Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa
File: TvXrYcifP9w5Hd7DoYEOch4CXD0.roa (raw, json)
Hash identifier: NfN1ltw8YYicAaiF0GXLNJ7W9ArylHEGd23aQS2zhuY=
Subject key identifier: 4E:F5:EB:61:C8:9F:3F:DC:39:1D:DE:C3:A1:81:0E:72:1E:02:5C:3D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 04DE3A4F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa
Signing time: Sat 09 Apr 2022 17:17:50 +0000
ROA not before: Sat 09 Apr 2022 17:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 270026
IP address blocks: 141.136.57.0/24 maxlen: 24
141.136.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81672783 (0x4de3a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 9 17:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ef5eb61c89f3fdc391ddec3a1810e721e025c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:3f:29:b6:e3:e0:3e:c8:8b:36:ce:26:ee:
77:6b:b6:7c:7a:f9:07:3c:b9:6a:75:d4:63:86:cc:
c3:82:67:4d:c4:4e:30:8c:03:28:ea:6e:9a:23:81:
48:0b:49:f3:9a:52:bc:c6:ae:eb:21:da:03:f8:52:
5d:84:64:d4:c0:be:7b:7e:74:5b:0c:5b:2f:ad:07:
ec:84:6f:f8:1a:5e:ff:2f:28:4c:00:86:d8:da:b6:
73:62:d8:d9:4a:00:58:a3:c0:4a:05:74:c3:c8:18:
22:49:90:1d:1d:d4:b0:71:ac:03:08:9f:1a:c7:3d:
c9:7c:48:4c:fd:37:17:dc:a8:1b:27:1b:37:9e:fa:
3e:0b:43:3d:56:c3:a3:29:e3:d6:a2:23:14:c2:c4:
8d:43:73:4b:62:37:17:aa:df:c9:c2:eb:ca:8f:f7:
01:06:8e:a5:77:ba:7b:b9:7b:41:25:36:e5:88:6c:
3a:cc:ae:3c:98:1f:43:01:fd:d9:29:3f:8a:db:e4:
8d:8e:f7:9d:e5:8b:71:29:62:71:5e:82:d1:76:37:
70:6e:8e:91:49:08:c9:37:05:25:b2:c9:82:70:ac:
26:72:05:a1:83:13:fe:63:fa:b5:f1:56:94:20:b1:
62:30:32:b5:b8:e4:fe:08:57:e4:57:98:59:bb:a6:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F5:EB:61:C8:9F:3F:DC:39:1D:DE:C3:A1:81:0E:72:1E:02:5C:3D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:ab:ab:01:4f:11:c4:88:07:10:28:07:ca:8f:c6:86:93:57:
9c:22:0f:1a:92:a9:d9:49:c1:18:20:da:00:2b:26:e6:24:c7:
b4:33:06:3d:4a:14:d9:94:61:6e:93:91:b9:3f:8a:ad:4d:0e:
69:aa:f6:ce:00:19:6e:fb:a0:b6:a4:e4:87:20:45:44:81:09:
81:04:8a:dc:ca:27:d4:73:ee:48:c5:ad:b6:84:35:b0:ef:2b:
a3:7a:bc:b5:0e:29:51:11:9b:27:96:c5:97:83:31:81:fd:26:
d4:98:02:7c:17:25:f8:d6:70:d3:1c:c8:4f:00:4f:39:52:1c:
b2:a5:5f:8b:b2:5f:27:9e:05:21:34:68:f8:ac:a3:19:85:41:
b7:b9:f6:31:f3:0e:2c:21:08:61:c3:a1:b7:fb:43:18:c2:94:
43:c1:ba:37:9e:8e:71:b1:ff:46:34:a8:00:b8:f3:18:07:4b:
cb:ca:4e:86:ec:89:3f:bb:6a:9a:47:00:44:1c:8a:28:1c:de:
80:ee:48:d2:28:60:71:db:3f:a1:0b:e6:f0:00:28:90:e0:ce:
d2:64:2b:32:ce:11:f2:16:1c:1e:28:e4:ab:14:d0:53:e0:9d:
38:83:e5:9f:3d:92:fc:60:bd:c7:19:3c:2d:d9:d8:3f:2b:2e:
60:2f:a2:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBN46TzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDQw
OTE3MTc1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGVmNWViNjFjODlm
M2ZkYzM5MWRkZWMzYTE4MTBlNzIxZTAyNWMzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrAPym24+A+yIs2zibud2u2fHr5Bzy5anXUY4bMw4JnTcRO
MIwDKOpumiOBSAtJ85pSvMau6yHaA/hSXYRk1MC+e350WwxbL60H7IRv+Bpe/y8o
TACG2Nq2c2LY2UoAWKPASgV0w8gYIkmQHR3UsHGsAwifGsc9yXxITP03F9yoGycb
N576PgtDPVbDoynj1qIjFMLEjUNzS2I3F6rfycLryo/3AQaOpXe6e7l7QSU25Yhs
OsyuPJgfQwH92Sk/itvkjY73neWLcSlicV6C0XY3cG6OkUkIyTcFJbLJgnCsJnIF
oYMT/mP6tfFWlCCxYjAytbjk/ghX5FeYWbumSo8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRO9ethyJ8/3Dkd3sOhgQ5yHgJcPTAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L1R2WHJZY2lmUDl3NUhkN0RvWUVPY2g0Q1hEMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY2IODANBgkqhkiG9w0BAQsFAAOC
AQEApqurAU8RxIgHECgHyo/GhpNXnCIPGpKp2UnBGCDaACsm5iTHtDMGPUoU2ZRh
bpORuT+KrU0Oaar2zgAZbvugtqTkhyBFRIEJgQSK3Mon1HPuSMWttoQ1sO8ro3q8
tQ4pURGbJ5bFl4Mxgf0m1JgCfBcl+NZw0xzITwBPOVIcsqVfi7JfJ54FITRo+Kyj
GYVBt7n2MfMOLCEIYcOht/tDGMKUQ8G6N56OcbH/RjSoALjzGAdLy8pOhuyJP7tq
mkcARByKKBzegO5I0ihgcds/oQvm8AAokODO0mQrMs4R8hYcHijkqxTQU+CdOIPl
nz2S/GC9xxk8LdnYPysuYC+iYA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org