Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tisg0UqpYtNyOAMjY12VdGzf_O0.roa
File: Tisg0UqpYtNyOAMjY12VdGzf_O0.roa (raw, json)
Hash identifier: dlVcGo5BmmX41bx9gQA6lO+HCyjiEApvNyjQQ89XSsk=
Subject key identifier: 4E:2B:20:D1:4A:A9:62:D3:72:38:03:23:63:5D:95:74:6C:DF:FC:ED
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F1008DD9CF33B2B970A9AF0B2B4CF1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tisg0UqpYtNyOAMjY12VdGzf_O0.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 5.154.42.0/24 maxlen: 24
185.25.197.0/24 maxlen: 24
31.14.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:00:8d:d9:cf:33:b2:b9:70:a9:af:0b:2b:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e2b20d14aa962d372380323635d95746cdffced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:8c:cf:f8:b3:b6:23:58:1d:6c:7d:a6:76:
88:79:f5:16:7a:65:c2:48:f2:de:c9:b4:ee:f0:8d:
99:f8:25:7f:91:c5:27:41:72:82:c0:74:fa:b7:6c:
d9:72:f3:22:ed:9d:66:3b:99:0e:d8:c6:80:81:87:
25:7b:9a:e4:c0:91:7f:f6:4f:fb:de:59:71:35:69:
08:e6:b9:fa:a3:a4:d6:d2:b6:ec:9b:d2:a8:9a:46:
1c:17:9f:0f:5f:f9:04:af:01:54:6f:6f:66:7d:12:
ee:58:e7:bf:8b:73:c6:fe:17:37:8c:6c:db:8e:e9:
72:dd:7b:d2:71:83:be:e1:a4:1a:23:62:25:58:c6:
3c:89:8d:66:a4:d8:46:33:28:d0:6e:71:2c:c8:26:
50:65:86:69:15:a8:0b:ec:31:e7:01:9f:0f:d1:e6:
ed:5d:a1:4f:53:52:d4:81:d8:6c:fe:63:1a:a9:f4:
5f:a9:d2:b4:18:05:a7:e0:54:f6:7c:8d:cd:17:62:
63:a5:75:d2:89:d5:4c:1e:27:d7:d7:82:75:63:5b:
01:79:60:79:0e:8f:46:ae:c3:01:da:e7:e1:bd:f8:
d4:16:60:dc:0a:08:8f:ee:5c:43:86:f3:98:43:0b:
06:23:fc:66:8d:1d:dc:19:a1:3b:0a:b5:6b:8b:80:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:20:D1:4A:A9:62:D3:72:38:03:23:63:5D:95:74:6C:DF:FC:ED
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Tisg0UqpYtNyOAMjY12VdGzf_O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.42.0/24
31.14.207.0/24
185.25.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b0:34:b2:31:00:23:e8:cf:d2:cc:3b:0d:43:11:27:7f:ad:
eb:21:64:2c:a2:c5:56:a3:a5:36:9a:12:b6:da:09:a5:cd:a8:
40:9c:47:34:79:ee:93:45:23:5d:c7:b6:3d:05:eb:fa:64:9c:
80:70:ba:4b:df:44:20:a5:55:ee:4e:4a:36:f3:8e:9c:bc:23:
df:ea:d6:bc:66:db:8c:2e:06:86:e0:a8:dd:8e:38:d9:99:fc:
80:a4:39:11:be:d6:47:b1:05:68:a0:aa:b9:64:37:a1:04:f0:
1e:63:27:5b:3a:b5:50:40:66:73:d5:de:39:9f:e8:57:b3:b6:
46:27:14:51:b7:1f:55:68:d4:4a:cb:54:bf:1c:aa:91:f3:86:
f4:9e:e6:03:48:30:d6:21:74:cc:44:75:0f:32:62:54:a2:2c:
3d:09:a0:9e:75:de:0c:dc:41:f8:c1:34:40:f8:13:34:b1:d6:
77:b1:db:05:f6:c5:29:4a:31:44:90:5c:23:9c:27:b0:52:af:
8e:89:eb:06:3b:ae:5d:2c:fa:cd:d1:e8:93:0a:73:e6:77:4d:
6e:0b:92:48:ff:8b:24:3c:38:f3:1c:10:d8:06:30:6d:e5:f8:
5d:f0:27:6c:83:23:2a:c5:8c:b3:87:f8:e4:0d:52:5c:93:9a:
04:07:aa:d7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVx8QCN2c8zsrlwqa8LK0zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjMwMTAyMTAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJiMjBkMTRhYTk2MmQzNzIzODAzMjM2MzVkOTU3NDZjZGZmY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw6Mz/iztiNYHWx9pnaIefUWemXC
SPLeybTu8I2Z+CV/kcUnQXKCwHT6t2zZcvMi7Z1mO5kO2MaAgYcle5rkwJF/9k/7
3llxNWkI5rn6o6TW0rbsm9KomkYcF58PX/kErwFUb29mfRLuWOe/i3PG/hc3jGzb
july3XvScYO+4aQaI2IlWMY8iY1mpNhGMyjQbnEsyCZQZYZpFagL7DHnAZ8P0ebt
XaFPU1LUgdhs/mMaqfRfqdK0GAWn4FT2fI3NF2JjpXXSidVMHifX14J1Y1sBeWB5
Do9GrsMB2ufhvfjUFmDcCgiP7lxDhvOYQwsGI/xmjR3cGaE7CrVri4Dn9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE4rINFKqWLTcjgDI2NdlXRs3/ztMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvVGlzZzBVcXBZdE55T0FNalkxMlZkR3pmX08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZoqAwQA
Hw7PAwQAuRnFMA0GCSqGSIb3DQEBCwUAA4IBAQBvsDSyMQAj6M/SzDsNQxEnf63r
IWQsosVWo6U2mhK22gmlzahAnEc0ee6TRSNdx7Y9Bev6ZJyAcLpL30QgpVXuTko2
846cvCPf6ta8ZtuMLgaG4KjdjjjZmfyApDkRvtZHsQVooKq5ZDehBPAeYydbOrVQ
QGZz1d45n+hXs7ZGJxRRtx9VaNRKy1S/HKqR84b0nuYDSDDWIXTMRHUPMmJUoiw9
CaCedd4M3EH4wTRA+BM0sdZ3sdsF9sUpSjFEkFwjnCewUq+OiesGO65dLPrN0eiT
CnPmd01uC5JI/4skPDjzHBDYBjBt5fhd8CdsgyMqxYyzh/jkDVJck5oEB6rX
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:13 2025 by rpki-client