Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RwnqGinDSWlt8h6yNWeO6nZg-og.roa
File: RwnqGinDSWlt8h6yNWeO6nZg-og.roa (raw, json)
Hash identifier: UmJIWEz8HF3aAQ7DdzvtKuG1QlqzhW7AE7rZ31I/PN4=
Subject key identifier: 47:09:EA:1A:29:C3:49:69:6D:F2:1E:B2:35:67:8E:EA:76:60:FA:88
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04E048AD
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RwnqGinDSWlt8h6yNWeO6nZg-og.roa
Signing time: Tue 24 May 2022 13:55:38 +0000
ROA not before: Tue 24 May 2022 13:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 81.19.141.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81807533 (0x4e048ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 24 13:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4709ea1a29c349696df21eb235678eea7660fa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:83:ba:c5:3d:ec:50:2a:a0:14:41:56:9b:
25:a2:26:a5:d6:da:33:81:42:23:9b:a5:04:52:ff:
1d:6b:a3:21:69:70:18:be:b6:e6:5d:a0:02:2e:17:
23:9a:b0:e0:22:f7:97:bc:01:db:a5:8b:21:3e:cf:
1c:dc:e8:c3:93:45:c2:b6:e2:83:82:48:e8:6c:64:
10:d3:e9:23:3f:7a:01:14:51:a4:7e:91:70:e1:2e:
4f:f8:d2:45:60:a1:f8:12:26:1e:1a:44:a5:f1:22:
d6:e5:1b:6f:e5:75:78:12:18:8b:ee:70:0c:12:e0:
7d:4a:e7:1c:94:81:f6:0b:a5:3b:34:75:60:62:d4:
d9:24:94:fa:2c:66:16:63:78:1e:2d:fc:ae:e3:52:
7a:38:3b:a8:ac:e8:52:ee:1f:c8:62:95:c7:b8:02:
ca:31:37:7c:48:c0:e0:58:18:a6:b5:c1:5a:46:42:
b1:d8:dc:b0:5c:e8:6d:5a:61:be:0f:06:50:4e:8d:
58:25:5b:14:b3:dc:1e:96:f1:00:8a:37:3d:e1:9f:
ba:dc:31:aa:35:d8:2a:ca:61:34:b3:c8:3b:81:cb:
f7:32:ca:28:2e:7a:42:b9:d9:53:ef:16:ca:10:e3:
48:33:01:b6:99:0f:63:93:6f:b0:2e:08:c9:54:c6:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:EA:1A:29:C3:49:69:6D:F2:1E:B2:35:67:8E:EA:76:60:FA:88
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RwnqGinDSWlt8h6yNWeO6nZg-og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.141.0/24
Signature Algorithm: sha256WithRSAEncryption
05:21:b8:75:39:54:74:cf:fa:31:b8:d4:0c:c2:42:df:aa:fb:
b4:42:87:4c:1a:34:1a:46:ed:51:eb:99:cb:ad:56:29:40:ba:
10:82:4b:cd:4e:74:39:b0:60:d4:db:93:1d:24:a5:09:6a:c9:
d6:c0:e4:d4:37:bd:d1:83:63:03:31:72:a4:f3:37:9a:df:fe:
39:48:4f:b8:3b:e8:47:80:e2:c6:b5:78:72:dd:71:38:12:a8:
4b:3d:b2:cd:c6:2f:bf:33:a7:da:ec:38:31:be:62:d5:af:97:
29:06:62:4b:e4:dd:f1:cb:75:6c:43:39:86:e4:54:15:dd:26:
74:4a:f3:9f:5d:c9:f8:3f:aa:e0:c8:6a:b9:ed:b8:7d:8e:8b:
b9:d3:00:ca:6f:2f:b1:33:f3:7a:a6:b4:f6:48:91:79:4f:29:
6f:e4:2f:1a:f5:ea:0c:d4:30:0b:a9:b1:d7:79:20:02:58:3a:
de:61:c6:b6:a5:31:0a:36:7e:f0:66:ca:d1:d2:6d:6a:53:bf:
a8:51:46:98:c1:6a:62:d4:96:af:49:2e:00:e8:76:b4:f1:e3:
32:91:14:b1:52:18:a7:95:a2:75:b2:c9:f2:1e:cc:bf:64:63:
88:c5:b8:dc:d6:0c:04:ae:80:1e:3b:f8:b2:6e:bf:eb:52:4a:
1b:90:29:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOBIrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNlOTY0MGEzZWYyZmVhMTkzNzRhZDhmOTlmNDIzZDdhYTdjNzZiMB4XDTIyMDUy
NDEzNTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDcwOWVhMWEyOWMz
NDk2OTZkZjIxZWIyMzU2NzhlZWE3NjYwZmE4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRDg7rFPexQKqAUQVabJaImpdbaM4FCI5ulBFL/HWujIWlw
GL625l2gAi4XI5qw4CL3l7wB26WLIT7PHNzow5NFwrbig4JI6GxkENPpIz96ARRR
pH6RcOEuT/jSRWCh+BImHhpEpfEi1uUbb+V1eBIYi+5wDBLgfUrnHJSB9gulOzR1
YGLU2SSU+ixmFmN4Hi38ruNSejg7qKzoUu4fyGKVx7gCyjE3fEjA4FgYprXBWkZC
sdjcsFzobVphvg8GUE6NWCVbFLPcHpbxAIo3PeGfutwxqjXYKsphNLPIO4HL9zLK
KC56QrnZU+8WyhDjSDMBtpkPY5NvsC4IyVTGZlECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRHCeoaKcNJaW3yHrI1Z47qdmD6iDAfBgNVHSMEGDAWgBSkzpZAo+8v6hk3
Stj5n0I9eqfHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNNldRS1B2TC1vWk4wclktWjlDUFhxbngycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8x
L1J3bnFHaW5EU1dsdDhoNnlOV2VPNm5aZy1vZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8xL3BNNldRS1B2TC1v
Wk4wclktWjlDUFhxbngycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFETjTANBgkqhkiG9w0BAQsFAAOC
AQEABSG4dTlUdM/6MbjUDMJC36r7tEKHTBo0GkbtUeuZy61WKUC6EIJLzU50ObBg
1NuTHSSlCWrJ1sDk1De90YNjAzFypPM3mt/+OUhPuDvoR4DixrV4ct1xOBKoSz2y
zcYvvzOn2uw4Mb5i1a+XKQZiS+Td8ct1bEM5huRUFd0mdErzn13J+D+q4Mhque24
fY6LudMAym8vsTPzeqa09kiReU8pb+QvGvXqDNQwC6mx13kgAlg63mHGtqUxCjZ+
8GbK0dJtalO/qFFGmMFqYtSWr0kuAOh2tPHjMpEUsVIYp5WidbLJ8h7Mv2RjiMW4
3NYMBK6AHjv4sm6/61JKG5ApXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org