Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2TCmOtK7Wysy4a0f2s-CijGl0AA.roa
File: 2TCmOtK7Wysy4a0f2s-CijGl0AA.roa (raw, json)
Hash identifier: mZAL7qIv5xemkz3WcEdxAGC6nodhZC0eee0xKG+JTN8=
Subject key identifier: D9:30:A6:3A:D2:BB:5B:2B:32:E1:AD:1F:DA:CF:82:8A:31:A5:D0:00
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E1B9409
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2TCmOtK7Wysy4a0f2s-CijGl0AA.roa
Signing time: Sat 01 Jan 2022 03:02:55 +0000
ROA not before: Sat 01 Jan 2022 03:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35156
IP address blocks: 94.31.15.0/24 maxlen: 24
82.98.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236688393 (0xe1b9409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d930a63ad2bb5b2b32e1ad1fdacf828a31a5d000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:97:47:77:dc:7d:e3:c3:1f:66:cf:54:c4:
e3:80:a9:0d:23:8b:a3:27:7b:ef:c0:68:66:12:3d:
ea:26:ce:b6:91:5b:91:e8:05:39:9a:43:d8:d3:25:
92:86:f0:00:ae:9a:5d:30:e5:1a:ca:75:0d:35:96:
5e:d3:53:64:d0:23:e2:9e:6c:88:76:cd:1d:41:0a:
c9:5c:22:18:6e:22:6e:ee:f5:cf:42:bd:4c:1d:a9:
16:eb:00:71:b2:3c:09:ab:05:26:48:dc:05:44:10:
e3:36:22:57:2e:96:d3:a0:39:5d:ef:28:13:eb:d4:
f6:b4:44:fe:d8:9f:b3:9c:62:b4:85:2a:22:78:8a:
80:20:6e:df:c0:ba:7e:48:e5:45:56:e6:53:f3:63:
d6:27:c3:26:b6:e4:d0:36:1a:28:fd:b1:8e:93:e3:
72:52:33:d3:39:5f:28:58:82:70:25:6f:a4:20:30:
f2:de:53:91:57:07:2a:51:57:b3:40:13:c5:c5:d1:
5c:c0:c2:d8:52:80:11:19:f2:d2:dd:af:80:63:26:
12:b3:a4:06:d6:bc:3b:4f:fe:f4:a1:d2:ca:59:15:
b5:6c:87:fd:40:0f:c5:f7:6f:0c:85:04:8f:23:e3:
90:8a:63:d1:53:16:26:52:ec:1a:45:fc:c2:a9:a1:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:A6:3A:D2:BB:5B:2B:32:E1:AD:1F:DA:CF:82:8A:31:A5:D0:00
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2TCmOtK7Wysy4a0f2s-CijGl0AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.248.0/24
94.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cb:af:11:0c:f3:4b:9e:57:7e:5e:7d:30:ab:0f:66:e3:1d:
4b:0a:ca:06:50:34:7c:f4:39:30:7d:35:52:fd:f6:3b:40:47:
f5:74:5f:5b:b1:ee:1d:ec:b0:25:b8:b0:09:1e:03:17:b4:4b:
9d:cf:1c:5b:82:91:fc:f1:8a:39:a5:76:ae:51:55:bf:21:2e:
04:53:aa:74:56:21:9e:09:8b:ae:f4:ac:8c:69:ee:96:a8:07:
94:25:91:22:8b:10:85:d7:68:6f:a5:c9:da:3b:5d:b0:4a:e9:
ca:8d:af:43:b4:dc:13:6c:b3:54:22:e5:4e:03:43:50:30:06:
69:26:d0:00:90:71:47:57:77:13:98:35:94:3e:c5:8e:32:a6:
64:a8:1c:65:88:bb:21:3b:f2:93:fa:fa:8c:d5:f1:01:a6:74:
24:4f:21:cf:22:63:87:b3:98:61:b3:35:6d:db:d7:d5:4a:d8:
a9:dd:21:58:8d:98:04:14:7f:84:91:34:2a:9d:5c:e9:70:f0:
46:e4:ec:23:11:46:38:20:fc:9c:fd:23:9d:5c:f1:55:51:65:
e6:c9:13:94:c3:c1:94:cd:b1:c1:29:54:05:02:39:8c:3d:3c:
d7:92:a2:74:9e:4e:e9:c0:bc:4e:5d:9a:58:67:0d:53:e1:66:
c8:4d:a8:a0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEDhuUCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzBjYzk0MjliNjMzODJlOWIxNzE0ZDIxYjNjOTZkMmU1ZWJlMjU3MB4XDTIyMDEw
MTAzMDI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkzMGE2M2FkMmJi
NWIyYjMyZTFhZDFmZGFjZjgyOGEzMWE1ZDAwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpol0d33H3jwx9mz1TE44CpDSOLoyd778BoZhI96ibOtpFb
kegFOZpD2NMlkobwAK6aXTDlGsp1DTWWXtNTZNAj4p5siHbNHUEKyVwiGG4ibu71
z0K9TB2pFusAcbI8CasFJkjcBUQQ4zYiVy6W06A5Xe8oE+vU9rRE/tifs5xitIUq
IniKgCBu38C6fkjlRVbmU/Nj1ifDJrbk0DYaKP2xjpPjclIz0zlfKFiCcCVvpCAw
8t5TkVcHKlFXs0ATxcXRXMDC2FKAERny0t2vgGMmErOkBta8O0/+9KHSylkVtWyH
/UAPxfdvDIUEjyPjkIpj0VMWJlLsGkX8wqmhqb0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTZMKY60rtbKzLhrR/az4KKMaXQADAfBgNVHSMEGDAWgBTjDMlCm2M4LpsX
FNIbPJbS5eviVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR3ekpRcHRqT0M2YkZ4VFNHenlXMHVYcjRsYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8x
LzJUQ21PdEs3V3lzeTRhMGYycy1DaWpHbDBBQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YzczMjg3LWIxYjEtNGFjYS1iZDJlLWRiNGYzNTJlOWFkMy8xLzR3ekpRcHRqT0M2
YkZ4VFNHenlXMHVYcjRsYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFJi+AMEAF4fDzANBgkqhkiG9w0B
AQsFAAOCAQEAWcuvEQzzS55Xfl59MKsPZuMdSwrKBlA0fPQ5MH01Uv32O0BH9XRf
W7HuHeywJbiwCR4DF7RLnc8cW4KR/PGKOaV2rlFVvyEuBFOqdFYhngmLrvSsjGnu
lqgHlCWRIosQhddob6XJ2jtdsErpyo2vQ7TcE2yzVCLlTgNDUDAGaSbQAJBxR1d3
E5g1lD7FjjKmZKgcZYi7ITvyk/r6jNXxAaZ0JE8hzyJjh7OYYbM1bdvX1UrYqd0h
WI2YBBR/hJE0Kp1c6XDwRuTsIxFGOCD8nP0jnVzxVVFl5skTlMPBlM2xwSlUBQI5
jD0815KidJ5O6cC8Tl2aWGcNU+FmyE2ooA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org