Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/iQ-h_Y-XahLV8gYKwnRtorKuzTs.roa
File: iQ-h_Y-XahLV8gYKwnRtorKuzTs.roa (raw, json)
Hash identifier: Zqt+tPlcDrcVQIDxwxpsPm2i9IpGDUJfgbM2nl3wBvk=
Subject key identifier: 89:0F:A1:FD:8F:97:6A:12:D5:F2:06:0A:C2:74:6D:A2:B2:AE:CD:3B
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04F80AED
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/iQ-h_Y-XahLV8gYKwnRtorKuzTs.roa
Signing time: Sun 29 May 2022 09:27:57 +0000
ROA not before: Sun 29 May 2022 09:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 81.19.131.0/24 maxlen: 32
81.19.134.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83364589 (0x4f80aed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 29 09:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=890fa1fd8f976a12d5f2060ac2746da2b2aecd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:ea:06:6a:48:fc:4c:77:e5:1a:61:50:52:
cd:29:a1:0b:a1:32:89:ed:b0:02:5f:b2:8e:32:95:
10:f3:a1:12:4b:7a:e1:92:5a:cd:da:16:46:da:4c:
21:37:9f:fa:98:ad:00:5a:96:1b:d5:e7:fe:c8:8d:
9c:5f:38:ee:d5:23:9f:7a:51:fa:3c:98:e9:61:c7:
81:f3:11:8c:b7:02:c4:c7:ac:54:5a:27:66:5a:04:
2d:33:58:cc:e8:34:7b:83:e1:58:d0:41:0f:3b:bf:
c2:df:68:a2:3a:60:ea:84:a1:2c:fd:c4:35:ec:cb:
60:2d:03:86:c6:94:d8:89:36:33:70:9e:52:57:17:
0c:4a:80:8c:72:4e:ab:e5:6d:c9:cb:a5:eb:48:a3:
55:17:08:50:3f:7a:19:08:6f:32:39:07:73:3d:60:
9d:2c:a1:ff:65:35:08:94:a1:b3:81:67:ee:b4:4c:
0e:29:c8:5d:3f:b0:bf:ec:9c:bb:97:c1:df:15:b3:
2d:a3:0d:13:55:2b:91:6c:a0:ad:25:63:31:b1:13:
6e:57:05:87:a5:9f:e6:a3:69:e9:da:7d:bf:f0:90:
65:3c:96:0d:e3:b4:c1:9b:78:29:82:17:44:7d:37:
43:c3:ee:8c:05:c8:56:86:b4:1b:81:b8:76:aa:ec:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:A1:FD:8F:97:6A:12:D5:F2:06:0A:C2:74:6D:A2:B2:AE:CD:3B
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/iQ-h_Y-XahLV8gYKwnRtorKuzTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
81.19.134.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c5:a9:bc:12:0d:ac:f3:15:8e:a9:49:54:da:84:80:1a:27:
3d:65:55:94:df:00:5a:63:53:d7:d3:0c:a4:0f:a8:31:e0:de:
09:b2:54:1f:e1:5f:c2:92:9e:4a:7c:8d:d7:e8:81:d0:c1:bd:
a9:95:1c:89:65:00:07:83:41:8d:4c:17:8b:77:ba:da:3a:dd:
a4:7c:f7:15:42:7a:0a:8a:33:d5:fb:f4:28:4a:be:5b:8c:ce:
6f:e9:e7:1a:73:bb:20:46:7f:e7:26:33:f1:54:ee:63:60:40:
af:67:23:22:11:7e:23:81:3b:33:ed:3b:d9:ba:6d:0f:b4:dc:
a1:be:2e:65:57:5b:b4:3b:f4:79:12:d2:8f:19:b9:55:db:09:
5e:a6:4a:3a:f3:a7:70:60:d5:24:27:e5:6d:fa:7b:6b:d2:05:
ce:0f:33:b4:58:1d:eb:b1:07:ca:b0:01:e8:38:a2:87:39:bc:
ca:a8:b2:ad:02:95:26:1c:3d:85:83:d3:af:b3:31:24:ed:28:
b1:72:ec:c4:6f:3f:0d:5e:9b:57:1b:d3:d0:62:ce:c6:ae:79:
dc:f1:8b:85:39:f9:80:f7:a6:6d:b0:b3:12:eb:36:bc:9c:0f:
72:1d:f1:4e:cb:9b:2b:90:69:fb:a6:7f:b6:2f:80:f2:4c:3b:
27:15:e7:4d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBPgK7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNlOTY0MGEzZWYyZmVhMTkzNzRhZDhmOTlmNDIzZDdhYTdjNzZiMB4XDTIyMDUy
OTA5Mjc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODkwZmExZmQ4Zjk3
NmExMmQ1ZjIwNjBhYzI3NDZkYTJiMmFlY2QzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJjV6gZqSPxMd+UaYVBSzSmhC6Eyie2wAl+yjjKVEPOhEkt6
4ZJazdoWRtpMITef+pitAFqWG9Xn/siNnF847tUjn3pR+jyY6WHHgfMRjLcCxMes
VFonZloELTNYzOg0e4PhWNBBDzu/wt9oojpg6oShLP3ENezLYC0DhsaU2Ik2M3Ce
UlcXDEqAjHJOq+Vtycul60ijVRcIUD96GQhvMjkHcz1gnSyh/2U1CJShs4Fn7rRM
DinIXT+wv+ycu5fB3xWzLaMNE1UrkWygrSVjMbETblcFh6Wf5qNp6dp9v/CQZTyW
DeO0wZt4KYIXRH03Q8PujAXIVoa0G4G4dqrsyJMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSJD6H9j5dqEtXyBgrCdG2isq7NOzAfBgNVHSMEGDAWgBSkzpZAo+8v6hk3
Stj5n0I9eqfHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNNldRS1B2TC1vWk4wclktWjlDUFhxbngycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8x
L2lRLWhfWS1YYWhMVjhnWUt3blJ0b3JLdXpUcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8xL3BNNldRS1B2TC1v
Wk4wclktWjlDUFhxbngycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFETgwMEAFEThjANBgkqhkiG9w0B
AQsFAAOCAQEAF8WpvBINrPMVjqlJVNqEgBonPWVVlN8AWmNT19MMpA+oMeDeCbJU
H+FfwpKeSnyN1+iB0MG9qZUciWUAB4NBjUwXi3e62jrdpHz3FUJ6Cooz1fv0KEq+
W4zOb+nnGnO7IEZ/5yYz8VTuY2BAr2cjIhF+I4E7M+072bptD7Tcob4uZVdbtDv0
eRLSjxm5VdsJXqZKOvOncGDVJCflbfp7a9IFzg8ztFgd67EHyrAB6Diihzm8yqiy
rQKVJhw9hYPTr7MxJO0osXLsxG8/DV6bVxvT0GLOxq553PGLhTn5gPembbCzEus2
vJwPch3xTsubK5Bp+6Z/ti+A8kw7JxXnTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org