Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/SYsTt0x6V9zEW-9NUw0ahCIbJ4Y.roa
File: SYsTt0x6V9zEW-9NUw0ahCIbJ4Y.roa (raw, json)
Hash identifier: TcJZhFJbaAVcRluirb4J5NfDzZ05cpHjMWEo1TDrbz8=
Subject key identifier: 49:8B:13:B7:4C:7A:57:DC:C4:5B:EF:4D:53:0D:1A:84:22:1B:27:86
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04C0BF1E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/SYsTt0x6V9zEW-9NUw0ahCIbJ4Y.roa
Signing time: Fri 13 May 2022 12:23:40 +0000
ROA not before: Fri 13 May 2022 12:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 81.19.140.0/24 maxlen: 32
81.19.141.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79740702 (0x4c0bf1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 13 12:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498b13b74c7a57dcc45bef4d530d1a84221b2786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:00:82:c0:f5:a3:de:d0:22:4f:21:51:9b:
70:99:f7:c9:8b:20:a8:f2:23:23:d1:6a:c2:30:dd:
6f:3c:fa:d7:2f:ea:26:73:7e:81:1a:61:a7:fb:69:
ff:d8:4a:97:78:93:11:bf:d5:35:7a:70:9d:5d:a3:
e9:13:a5:a6:2f:cd:90:c8:77:a9:55:09:b5:f2:6c:
96:97:6a:6f:01:d6:a0:59:c8:69:6e:1d:30:56:52:
eb:c4:39:c8:65:ab:0c:89:b1:fc:05:e1:e8:ab:19:
3f:d2:7d:c0:03:b4:66:e2:0e:c5:db:a3:5b:ae:44:
79:80:e9:99:cc:34:7e:b9:55:37:08:51:26:6c:fe:
ea:27:ae:b0:90:21:9c:72:df:b1:76:f2:b2:e4:82:
38:b3:83:28:a1:4f:95:89:b1:41:9f:0b:1c:22:94:
f4:6a:a6:12:3f:57:63:d3:a2:0c:08:1a:2f:b4:15:
aa:6a:bc:96:bc:8e:0d:b5:0b:b2:a1:8c:86:86:74:
de:d3:5f:69:40:cf:db:e1:23:48:48:e8:fe:49:e3:
3f:1c:9c:ab:ed:52:1a:a9:ae:02:b8:f8:69:6e:59:
cb:ed:90:bf:f6:ab:c0:40:b8:b9:e7:6c:57:2c:22:
a9:87:00:17:21:40:e3:91:5a:b7:76:d5:31:31:0c:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:13:B7:4C:7A:57:DC:C4:5B:EF:4D:53:0D:1A:84:22:1B:27:86
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/SYsTt0x6V9zEW-9NUw0ahCIbJ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.140.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:dc:bb:3c:f4:bd:be:36:62:00:4e:3d:10:7c:c5:fa:d3:f3:
a6:b5:f0:a6:c5:ea:94:f8:a4:b0:57:83:6f:01:18:e4:39:0d:
c9:5d:cf:c3:6f:0c:86:df:a8:ff:73:96:2b:73:d6:43:ba:f9:
32:0b:18:18:b4:91:ba:dc:00:d7:82:af:93:00:4b:3b:43:cb:
39:cb:f1:af:16:3e:63:9a:a6:f5:df:7c:c7:b0:e0:81:16:17:
0e:c3:03:bc:32:e7:d7:a6:39:b6:f2:bb:6e:25:b8:1f:ba:20:
9c:44:39:7b:96:42:3d:9d:64:af:71:67:55:09:a2:63:f5:43:
af:39:f6:77:de:1e:ea:1d:b7:22:75:fb:00:bd:6f:a4:59:02:
f3:4d:95:ea:dc:f9:4d:4b:16:7b:bf:5d:05:6c:67:2a:ed:47:
41:7f:92:33:4e:81:8a:9a:fb:9b:51:ce:fc:11:3e:ac:92:d3:
d0:b6:09:7f:94:9d:44:c3:9a:34:91:89:21:29:a9:d9:e4:cc:
20:d1:d3:81:dc:3f:e6:67:b5:18:03:fa:1c:d3:9d:3f:87:95:
a8:6d:c9:2d:00:35:79:00:f8:76:43:72:9b:33:0e:1b:ff:bf:
b9:89:ad:69:0f:a9:a2:8c:74:94:50:d8:ad:43:58:cc:61:5c:
27:5d:1a:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBMC/HjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNlOTY0MGEzZWYyZmVhMTkzNzRhZDhmOTlmNDIzZDdhYTdjNzZiMB4XDTIyMDUx
MzEyMjM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk4YjEzYjc0Yzdh
NTdkY2M0NWJlZjRkNTMwZDFhODQyMjFiMjc4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnfAILA9aPe0CJPIVGbcJn3yYsgqPIjI9FqwjDdbzz61y/q
JnN+gRphp/tp/9hKl3iTEb/VNXpwnV2j6ROlpi/NkMh3qVUJtfJslpdqbwHWoFnI
aW4dMFZS68Q5yGWrDImx/AXh6KsZP9J9wAO0ZuIOxdujW65EeYDpmcw0frlVNwhR
Jmz+6ieusJAhnHLfsXbysuSCOLODKKFPlYmxQZ8LHCKU9GqmEj9XY9OiDAgaL7QV
qmq8lryODbULsqGMhoZ03tNfaUDP2+EjSEjo/knjPxycq+1SGqmuArj4aW5Zy+2Q
v/arwEC4uedsVywiqYcAFyFA45Fat3bVMTEMFmMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJixO3THpX3MRb701TDRqEIhsnhjAfBgNVHSMEGDAWgBSkzpZAo+8v6hk3
Stj5n0I9eqfHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNNldRS1B2TC1vWk4wclktWjlDUFhxbngycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8x
L1NZc1R0MHg2Vjl6RVctOU5VdzBhaENJYko0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8xL3BNNldRS1B2TC1v
Wk4wclktWjlDUFhxbngycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVETjDANBgkqhkiG9w0BAQsFAAOC
AQEAody7PPS9vjZiAE49EHzF+tPzprXwpsXqlPiksFeDbwEY5DkNyV3Pw28Mht+o
/3OWK3PWQ7r5MgsYGLSRutwA14KvkwBLO0PLOcvxrxY+Y5qm9d98x7DggRYXDsMD
vDLn16Y5tvK7biW4H7ognEQ5e5ZCPZ1kr3FnVQmiY/VDrzn2d94e6h23InX7AL1v
pFkC802V6tz5TUsWe79dBWxnKu1HQX+SM06Bipr7m1HO/BE+rJLT0LYJf5SdRMOa
NJGJISmp2eTMINHTgdw/5me1GAP6HNOdP4eVqG3JLQA1eQD4dkNymzMOG/+/uYmt
aQ+poox0lFDYrUNYzGFcJ10atA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org