Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tzw_JFgLobTE34TfU2QRW1l_bPE.roa
File: Tzw_JFgLobTE34TfU2QRW1l_bPE.roa (raw, json)
Hash identifier: bysvLCafTw5oZulDm1WF10+6jvyB4tryK16mI1AYQfE=
Subject key identifier: 4F:3C:3F:24:58:0B:A1:B4:C4:DF:84:DF:53:64:11:5B:59:7F:6C:F1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A18E39
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tzw_JFgLobTE34TfU2QRW1l_bPE.roa
Signing time: Thu 30 Jun 2022 14:59:02 +0000
ROA not before: Thu 30 Jun 2022 14:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 84.32.84.0/22 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27364921 (0x1a18e39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 30 14:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f3c3f24580ba1b4c4df84df5364115b597f6cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:d8:c4:71:13:51:b7:4a:f9:20:82:ad:b7:
10:43:e0:eb:ab:ba:6b:56:4b:f3:8a:90:f1:ee:df:
09:b2:7d:d1:2c:7f:8a:96:45:3a:8f:68:bd:8f:be:
0b:8b:ae:5b:dd:fa:9f:b2:a9:11:08:14:c2:2a:f9:
41:91:6c:b7:52:a5:9d:ac:c7:a8:06:ac:32:c0:98:
9b:47:05:92:30:5b:0f:3d:4d:54:1a:75:9f:59:4c:
9b:7e:c0:7e:6b:3d:44:9e:c6:40:a1:c3:a4:c5:84:
87:4f:40:8f:6c:77:de:80:b8:05:96:1e:0f:87:f3:
af:6a:4e:6f:fb:63:54:14:0b:69:08:08:5e:f0:86:
11:3e:96:77:43:91:aa:6e:5b:80:90:f4:94:2d:2d:
f8:f4:3a:0f:2c:58:63:50:7c:23:fe:8c:7a:a6:1c:
d3:a3:9f:d6:b5:ea:42:3c:c3:75:91:54:25:1b:7c:
e6:16:c8:13:f2:49:32:b0:5b:ff:13:a8:2c:1c:ca:
cb:88:34:23:8d:04:09:9e:c1:f7:d7:40:22:e6:a6:
03:3c:dd:70:3a:30:fe:51:26:6d:16:9d:f7:bd:dd:
66:a5:60:a8:b8:b7:02:37:ab:f1:82:1b:45:14:c4:
36:16:19:e3:4a:dd:37:58:46:dc:63:82:95:44:76:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:3F:24:58:0B:A1:B4:C4:DF:84:DF:53:64:11:5B:59:7F:6C:F1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tzw_JFgLobTE34TfU2QRW1l_bPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.84.0/22
88.216.47.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9a:d3:2f:f3:d0:ba:8b:b8:49:f5:31:27:7b:43:b4:ae:f6:
f3:86:38:52:62:8e:a6:0e:c2:9d:8f:05:3f:b2:af:68:17:03:
07:89:e0:6d:ef:b0:84:d6:fe:42:01:da:11:a0:50:5d:b3:9f:
c8:bd:7b:b6:e5:d8:39:e8:4b:f4:ef:75:1b:6e:2b:29:92:f0:
aa:c2:42:2c:6a:ef:e3:78:12:fe:31:34:6f:f1:60:71:77:8e:
6d:c3:1f:0b:dc:c6:ec:50:e0:0c:6c:8d:5d:0e:e8:18:b3:9f:
84:f0:85:16:f7:fc:cf:75:6b:5a:31:7f:40:46:11:36:2f:2c:
7a:75:bb:9e:d2:1a:93:6e:28:2f:ea:fa:76:cb:1d:b9:2f:78:
6a:7c:d7:b3:db:ad:f4:b1:7c:1f:6a:9e:0c:4a:33:8a:d2:36:
bb:af:02:c6:ce:53:35:36:a8:ce:09:81:cd:54:52:c4:a3:a2:
5c:e4:1d:97:0a:d7:ed:6d:da:25:df:c8:6e:f7:6c:44:2c:94:
ec:70:f3:82:ba:91:74:7e:7a:fe:24:ca:56:93:80:f2:c2:b5:
86:93:71:f6:04:a6:9f:fd:24:62:d1:ad:2a:5d:e5:ac:48:2c:
a9:4f:41:6a:62:c6:7c:4e:28:ae:fb:20:00:01:2e:4f:92:be:
68:60:14:8b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAaGOOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZmJkNDVmY2UzNTZlMmE2NWYxZTRkMWRhZjc4MTRiNmQ2YmRhM2M1MB4XDTIyMDYz
MDE0NTkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGYzYzNmMjQ1ODBi
YTFiNGM0ZGY4NGRmNTM2NDExNWI1OTdmNmNmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8n2MRxE1G3Svkggq23EEPg66u6a1ZL84qQ8e7fCbJ90Sx/
ipZFOo9ovY++C4uuW936n7KpEQgUwir5QZFst1KlnazHqAasMsCYm0cFkjBbDz1N
VBp1n1lMm37Afms9RJ7GQKHDpMWEh09Aj2x33oC4BZYeD4fzr2pOb/tjVBQLaQgI
XvCGET6Wd0ORqm5bgJD0lC0t+PQ6DyxYY1B8I/6MeqYc06Of1rXqQjzDdZFUJRt8
5hbIE/JJMrBb/xOoLBzKy4g0I40ECZ7B99dAIuamAzzdcDow/lEmbRad973dZqVg
qLi3Ajer8YIbRRTENhYZ40rdN1hG3GOClUR23fUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRPPD8kWAuhtMTfhN9TZBFbWX9s8TAfBgNVHSMEGDAWgBRPvUX841bipl8e
TR2veBS21r2jxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q3MUZfT05XNHFaZkhrMGRyM2dVdHRhOW84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8x
L1R6d19KRmdMb2JURTM0VGZVMlFSVzFsX2JQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Mzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFjMy8xL1Q3MUZfT05XNHFa
ZkhrMGRyM2dVdHRhOW84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlQgVAMEAFjYLzANBgkqhkiG9w0B
AQsFAAOCAQEAR5rTL/PQuou4SfUxJ3tDtK7284Y4UmKOpg7CnY8FP7KvaBcDB4ng
be+whNb+QgHaEaBQXbOfyL17tuXYOehL9O91G24rKZLwqsJCLGrv43gS/jE0b/Fg
cXeObcMfC9zG7FDgDGyNXQ7oGLOfhPCFFvf8z3VrWjF/QEYRNi8senW7ntIak24o
L+r6dssduS94anzXs9ut9LF8H2qeDEozitI2u68Cxs5TNTaozgmBzVRSxKOiXOQd
lwrX7W3aJd/IbvdsRCyU7HDzgrqRdH56/iTKVpOA8sK1hpNx9gSmn/0kYtGtKl3l
rEgsqU9BamLGfE4orvsgAAEuT5K+aGAUiw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org