Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tFxc_VM6C2pGbcwi84B9eL7qZQY.roa
File: tFxc_VM6C2pGbcwi84B9eL7qZQY.roa (raw, json)
Hash identifier: twybyAgRNtel/j4zKhoVmpHX0mTdeZ3sgxVe7wmG5Dc=
Subject key identifier: B4:5C:5C:FD:53:3A:0B:6A:46:6D:CC:22:F3:80:7D:78:BE:EA:65:06
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01825DB0DCA6CDF16B7E731FAD806592FB17
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tFxc_VM6C2pGbcwi84B9eL7qZQY.roa
Signing time: Tue 02 Aug 2022 08:34:08 +0000
ROA not before: Tue 02 Aug 2022 08:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 188.255.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:b0:dc:a6:cd:f1:6b:7e:73:1f:ad:80:65:92:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 2 08:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b45c5cfd533a0b6a466dcc22f3807d78beea6506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:d5:41:51:84:3a:67:66:a0:73:d7:72:de:
ae:ee:67:da:a4:07:49:dd:5d:88:5a:1d:1c:22:e6:
d3:2b:1f:5b:fe:3f:79:72:d1:94:8c:2b:08:c2:2e:
b0:ff:77:b2:50:c4:87:f8:ee:96:5f:0a:64:9d:2d:
a5:13:d2:39:be:2b:7b:b0:bf:58:f0:1c:8a:d7:60:
d8:78:35:68:91:88:1b:a5:86:68:f4:38:23:b2:47:
09:5a:d6:d9:3e:d6:c1:30:ff:0e:f7:cc:ba:93:9d:
dd:41:9f:f7:36:77:ac:d8:83:6a:74:b0:c7:99:8a:
b2:c1:32:28:2f:41:14:6c:20:a5:ee:73:10:36:81:
b0:4e:f3:4a:1c:23:a9:99:3b:d0:d2:80:bc:6a:ab:
15:07:e5:6b:74:1c:94:63:23:5a:40:51:f5:4a:8c:
63:e5:7c:fe:17:27:7a:eb:37:14:a1:f8:03:07:3b:
33:cb:d0:8c:f4:85:7f:52:ec:25:a6:d6:30:fd:9a:
16:46:60:52:32:f2:e5:6c:da:4b:6a:59:73:09:d8:
05:48:b5:79:49:9e:63:83:64:e1:ea:ae:1b:ed:75:
a7:77:03:53:29:cb:d5:d0:d6:cf:ec:1e:27:87:1d:
57:d0:da:5b:e9:c1:da:a6:01:4d:66:46:b7:6c:5c:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:5C:FD:53:3A:0B:6A:46:6D:CC:22:F3:80:7D:78:BE:EA:65:06
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tFxc_VM6C2pGbcwi84B9eL7qZQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
00:47:b0:d8:a6:6e:a5:f6:96:2d:68:53:69:f0:ce:c3:a1:43:
6a:c7:2b:60:60:3a:0c:84:63:1c:24:f0:92:1f:a1:3b:4a:80:
f5:05:de:43:5e:3c:05:43:95:c9:7b:46:4e:ae:42:d5:99:40:
7b:56:59:7f:2c:35:7e:df:ce:11:fe:8b:4e:d0:d5:09:90:c5:
ea:7f:6d:42:81:de:9f:4e:60:53:28:1c:16:d9:41:99:02:57:
e0:79:9d:4b:f8:32:08:56:1b:07:f2:8f:40:1d:71:ef:d5:6e:
55:b2:0b:64:47:12:ba:43:e4:2f:80:97:f3:16:83:f9:07:0a:
9e:51:a7:d2:98:e0:fe:ce:e5:77:95:eb:34:2c:e7:14:70:ec:
5f:83:6c:e2:2e:ea:30:dc:66:5d:11:44:3a:c0:17:30:09:af:
64:53:8f:27:8e:d6:f8:ab:f4:b2:2c:f8:e6:be:49:8d:01:50:
e2:c6:38:78:3c:27:53:90:21:b7:15:8f:ae:a2:d9:d2:eb:34:
61:98:da:99:ee:8d:cc:89:47:08:54:c2:b8:bf:f7:e9:4a:12:
95:77:bd:30:9a:b4:02:e0:a9:45:2a:2a:cd:f4:dd:1c:cf:e7:
ef:9f:7c:f6:d2:21:fd:e8:52:6c:34:33:99:df:b1:9e:bc:54:
9c:59:60:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJdsNymzfFrfnMfrYBlkvsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwODAyMDgzNDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDVjNWNmZDUzM2EwYjZhNDY2ZGNjMjJmMzgwN2Q3OGJlZWE2NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnTVQVGEOmdmoHPXct6u7mfapAdJ
3V2IWh0cIubTKx9b/j95ctGUjCsIwi6w/3eyUMSH+O6WXwpknS2lE9I5vit7sL9Y
8ByK12DYeDVokYgbpYZo9DgjskcJWtbZPtbBMP8O98y6k53dQZ/3Nnes2INqdLDH
mYqywTIoL0EUbCCl7nMQNoGwTvNKHCOpmTvQ0oC8aqsVB+VrdByUYyNaQFH1Soxj
5Xz+Fyd66zcUofgDBzszy9CM9IV/UuwlptYw/ZoWRmBSMvLlbNpLallzCdgFSLV5
SZ5jg2Th6q4b7XWndwNTKcvV0NbP7B4nhx1X0Npb6cHapgFNZka3bFwBjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLRcXP1TOgtqRm3MIvOAfXi+6mUGMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvdEZ4Y19WTTZDMnBHYmN3aTg0QjllTDdxWlFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/IMA0G
CSqGSIb3DQEBCwUAA4IBAQAAR7DYpm6l9pYtaFNp8M7DoUNqxytgYDoMhGMcJPCS
H6E7SoD1Bd5DXjwFQ5XJe0ZOrkLVmUB7Vll/LDV+384R/otO0NUJkMXqf21Cgd6f
TmBTKBwW2UGZAlfgeZ1L+DIIVhsH8o9AHXHv1W5VsgtkRxK6Q+QvgJfzFoP5Bwqe
UafSmOD+zuV3les0LOcUcOxfg2ziLuow3GZdEUQ6wBcwCa9kU48njtb4q/SyLPjm
vkmNAVDixjh4PCdTkCG3FY+uotnS6zRhmNqZ7o3MiUcIVMK4v/fpShKVd70wmrQC
4KlFKirN9N0cz+fvn3z20iH96FJsNDOZ37GevFScWWA/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org