Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/d_tcg5BP2FK-RPIMTWRBmBltnHw.roa
File: d_tcg5BP2FK-RPIMTWRBmBltnHw.roa (raw, json)
Hash identifier: jkOtW/cXk0tj/ZpSYuJrpkxVb5vIxRRizjKvyfKKvlE=
Subject key identifier: 77:FB:5C:83:90:4F:D8:52:BE:44:F2:0C:4D:64:41:98:19:6D:9C:7C
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0DCC6656
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/d_tcg5BP2FK-RPIMTWRBmBltnHw.roa
Signing time: Sat 01 Jan 2022 12:55:58 +0000
ROA not before: Sat 01 Jan 2022 12:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 93.185.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231499350 (0xdcc6656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 12:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77fb5c83904fd852be44f20c4d644198196d9c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:6b:90:7a:aa:78:74:cd:da:c0:0c:c7:36:
98:2b:f0:48:4d:0a:fb:1f:c8:94:d5:bf:ba:95:22:
dd:a4:0b:ce:db:fa:a8:00:2d:91:fd:76:7c:4a:07:
65:dc:18:7e:fd:f5:9e:6c:f9:5f:dd:f2:de:10:32:
d5:b8:16:0c:90:b6:74:9c:ac:ea:90:87:0a:56:08:
1d:b9:cb:6e:59:7b:9e:9c:06:86:90:56:ed:a4:63:
fe:69:bf:5b:db:a4:90:ef:44:0a:19:d7:1d:e4:a3:
d0:00:16:6e:8f:88:0f:16:89:8a:2c:ee:1c:41:43:
6e:69:f9:30:8f:e4:70:de:51:06:e0:66:57:21:97:
0d:03:3a:4f:a6:ad:1d:eb:b5:d7:78:21:3a:b0:0a:
cb:0f:c1:6a:b5:e6:fe:82:e6:33:45:c1:73:f6:f7:
da:40:38:e6:34:1d:90:8a:2e:cf:00:27:b1:2c:c2:
b5:91:cc:63:76:21:5b:8e:d7:d9:e5:a8:88:97:1f:
27:9f:be:fb:02:e2:d3:54:3f:32:7c:08:75:84:4f:
d5:1b:72:54:24:99:8f:72:88:27:22:7e:8f:3e:8d:
b2:a4:14:3c:30:86:70:90:c3:ea:f2:92:ac:f3:41:
84:b9:bd:3f:b1:e9:97:64:79:43:be:a5:0e:bc:07:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:5C:83:90:4F:D8:52:BE:44:F2:0C:4D:64:41:98:19:6D:9C:7C
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/d_tcg5BP2FK-RPIMTWRBmBltnHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.166.0/24
Signature Algorithm: sha256WithRSAEncryption
50:58:77:4c:42:06:60:90:81:49:ae:41:28:dc:c0:5b:32:13:
78:48:6d:d5:a8:d9:06:4a:d9:c8:32:b5:b8:eb:50:01:20:4b:
eb:c9:01:25:28:cf:f6:80:be:54:b4:50:45:a1:21:c1:36:a8:
d1:c0:25:88:47:86:4b:bb:fa:54:c0:34:1a:5a:60:40:65:5e:
6d:e1:59:15:9a:2e:33:15:44:84:06:da:84:35:9c:99:95:c9:
3e:10:5a:3e:14:eb:82:9b:e5:45:18:ac:55:c7:27:b6:f0:f0:
84:c2:3e:90:98:c7:3d:65:d3:56:9c:28:68:e2:0d:2e:50:10:
f7:10:a7:73:04:4a:71:a1:ee:9e:39:1a:f6:8b:cc:48:c7:44:
60:ff:d9:42:35:46:b8:b0:03:80:88:36:9b:e6:9a:ef:76:7d:
a3:be:55:fe:68:df:9b:af:f6:b4:e2:09:2e:0e:30:dc:9b:a6:
a1:79:42:18:f3:28:5c:2f:5c:4a:de:6c:2a:a1:74:24:00:d1:
c2:af:3b:c2:6f:ce:c8:bf:cc:52:c4:5d:ea:ac:ff:19:43:59:
b3:08:4d:68:f2:c2:c7:23:37:1a:a9:3b:1c:f4:81:66:91:0c:
47:a1:b4:45:6a:ca:6b:e3:56:15:0b:60:31:4a:3b:b9:65:0e:
02:55:3f:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDcxmVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWEwMTBmODdhMDQ5YjZlMjFhYmVkOWI0MDk4M2IwNGYzZjFjN2U4MB4XDTIyMDEw
MTEyNTU1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdmYjVjODM5MDRm
ZDg1MmJlNDRmMjBjNGQ2NDQxOTgxOTZkOWM3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvpa5B6qnh0zdrADMc2mCvwSE0K+x/IlNW/upUi3aQLztv6
qAAtkf12fEoHZdwYfv31nmz5X93y3hAy1bgWDJC2dJys6pCHClYIHbnLbll7npwG
hpBW7aRj/mm/W9ukkO9EChnXHeSj0AAWbo+IDxaJiizuHEFDbmn5MI/kcN5RBuBm
VyGXDQM6T6atHeu113ghOrAKyw/BarXm/oLmM0XBc/b32kA45jQdkIouzwAnsSzC
tZHMY3YhW47X2eWoiJcfJ5+++wLi01Q/MnwIdYRP1RtyVCSZj3KIJyJ+jz6NsqQU
PDCGcJDD6vKSrPNBhLm9P7Hpl2R5Q76lDrwH5TUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR3+1yDkE/YUr5E8gxNZEGYGW2cfDAfBgNVHSMEGDAWgBQRoBD4egSbbiGr
7ZtAmDsE8/HH6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VhQVEtSG9FbTI0aHEtMmJRSmc3QlBQeHgtZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjI1ZDdjLTY2NzctNGZkYi04OThlLWVlNzQ2NTc1NGZmNi8x
L2RfdGNnNUJQMkZLLVJQSU1UV1JCbUJsdG5Idy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjI1ZDdjLTY2NzctNGZkYi04OThlLWVlNzQ2NTc1NGZmNi8xL0VhQVEtSG9FbTI0
aHEtMmJRSmc3QlBQeHgtZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF25pjANBgkqhkiG9w0BAQsFAAOC
AQEAUFh3TEIGYJCBSa5BKNzAWzITeEht1ajZBkrZyDK1uOtQASBL68kBJSjP9oC+
VLRQRaEhwTao0cAliEeGS7v6VMA0GlpgQGVebeFZFZouMxVEhAbahDWcmZXJPhBa
PhTrgpvlRRisVccntvDwhMI+kJjHPWXTVpwoaOINLlAQ9xCncwRKcaHunjka9ovM
SMdEYP/ZQjVGuLADgIg2m+aa73Z9o75V/mjfm6/2tOIJLg4w3JumoXlCGPMoXC9c
St5sKqF0JADRwq87wm/OyL/MUsRd6qz/GUNZswhNaPLCxyM3Gqk7HPSBZpEMR6G0
RWrKa+NWFQtgMUo7uWUOAlU/jw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org