Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Tj-vSfB2ArRyeWLv7F0U15LLwqM.roa
File: Tj-vSfB2ArRyeWLv7F0U15LLwqM.roa (raw, json)
Hash identifier: LaJuimT2MyzP8IYe/rTo+D75Z2zVY4lypYpFa7KThF8=
Subject key identifier: 4E:3F:AF:49:F0:76:02:B4:72:79:62:EF:EC:5D:14:D7:92:CB:C2:A3
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0BCA1D90
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Tj-vSfB2ArRyeWLv7F0U15LLwqM.roa
Signing time: Tue 08 Feb 2022 08:23:43 +0000
ROA not before: Tue 08 Feb 2022 08:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197795216 (0xbca1d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Feb 8 08:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e3faf49f07602b4727962efec5d14d792cbc2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:60:a3:7e:39:fc:14:62:4f:fd:c4:01:d4:
79:2b:26:b1:63:67:c5:73:dc:22:f8:a5:d2:a5:90:
10:58:61:33:2d:84:3e:8c:cd:68:bc:82:2c:23:c7:
b5:96:45:c7:a5:a2:df:a8:74:7d:60:5b:95:f9:2f:
4a:ee:82:ea:e8:15:c0:dc:7e:1c:39:bb:00:d8:df:
65:97:68:27:e3:52:d1:9f:bf:b4:54:80:05:c8:da:
b7:ef:0b:4c:38:e7:66:69:de:de:82:e0:7e:d4:fa:
f8:9a:cc:02:82:4d:24:77:58:78:0a:2c:52:34:aa:
6c:ab:f9:8c:fc:52:e9:84:e2:fa:f7:13:26:2c:16:
0c:22:1c:06:80:c3:e5:de:57:d5:3b:b5:67:bf:2b:
7d:04:9a:24:c8:9f:57:f7:e6:89:6a:87:94:63:99:
f9:d8:7c:0d:0b:8d:e7:87:22:77:25:e5:80:72:c9:
6b:c7:14:d2:a7:dc:ce:9e:20:d4:ac:98:b2:f2:43:
89:8a:1f:ca:14:4f:78:71:d6:e8:1b:29:6f:43:aa:
73:32:6a:5e:17:5d:ef:5b:20:c0:27:eb:5b:31:0d:
2f:91:4f:54:36:2c:01:e9:dd:74:a6:c5:74:6e:ce:
7a:43:89:68:cc:6c:20:b3:f0:a5:f9:f4:06:cb:64:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:AF:49:F0:76:02:B4:72:79:62:EF:EC:5D:14:D7:92:CB:C2:A3
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Tj-vSfB2ArRyeWLv7F0U15LLwqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
93.113.203.0/24
93.114.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0a:17:9c:94:91:e7:6c:4c:f5:cb:04:e5:eb:ac:c8:6d:f3:
44:8b:04:38:3e:e4:83:6a:c7:b5:4f:12:30:36:de:17:0f:68:
e2:89:06:d9:95:07:9e:63:0d:1b:99:18:3d:fc:ea:84:88:5a:
1c:62:0f:1e:01:49:db:0c:34:07:ef:4e:d2:36:0c:90:d5:5d:
f8:c0:21:f5:d9:96:d6:70:d5:1c:95:bb:b0:db:01:fc:ce:de:
87:c9:2f:34:d1:7d:c2:8d:9c:e9:ed:d8:cc:68:31:75:53:5a:
a0:70:99:71:f3:b1:cb:24:aa:bf:b6:b3:74:61:fd:9d:e1:e3:
1d:45:f9:b9:b2:42:be:a9:ec:7e:7d:94:8f:5a:b6:b6:74:61:
7b:77:12:6b:7b:ca:7e:08:0a:87:af:29:f2:71:c0:cc:3b:24:
d0:23:27:f5:0e:fa:23:77:43:82:75:4d:d4:70:7e:f0:0a:e1:
c6:40:ce:9e:08:95:5c:19:6f:fd:9f:4e:5b:e4:61:ab:3e:ef:
68:28:d6:30:5e:05:0d:a7:c5:f8:3c:c0:df:0f:66:98:ae:db:
0e:d7:75:df:7d:a2:ae:c0:73:1a:0c:ba:2a:03:ae:51:83:a7:
ec:9e:c2:5d:07:33:b9:1e:27:8a:68:1e:84:79:d7:b7:a6:68:
9a:4f:f8:f5
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEC8odkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTU4OTUyZDM5MzkzNWYwZDNiY2U4MTRmZDkxNzhkMDQ2OTNhZWI5MB4XDTIyMDIw
ODA4MjM0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGUzZmFmNDlmMDc2
MDJiNDcyNzk2MmVmZWM1ZDE0ZDc5MmNiYzJhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANETYKN+OfwUYk/9xAHUeSsmsWNnxXPcIvil0qWQEFhhMy2E
PozNaLyCLCPHtZZFx6Wi36h0fWBblfkvSu6C6ugVwNx+HDm7ANjfZZdoJ+NS0Z+/
tFSABcjat+8LTDjnZmne3oLgftT6+JrMAoJNJHdYeAosUjSqbKv5jPxS6YTi+vcT
JiwWDCIcBoDD5d5X1Tu1Z78rfQSaJMifV/fmiWqHlGOZ+dh8DQuN54cidyXlgHLJ
a8cU0qfczp4g1KyYsvJDiYofyhRPeHHW6Bspb0OqczJqXhdd71sgwCfrWzENL5FP
VDYsAenddKbFdG7OekOJaMxsILPwpfn0BstkXxUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBROP69J8HYCtHJ5Yu/sXRTXksvCozAfBgNVHSMEGDAWgBT+WJUtOTk18NO8
6BT9kXjQRpOuuTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19saVZMVGs1TmZEVHZPZ1VfWkY0MEVhVHJyay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvYjI2YWE4LWFjZTctNGZhNi05ZThlLTVkNDhiNjVjZTU3My8x
L1RqLXZTZkIyQXJSeWVXTHY3RjBVMTVMTHdxTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
YjI2YWE4LWFjZTctNGZhNi05ZThlLTVkNDhiNjVjZTU3My8xL19saVZMVGs1TmZE
VHZPZ1VfWkY0MEVhVHJyay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFXMTgMEAFkrLAMEAF1xywMEAF1y
qzANBgkqhkiG9w0BAQsFAAOCAQEAswoXnJSR52xM9csE5eusyG3zRIsEOD7kg2rH
tU8SMDbeFw9o4okG2ZUHnmMNG5kYPfzqhIhaHGIPHgFJ2ww0B+9O0jYMkNVd+MAh
9dmW1nDVHJW7sNsB/M7eh8kvNNF9wo2c6e3YzGgxdVNaoHCZcfOxyySqv7azdGH9
neHjHUX5ubJCvqnsfn2Uj1q2tnRhe3cSa3vKfggKh68p8nHAzDsk0CMn9Q76I3dD
gnVN1HB+8ArhxkDOngiVXBlv/Z9OW+Rhqz7vaCjWMF4FDafF+DzA3w9mmK7bDtd1
332irsBzGgy6KgOuUYOn7J7CXQczuR4nimgehHnXt6Zomk/49Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org