Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7HTiaNyDZCqMB4PxfnTp-urPkmY.roa
File: 7HTiaNyDZCqMB4PxfnTp-urPkmY.roa (raw, json)
Hash identifier: xPvXy9La2oPoFJMhoW6/4wN1nssH/kwOESkKBanN2zY=
Subject key identifier: EC:74:E2:68:DC:83:64:2A:8C:07:83:F1:7E:74:E9:FA:EA:CF:92:66
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04F6A04B
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7HTiaNyDZCqMB4PxfnTp-urPkmY.roa
Signing time: Sun 29 May 2022 09:27:57 +0000
ROA not before: Sun 29 May 2022 09:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 81.19.139.0/24 maxlen: 32
81.19.141.0/24 maxlen: 32
81.19.140.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83271755 (0x4f6a04b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 29 09:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec74e268dc83642a8c0783f17e74e9faeacf9266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:6a:b3:44:f6:f5:75:98:22:05:f5:72:dd:
35:f8:16:07:ba:d6:04:45:9b:86:ea:80:a9:1c:18:
8a:20:3e:ca:6a:38:a1:0f:35:6a:6c:24:86:6f:02:
f7:6e:24:81:7e:b8:8c:0a:fb:19:64:28:f6:56:07:
ea:b6:52:01:dd:c5:6e:e4:44:5f:08:5a:f3:c9:40:
c9:a9:f1:ec:a7:23:b4:ff:45:e9:a1:ca:82:66:ee:
31:c8:de:28:67:ba:2a:f4:93:60:5e:b2:59:bd:1a:
74:12:e4:56:39:ae:1d:6d:07:d5:52:6b:08:2c:2f:
6c:0f:5a:ef:2f:7d:a0:6c:16:58:fd:22:5f:0d:2d:
3f:ef:22:0b:1e:c6:2f:aa:0e:a1:74:1d:bb:18:0f:
51:6e:45:39:f5:04:af:9c:5d:e3:81:2e:11:d6:ca:
07:7b:63:d6:3b:77:3a:8a:1d:3d:81:2a:1f:f8:86:
cb:94:b0:c9:f3:82:21:76:99:fc:c6:36:40:b2:06:
f8:bb:3d:34:e5:0a:6c:34:6c:b8:1e:23:ac:a7:51:
73:f7:e1:1d:a7:2d:20:a0:02:d4:22:20:fc:aa:b1:
3c:c2:3b:a2:43:68:3a:ec:73:02:5f:9b:a5:21:9a:
ee:61:bd:b9:fb:b8:f6:9e:77:d4:00:51:ea:77:80:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:E2:68:DC:83:64:2A:8C:07:83:F1:7E:74:E9:FA:EA:CF:92:66
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7HTiaNyDZCqMB4PxfnTp-urPkmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.139.0-81.19.141.255
Signature Algorithm: sha256WithRSAEncryption
1a:bd:08:05:0a:60:0a:ea:28:6e:e3:ec:a5:df:a9:60:09:7c:
31:5f:60:cf:cc:e4:b3:5a:69:c6:c7:18:d5:f4:7a:1c:93:a0:
45:25:a7:ad:c9:7b:85:5a:40:98:06:de:61:55:96:12:ec:10:
51:0f:59:a4:a2:a4:ab:13:d8:9c:e3:e0:f4:ff:f7:20:1b:44:
bc:6b:0b:35:72:a8:53:d4:ed:d6:ad:78:6b:7f:ee:66:d1:3c:
7e:df:f7:6c:49:36:75:0b:e2:10:a2:9b:1f:04:55:1c:b1:26:
2c:cc:f2:b8:ec:2f:a5:a4:a0:4a:6e:e5:12:a6:4d:dd:43:bf:
7e:5a:f5:bb:83:23:38:04:33:9e:99:b3:22:1a:8a:e1:38:9f:
ee:ad:58:21:fd:70:53:a0:93:8d:cf:6e:44:c7:10:80:04:03:
4d:ed:42:e0:1e:ac:91:eb:c5:1d:57:f1:11:b0:f1:2a:22:37:
a0:e8:6d:b6:7d:dd:91:f0:e3:24:4a:dd:cb:5d:21:c2:37:96:
f2:6c:6c:fb:34:ca:a0:83:95:4b:e9:ac:fe:05:51:04:f8:dc:
26:26:fa:2e:7b:e3:6d:28:44:5b:18:82:c4:e8:64:fd:a0:8b:
4f:4b:b2:f6:44:fe:88:3b:ef:a4:25:47:b1:d8:62:a3:ac:dd:
0d:00:4c:66
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBPagSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNlOTY0MGEzZWYyZmVhMTkzNzRhZDhmOTlmNDIzZDdhYTdjNzZiMB4XDTIyMDUy
OTA5Mjc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWM3NGUyNjhkYzgz
NjQyYThjMDc4M2YxN2U3NGU5ZmFlYWNmOTI2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRharNE9vV1mCIF9XLdNfgWB7rWBEWbhuqAqRwYiiA+ymo4
oQ81amwkhm8C924kgX64jAr7GWQo9lYH6rZSAd3FbuREXwha88lAyanx7KcjtP9F
6aHKgmbuMcjeKGe6KvSTYF6yWb0adBLkVjmuHW0H1VJrCCwvbA9a7y99oGwWWP0i
Xw0tP+8iCx7GL6oOoXQduxgPUW5FOfUEr5xd44EuEdbKB3tj1jt3OoodPYEqH/iG
y5SwyfOCIXaZ/MY2QLIG+Ls9NOUKbDRsuB4jrKdRc/fhHactIKAC1CIg/KqxPMI7
okNoOuxzAl+bpSGa7mG9ufu49p531ABR6neAj58CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTsdOJo3INkKowHg/F+dOn66s+SZjAfBgNVHSMEGDAWgBSkzpZAo+8v6hk3
Stj5n0I9eqfHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNNldRS1B2TC1vWk4wclktWjlDUFhxbngycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8x
LzdIVGlhTnlEWkNxTUI0UHhmblRwLXVyUGttWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8xL3BNNldRS1B2TC1v
Wk4wclktWjlDUFhxbngycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAUROLAwQBUROMMA0GCSqGSIb3
DQEBCwUAA4IBAQAavQgFCmAK6ihu4+yl36lgCXwxX2DPzOSzWmnGxxjV9Hock6BF
JaetyXuFWkCYBt5hVZYS7BBRD1mkoqSrE9ic4+D0//cgG0S8aws1cqhT1O3WrXhr
f+5m0Tx+3/dsSTZ1C+IQopsfBFUcsSYszPK47C+lpKBKbuUSpk3dQ79+WvW7gyM4
BDOembMiGorhOJ/urVgh/XBToJONz25ExxCABANN7ULgHqyR68UdV/ERsPEqIjeg
6G22fd2R8OMkSt3LXSHCN5bybGz7NMqgg5VL6az+BVEE+NwmJvoue+NtKERbGILE
6GT9oItPS7L2RP6IO++kJUex2GKjrN0NAExm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org