Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/TJwITCD4TqsFYAnhkeEeKMeOAWU.roa
File: TJwITCD4TqsFYAnhkeEeKMeOAWU.roa (raw, json)
Hash identifier: hjWZmt8IomDJnXpfOMCC0BaN7u/xR5zLLrJArqhhnK0=
Subject key identifier: 4C:9C:08:4C:20:F8:4E:AB:05:60:09:E1:91:E1:1E:28:C7:8E:01:65
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 0189E99C3D5FDCAEB274C0B139ABDBEDFFDF
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/TJwITCD4TqsFYAnhkeEeKMeOAWU.roa
Signing time: Sat 12 Aug 2023 11:57:57 +0000
ROA not before: Sat 12 Aug 2023 11:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.26.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.0.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.5.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:9c:3d:5f:dc:ae:b2:74:c0:b1:39:ab:db:ed:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Aug 12 11:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c9c084c20f84eab056009e191e11e28c78e0165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:05:a3:6b:a5:e7:f8:69:f6:43:38:06:25:
06:3f:2a:f6:fe:d2:37:18:90:8b:7f:63:86:b9:25:
a4:4b:82:5f:ea:ab:2e:13:d3:21:42:20:71:23:0d:
14:91:8a:1c:4a:9f:28:1e:34:90:4e:51:2f:e7:d1:
2d:cb:69:86:fb:98:38:43:e5:c4:ac:3c:e9:d4:a1:
d1:fe:8d:4d:63:cb:20:f4:bd:90:0e:c9:1a:31:9a:
04:13:02:d3:01:53:2d:28:e2:a5:fe:9c:65:38:d4:
c5:12:0f:8a:ba:cf:01:b2:96:65:69:16:2d:20:67:
c4:65:fb:36:6f:fb:2f:63:6e:46:29:23:f5:fc:be:
5a:b4:44:b1:da:9c:be:74:f2:c5:27:5b:e8:b4:a5:
90:7b:ff:59:72:5a:15:3f:92:1b:be:00:ac:ad:82:
93:3b:5f:7e:43:f5:4a:de:e7:d6:bf:e2:77:ac:8c:
81:8d:42:a6:a9:ee:ae:a3:0d:82:fc:97:2f:e9:b9:
50:8f:5e:9b:31:4c:69:6d:25:1d:06:7b:2e:c5:35:
df:11:be:b6:5e:2c:04:20:5f:bf:d6:99:c4:a1:1d:
d3:88:1f:f8:e2:6d:4c:29:ae:91:94:9a:32:bd:79:
5e:51:ac:a1:ef:72:32:28:62:ea:0b:37:5d:c9:93:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9C:08:4C:20:F8:4E:AB:05:60:09:E1:91:E1:1E:28:C7:8E:01:65
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/TJwITCD4TqsFYAnhkeEeKMeOAWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.10.255
188.190.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:fa:26:84:2b:a4:53:15:ed:13:ee:2e:b8:12:f0:5b:f7:45:
df:e1:6a:30:af:f5:54:dd:d6:65:a5:f1:ae:9b:9d:13:b6:4e:
6b:89:4a:fe:64:13:eb:eb:0e:03:e0:e6:04:d6:28:53:2b:61:
f5:fe:23:78:8e:65:26:c1:57:43:d6:7b:71:79:0a:1c:ff:75:
17:4d:2c:2e:63:ed:7a:22:1a:74:f9:54:42:56:7c:ab:af:d1:
23:12:38:0e:a0:d8:8c:86:a9:e5:76:5b:02:50:cc:b3:ca:5e:
6f:06:90:64:73:46:25:a7:f2:4f:e1:5c:2a:9b:82:58:06:8b:
37:5b:53:0c:20:9d:bf:15:70:d2:60:5f:23:23:40:aa:68:0d:
2a:e2:11:e6:b6:7a:a1:3f:67:c3:7b:5a:88:6e:e1:1c:d7:f5:
3d:e0:82:8d:aa:90:72:32:59:96:f6:4d:74:b5:19:a2:37:4d:
1e:d8:c7:dc:65:7f:ac:dc:c6:2b:12:5b:d0:66:c0:c6:b5:6e:
4f:5a:17:19:cf:e3:8a:59:13:c6:49:1d:7c:cf:e2:2b:a8:d6:
e5:76:4d:3d:90:4f:2a:92:3c:d0:50:ca:f9:4d:03:3d:fc:7d:
c5:50:a0:4d:5e:ae:5b:10:96:75:80:42:d2:27:0c:99:62:32:
62:9c:68:95
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYnpnD1f3K6ydMCxOavb7f/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzNmYWU5OWQ2NTEyOTg4NDVkMjJmODlkOGQyYjJlMWQx
M2JjMDQwHhcNMjMwODEyMTE1NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzljMDg0YzIwZjg0ZWFiMDU2MDA5ZTE5MWUxMWUyOGM3OGUwMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpEFo2ul5/hp9kM4BiUGPyr2/tI3
GJCLf2OGuSWkS4Jf6qsuE9MhQiBxIw0UkYocSp8oHjSQTlEv59Ety2mG+5g4Q+XE
rDzp1KHR/o1NY8sg9L2QDskaMZoEEwLTAVMtKOKl/pxlONTFEg+Kus8BspZlaRYt
IGfEZfs2b/svY25GKSP1/L5atESx2py+dPLFJ1votKWQe/9ZcloVP5IbvgCsrYKT
O19+Q/VK3ufWv+J3rIyBjUKmqe6uow2C/Jcv6blQj16bMUxpbSUdBnsuxTXfEb62
XiwEIF+/1pnEoR3TiB/44m1MKa6RlJoyvXleUayh73IyKGLqCzddyZOq6QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEycCEwg+E6rBWAJ4ZHhHijHjgFlMB8GA1UdIwQY
MBaAFMNz+umdZRKYhF0i+J2NKy4dE7wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEt
MWRlNTZlNDc1ZmJmLzEvVEp3SVRDRDRUcXNGWUFuaGtlRWVLTWVPQVdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84Y2U3OTUtM2ZhOS00Y2I3LTgzMWEtMWRlNTZlNDc1ZmJm
LzEvdzNQNjZaMWxFcGlFWFNMNG5ZMHJMaDBUdkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwG8vgME
ALy+CgMEBLy+EDANBgkqhkiG9w0BAQsFAAOCAQEAefomhCukUxXtE+4uuBLwW/dF
3+FqMK/1VN3WZaXxrpudE7ZOa4lK/mQT6+sOA+DmBNYoUyth9f4jeI5lJsFXQ9Z7
cXkKHP91F00sLmPteiIadPlUQlZ8q6/RIxI4DqDYjIap5XZbAlDMs8pebwaQZHNG
JafyT+FcKpuCWAaLN1tTDCCdvxVw0mBfIyNAqmgNKuIR5rZ6oT9nw3taiG7hHNf1
PeCCjaqQcjJZlvZNdLUZojdNHtjH3GV/rNzGKxJb0GbAxrVuT1oXGc/jilkTxkkd
fM/iK6jW5XZNPZBPKpI80FDK+U0DPfx9xVCgTV6uWxCWdYBC0icMmWIyYpxolQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:50 2025 by rpki-client