Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/TXtoliH9W12-3SpXrVEw70hbKWk.roa
File: TXtoliH9W12-3SpXrVEw70hbKWk.roa (raw, json)
Hash identifier: 5koRyTeJG3gEnL3bRt5U8CQI+xHKoWVNAPRpR87ipak=
Subject key identifier: 4D:7B:68:96:21:FD:5B:5D:BE:DD:2A:57:AD:51:30:EF:48:5B:29:69
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: AB1C
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/TXtoliH9W12-3SpXrVEw70hbKWk.roa
Signing time: Mon 02 May 2022 08:31:37 +0000
ROA not before: Mon 02 May 2022 08:31:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58114
IP address blocks: 193.30.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43804 (0xab1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: May 2 08:31:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d7b689621fd5b5dbedd2a57ad5130ef485b2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:cd:48:d6:ca:05:92:e0:40:eb:ca:b2:15:
ff:43:51:c2:d1:af:3f:b6:9c:ca:63:e7:2c:6f:58:
96:24:e1:21:5d:63:37:a1:97:b1:8d:62:39:aa:f4:
0e:bd:6a:3a:7c:4e:fd:11:93:01:4c:e1:fc:a2:2a:
45:2a:b2:3b:9a:3f:9a:f4:b8:7e:94:bb:fd:66:cc:
f5:91:7e:df:d5:4e:96:e0:1f:66:4d:3c:d8:5c:bd:
21:ba:f9:af:1b:12:21:98:54:91:b9:05:c8:5e:d8:
72:42:b6:fe:f0:77:b1:3e:6b:80:dc:27:21:34:6a:
15:94:e3:32:0e:0f:70:c0:36:99:2e:85:ea:a1:d2:
15:31:54:0c:3f:c2:25:1d:94:59:ae:49:03:43:ff:
ef:77:65:d7:90:08:dd:c8:a9:a6:f9:dd:5f:e6:4a:
e7:47:db:2c:f9:b2:65:78:42:70:bf:a7:b6:2f:7b:
e1:11:79:62:34:65:46:85:7b:75:76:8f:69:6f:b2:
38:aa:12:fd:78:5f:00:d9:2e:a1:2f:a5:bd:e5:88:
e0:8b:00:da:64:99:e5:0c:a4:aa:7e:d9:c5:df:a5:
d4:39:55:e2:56:c1:b3:4a:43:20:85:5d:f5:83:e7:
c8:ae:56:f5:b5:61:3b:63:98:be:64:72:ac:8e:3c:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:68:96:21:FD:5B:5D:BE:DD:2A:57:AD:51:30:EF:48:5B:29:69
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/TXtoliH9W12-3SpXrVEw70hbKWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.28.0/24
Signature Algorithm: sha256WithRSAEncryption
69:95:8e:ef:78:3c:90:6f:3c:cb:a7:70:47:92:2f:ca:fd:26:
1b:f7:ca:13:b1:cc:cf:ed:b5:21:c5:d5:3d:64:d6:f4:cd:8c:
15:af:c3:93:41:b8:46:4a:84:80:05:95:d3:d5:3b:61:b2:5f:
a7:36:2c:ed:92:31:b1:4c:f1:43:a7:02:2c:8f:51:f8:36:de:
30:b5:43:f7:e9:8e:6b:9e:a4:9f:ce:dc:56:3f:3d:57:46:67:
73:ee:3a:4f:27:e5:13:10:69:4c:e8:8f:86:c5:69:ce:7b:87:
e7:a8:47:03:af:db:35:10:19:a2:03:57:d2:1d:dd:6d:f8:49:
7a:c9:84:87:4b:7b:c8:a2:a8:d3:51:6d:71:13:88:f9:c1:71:
79:53:c4:2a:82:09:25:d6:99:9e:3b:aa:b9:ad:d5:50:43:9f:
08:f3:61:48:5c:71:80:0a:f6:c8:ca:f2:7b:7e:e8:c4:40:f1:
a7:b1:1d:8a:2c:df:cf:9a:c8:ee:fe:8a:e2:8b:b1:77:16:cf:
f3:8c:7c:0e:80:9c:26:39:8e:45:96:70:00:da:ca:3e:c1:f5:
3d:94:1f:bc:50:e1:5e:9c:c1:3a:af:c2:f1:70:82:9f:46:55:
90:2f:e4:9e:3e:cb:32:dc:6a:43:12:1c:93:59:f6:b7:e8:10:
07:3f:74:f4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAKscMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgz
NjQ2YWI3MDYyMTQ4ZWRiOGZhOWI2MGE4MzFjODI0MGRjYWI4MDQwHhcNMjIwNTAy
MDgzMTM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZDdiNjg5NjIxZmQ1
YjVkYmVkZDJhNTdhZDUxMzBlZjQ4NWIyOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0u3NSNbKBZLgQOvKshX/Q1HC0a8/tpzKY+csb1iWJOEhXWM3
oZexjWI5qvQOvWo6fE79EZMBTOH8oipFKrI7mj+a9Lh+lLv9Zsz1kX7f1U6W4B9m
TTzYXL0huvmvGxIhmFSRuQXIXthyQrb+8HexPmuA3CchNGoVlOMyDg9wwDaZLoXq
odIVMVQMP8IlHZRZrkkDQ//vd2XXkAjdyKmm+d1f5krnR9ss+bJleEJwv6e2L3vh
EXliNGVGhXt1do9pb7I4qhL9eF8A2S6hL6W95YjgiwDaZJnlDKSqftnF36XUOVXi
VsGzSkMghV31g+fIrlb1tWE7Y5i+ZHKsjjzK/QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFE17aJYh/Vtdvt0qV61RMO9IWylpMB8GA1UdIwQYMBaAFINkarcGIUjtuPqb
YKgxyCQNyrgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZzJScXR3WWhTTzI0LXB0Z3FESElKQTNLdUFRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Mi9lZDNlZGItZDI3NS00N2M5LWJlN2YtYzQzNjc1OTJhZThhLzEv
VFh0b2xpSDlXMTItM1NwWHJWRXc3MGhiS1drLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9l
ZDNlZGItZDI3NS00N2M5LWJlN2YtYzQzNjc1OTJhZThhLzEvZzJScXR3WWhTTzI0
LXB0Z3FESElKQTNLdUFRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR4cMA0GCSqGSIb3DQEBCwUAA4IB
AQBplY7veDyQbzzLp3BHki/K/SYb98oTsczP7bUhxdU9ZNb0zYwVr8OTQbhGSoSA
BZXT1Tthsl+nNiztkjGxTPFDpwIsj1H4Nt4wtUP36Y5rnqSfztxWPz1XRmdz7jpP
J+UTEGlM6I+GxWnOe4fnqEcDr9s1EBmiA1fSHd1t+El6yYSHS3vIoqjTUW1xE4j5
wXF5U8Qqggkl1pmeO6q5rdVQQ58I82FIXHGACvbIyvJ7fujEQPGnsR2KLN/Pmsju
/orii7F3Fs/zjHwOgJwmOY5FlnAA2so+wfU9lB+8UOFenME6r8LxcIKfRlWQL+Se
Pssy3GpDEhyTWfa36BAHP3T0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:10 2023 by rpki-client on console-ams.rpki-client.org