:8a:8b:89:3d:1a:81:
75:4a:61:2d:b0:af:ce:50:62:19:99:6a:3c:3c:8a:
6d:bb:e2:58:17:b6:29:0a:fd:0a:b0:97:77:56:cf:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:5B:67:AE:94:92:9C:D2:8F:2E:B6:7B:9A:E1:AD:7E:36:4A:80
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TU5bZ66UkpzSjy62e5rhrX42SoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.192.0/21
46.174.204.0/22
91.224.213.0/24
91.225.34.0/23
91.226.52.0/22
91.229.30.0/24
91.239.179.0/24
91.239.224.0/24
91.245.92.0/22
91.246.204.0/22
91.246.216.0/24
109.207.133.0/24
109.207.142.0/23
176.113.176.0/22
176.116.229.0/24
176.116.237.0/24
176.124.172.0/22
178.213.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:db:a4:0c:46:f1:29:99:58:e3:a2:5c:b7:af:40:5b:19:d7:
ae:62:2a:e8:70:1a:62:d1:c2:35:ba:ff:90:b6:06:ba:7a:18:
6b:b7:6f:1d:e1:94:6c:cb:95:b6:a5:1c:6a:3d:75:5c:45:e7:
e5:15:b9:41:c4:08:d4:5b:e3:58:33:f9:d1:06:c1:6c:05:7c:
06:d3:f9:41:8d:91:f0:5b:43:83:27:b6:ed:0d:d1:65:1d:ee:
19:72:d5:01:fd:dd:03:34:fc:92:7e:c4:18:e5:52:95:83:1e:
6c:44:57:08:4e:79:4e:47:1e:3d:32:19:7e:41:c4:f4:56:bd:
7b:c5:34:f5:f9:30:81:ed:e8:bb:ca:47:3f:5c:fe:c3:a5:ac:
5d:cc:c9:30:d6:31:1b:ea:1d:a4:14:60:f1:ec:84:c1:a7:90:
9e:6d:5b:73:c0:91:93:5a:b2:84:cc:08:21:ab:44:3e:48:df:
ee:b7:45:fc:4f:01:93:eb:8a:71:f0:fb:52:35:b5:30:60:76:
5f:ff:a5:b2:83:2d:83:dc:5b:08:f0:4c:a3:67:bf:93:c4:c3:
9f:ac:57:ab:33:4a:e3:df:f6:55:47:31:7f:f4:b8:4e:a9:21:
ee:9b:65:32:24:c1:51:92:ec:72:83:63:ec:d5:59:23:6e:2f:
f0:7b:69:ca
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIEHRcs7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDQy
OTA5NDAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQ0ZTViNjdhZTk0
OTI5Y2QyOGYyZWI2N2I5YWUxYWQ3ZTM2NGE4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtWpzEUR5yJFnkJDQdEp4Hop2Hql1n+XzlryBPuGs2sVVIM
TJeZNJ2Wh/e0I0PMEqHY780DcKSAvSaS1Pvobf3RxJKqc1gUxh5bww/JLzs1Db4V
Q+vMBIozmWFIHs4UkeToAxSSGaCsR8EXgKm0s4kl3UDgBwmA9Ii6xdgsLqjUOf3G
ZdsUY+YhV/qnBGZUOcqqAPBERfD5hqZ9L57TtXb9ROc5n6+fjvudJRIA+JJ6tCJJ
KvjW5UaSGAmmm3Lqmzq7kIeReETuEep7ZmgkTHyg589jdLCZT3GXiouJPRqBdUph
LbCvzlBiGZlqPDyKbbviWBe2KQr9CrCXd1bPwcECAwEAAaOCAnAwggJsMB0GA1Ud
DgQWBBRNTltnrpSSnNKPLrZ7muGtfjZKgDAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L1RVNWJaNjZVa3B6U2p5NjJlNXJoclg0MlNvQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgABMGwDBAMfhMADBAIurswDBABb4NUDBAFb
4SIDBAJb4jQDBABb5R4DBABb77MDBABb7+ADBAJb9VwDBAJb9swDBABb9tgDBABt
z4UDBAFtz44DBAKwcbADBACwdOUDBACwdO0DBAKwfKwDBAKy1bAwDQYJKoZIhvcN
AQELBQADggEBAE/bpAxG8SmZWOOiXLevQFsZ165iKuhwGmLRwjW6/5C2Brp6GGu3
bx3hlGzLlbalHGo9dVxF5+UVuUHECNRb41gz+dEGwWwFfAbT+UGNkfBbQ4Mntu0N
0WUd7hly1QH93QM0/JJ+xBjlUpWDHmxEVwhOeU5HHj0yGX5BxPRWvXvFNPX5MIHt
6LvKRz9c/sOlrF3MyTDWMRvqHaQUYPHshMGnkJ5tW3PAkZNasoTMCCGrRD5I3+63
RfxPAZPrinHw+1I1tTBgdl//pbKDLYPcWwjwTKNnv5PEw5+sV6szSuPf9lVHMX/0
uE6pIe6bZTIkwVGS7HKDY+zVWSNuL/B7aco=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org