Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/TcF32nDbtPrfyniDeq0Ntd2LGn8.roa
File: TcF32nDbtPrfyniDeq0Ntd2LGn8.roa (raw, json)
Hash identifier: o/sV9rPf/RohMqCnEZnZRkcNJnsceCAu84y1YQD4oRo=
Subject key identifier: 4D:C1:77:DA:70:DB:B4:FA:DF:CA:78:83:7A:AD:0D:B5:DD:8B:1A:7F
Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial: 018C256E1AF13D85C121BBAA4B1576367431
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/TcF32nDbtPrfyniDeq0Ntd2LGn8.roa
Signing time: Fri 01 Dec 2023 12:50:22 +0000
ROA not before: Fri 01 Dec 2023 12:50:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204383
IP address blocks: 82.208.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:6e:1a:f1:3d:85:c1:21:bb:aa:4b:15:76:36:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Validity
Not Before: Dec 1 12:50:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc177da70dbb4fadfca78837aad0db5dd8b1a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:a8:8a:68:14:44:b3:b6:f8:af:4f:18:71:
ef:05:5e:4b:ca:f7:78:16:7b:38:b4:fc:9c:3f:15:
1c:4d:87:31:67:87:94:a3:4a:1e:b8:55:ca:8a:c6:
64:47:16:40:87:bb:af:d1:e6:45:a3:34:df:09:9d:
7a:81:77:ac:95:34:4d:13:79:28:f3:4f:76:63:83:
fb:2c:d1:03:31:b6:37:ec:c0:9a:6b:ad:7e:3e:87:
d5:5a:3c:a0:1c:30:46:15:fd:7f:dc:08:8c:8a:35:
8d:57:79:41:f5:be:6e:b8:f5:6e:ca:e7:99:8e:fb:
62:14:46:d3:a3:29:f3:ce:c5:e3:dc:f1:7f:7f:a8:
4e:b3:78:df:f9:07:5b:1f:dc:7b:57:8b:6e:a6:60:
d2:80:eb:31:e9:e2:fc:74:45:c0:76:f7:d8:e7:83:
3d:b6:90:49:13:b9:2e:49:2c:07:f7:34:c2:18:95:
3b:d2:b7:cb:34:50:88:24:11:0b:e2:12:d4:b0:ad:
e5:c6:02:6d:6b:22:8e:31:db:43:ac:87:d2:f0:b8:
51:53:62:64:37:5d:7a:2d:97:d2:11:b5:fc:e2:93:
54:c2:2f:33:5a:f7:26:14:78:48:9c:cc:fe:ff:2e:
ee:26:39:fa:b7:60:35:34:15:fe:9f:fe:b1:88:b8:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:77:DA:70:DB:B4:FA:DF:CA:78:83:7A:AD:0D:B5:DD:8B:1A:7F
X509v3 Authority Key Identifier:
keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/TcF32nDbtPrfyniDeq0Ntd2LGn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.208.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:0f:d4:81:5f:e5:d4:f5:3e:f0:e4:8b:88:fd:ac:08:c6:9b:
6e:19:77:20:a7:d3:a0:41:c4:33:05:7f:27:4a:26:1b:1c:de:
c8:03:3a:23:61:39:44:49:94:cc:11:94:56:39:44:80:2d:04:
44:70:7f:22:fd:c1:45:8a:d5:31:80:b6:ea:d3:d9:b4:17:14:
c1:b7:f3:a4:6a:4d:54:ae:95:2d:a7:33:47:10:8e:75:19:8c:
b0:72:7d:82:e8:2a:c5:30:09:0a:2f:9c:60:bd:2b:4a:a9:ad:
3e:6d:23:a3:23:ef:fb:75:d1:29:47:24:cb:fa:b0:2c:3f:f9:
7c:4e:fc:c7:24:ca:9d:a4:4f:54:32:b4:35:ca:7f:56:03:c4:
11:c6:f9:16:b8:af:c7:1f:0a:f7:69:ec:18:69:36:3a:92:47:
5a:38:0c:b4:9a:17:87:25:60:52:14:64:33:97:49:72:0c:65:
11:93:06:ed:cf:b3:f1:ce:58:3d:6c:03:19:40:c2:e1:19:04:
10:5f:06:ea:02:d6:42:fb:e8:62:1f:2e:a4:a9:76:a0:4e:bb:
99:cb:c1:7e:b0:00:83:ee:00:d6:44:bb:1d:3b:63:7d:0d:9c:
a3:04:09:b0:6f:eb:50:2d:6a:87:48:61:4d:86:d1:30:12:f2:
95:c7:89:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwlbhrxPYXBIbuqSxV2NnQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1
NTc1Y2EwHhcNMjMxMjAxMTI1MDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGMxNzdkYTcwZGJiNGZhZGZjYTc4ODM3YWFkMGRiNWRkOGIxYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA+oimgURLO2+K9PGHHvBV5Lyvd4
Fns4tPycPxUcTYcxZ4eUo0oeuFXKisZkRxZAh7uv0eZFozTfCZ16gXeslTRNE3ko
8092Y4P7LNEDMbY37MCaa61+PofVWjygHDBGFf1/3AiMijWNV3lB9b5uuPVuyueZ
jvtiFEbToynzzsXj3PF/f6hOs3jf+QdbH9x7V4tupmDSgOsx6eL8dEXAdvfY54M9
tpBJE7kuSSwH9zTCGJU70rfLNFCIJBEL4hLUsK3lxgJtayKOMdtDrIfS8LhRU2Jk
N116LZfSEbX84pNUwi8zWvcmFHhInMz+/y7uJjn6t2A1NBX+n/6xiLjdmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3Bd9pw27T638p4g3qtDbXdixp/MB8GA1UdIwQY
MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut
MTQ1NGZmZTYxODJjLzEvVGNGMzJuRGJ0UHJmeW5pRGVxME50ZDJMR244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj
LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUtA8MA0G
CSqGSIb3DQEBCwUAA4IBAQCKD9SBX+XU9T7w5IuI/awIxptuGXcgp9OgQcQzBX8n
SiYbHN7IAzojYTlESZTMEZRWOUSALQREcH8i/cFFitUxgLbq09m0FxTBt/Okak1U
rpUtpzNHEI51GYywcn2C6CrFMAkKL5xgvStKqa0+bSOjI+/7ddEpRyTL+rAsP/l8
TvzHJMqdpE9UMrQ1yn9WA8QRxvkWuK/HHwr3aewYaTY6kkdaOAy0mheHJWBSFGQz
l0lyDGURkwbtz7Pxzlg9bAMZQMLhGQQQXwbqAtZC++hiHy6kqXagTruZy8F+sACD
7gDWRLsdO2N9DZyjBAmwb+tQLWqHSGFNhtEwEvKVx4ni
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:47 2025 by rpki-client