Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TY3mMpTr-uo__fOr-J8ZxlZaDls.roa
File: TY3mMpTr-uo__fOr-J8ZxlZaDls.roa (raw, json)
Hash identifier: hUr8oljHD/G6v4E9/T5MstpuWp/pI0CZNxA0vOmWg8o=
Subject key identifier: 4D:8D:E6:32:94:EB:FA:EA:3F:FD:F3:AB:F8:9F:19:C6:56:5A:0E:5B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13F68DB1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TY3mMpTr-uo__fOr-J8ZxlZaDls.roa
Signing time: Mon 28 Feb 2022 13:34:26 +0000
ROA not before: Mon 28 Feb 2022 13:34:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59598
IP address blocks: 185.215.247.0/24 maxlen: 24
91.132.56.0/24 maxlen: 24
185.212.60.0/22 maxlen: 24
31.25.88.0/23 maxlen: 24
185.217.108.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
185.129.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334925233 (0x13f68db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 28 13:34:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d8de63294ebfaea3ffdf3abf89f19c6565a0e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:48:ec:22:60:44:6b:1f:b4:4a:09:b7:4a:
b9:07:f5:6b:d2:3e:1e:02:0b:e0:06:14:ca:62:c5:
e9:2d:23:a4:53:18:2e:5b:1c:ee:f1:83:e6:e4:ed:
13:45:16:40:15:70:b0:33:10:b0:8d:a0:a6:ac:4c:
86:3c:bf:5c:35:51:99:4a:3d:f7:c9:8f:79:b2:62:
5a:05:04:b8:a0:1b:37:42:fe:a3:d1:5a:e2:4e:a5:
56:ae:e4:23:22:cd:2a:61:9b:ab:0f:ca:76:4d:91:
2d:7f:95:47:b4:eb:a2:fd:43:e3:9b:b2:68:35:b0:
e8:8c:cf:17:f9:9d:d7:54:1e:73:69:0f:cd:fb:14:
27:83:8d:b3:11:41:bf:27:f0:47:86:d4:e8:07:9d:
b2:94:c1:ac:fc:35:4a:dd:89:88:09:64:e3:bd:51:
9a:9d:ed:91:36:f8:d3:82:12:71:ce:da:af:44:4d:
a4:ea:ad:57:98:41:23:91:3c:a0:b5:68:e3:7b:a2:
74:07:0d:7b:7d:5a:3d:a9:19:dc:0b:4f:a2:10:c1:
8d:39:f4:07:40:9e:ac:fa:ba:35:4e:5f:64:ea:a2:
35:e7:fe:40:26:34:62:c7:99:cd:8a:54:0e:7d:3c:
f5:cc:d7:1e:96:38:a7:49:82:77:77:fa:9b:dc:a3:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:E6:32:94:EB:FA:EA:3F:FD:F3:AB:F8:9F:19:C6:56:5A:0E:5B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TY3mMpTr-uo__fOr-J8ZxlZaDls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
91.132.56.0/24
185.129.110.0/24
185.212.60.0/22
185.215.247.0/24
185.217.108.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:12:ef:4d:7b:9c:99:91:51:73:27:b0:99:ae:b6:87:71:a0:
0b:0a:35:48:94:74:51:88:10:66:53:c8:50:1a:17:e7:15:34:
e5:f0:9e:bf:10:a3:7e:94:d2:75:10:c5:d6:f1:be:c5:d8:e6:
44:6c:f4:1e:55:e0:84:e9:75:91:a8:b6:cd:d8:a0:47:36:ca:
46:8f:a8:4b:59:53:09:a5:70:10:ae:1b:f0:df:35:ec:df:c0:
c2:18:42:7d:82:a1:42:2e:d3:ae:6e:5e:81:ea:62:e0:7b:7a:
ba:ed:9c:62:2c:20:04:4d:41:38:89:a0:b3:43:d4:61:ad:ab:
18:d9:ee:7c:89:b5:d2:47:47:48:33:67:f8:8d:da:b8:e2:bc:
70:80:56:9a:43:ae:c5:cd:1a:7d:2c:0a:21:b2:7d:6e:65:3b:
02:33:cd:50:ff:44:1f:8d:e3:50:60:f4:a6:8d:ba:4e:c7:3b:
5b:80:10:1e:9c:96:46:ca:63:7e:de:03:5a:ff:c8:0c:61:8d:
01:10:2d:06:c7:bb:64:aa:6c:92:0a:95:8f:18:21:8f:30:ec:
18:b4:40:43:80:92:b9:3d:17:3a:5d:c3:70:94:12:f5:b4:90:
3c:b7:d3:3f:1c:8e:bf:fd:83:8f:b2:d1:40:51:92:5b:4f:3b:
42:62:63:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEE/aNsTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDIy
ODEzMzQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQ4ZGU2MzI5NGVi
ZmFlYTNmZmRmM2FiZjg5ZjE5YzY1NjVhMGU1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM9qSOwiYERrH7RKCbdKuQf1a9I+HgIL4AYUymLF6S0jpFMY
Llsc7vGD5uTtE0UWQBVwsDMQsI2gpqxMhjy/XDVRmUo998mPebJiWgUEuKAbN0L+
o9Fa4k6lVq7kIyLNKmGbqw/Kdk2RLX+VR7Trov1D45uyaDWw6IzPF/md11Qec2kP
zfsUJ4ONsxFBvyfwR4bU6AedspTBrPw1St2JiAlk471Rmp3tkTb404IScc7ar0RN
pOqtV5hBI5E8oLVo43uidAcNe31aPakZ3AtPohDBjTn0B0CerPq6NU5fZOqiNef+
QCY0YseZzYpUDn089czXHpY4p0mCd3f6m9yjl70CAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRNjeYylOv66j/986v4nxnGVloOWzAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L1RZM21NcFRyLXVvX19mT3ItSjhaeGxaYURscy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAR8ZWAMEAFuEOAMEALmBbgMEArnU
PAMEALnX9wMEArnZbAMEAtRrHDANBgkqhkiG9w0BAQsFAAOCAQEApRLvTXucmZFR
cyewma62h3GgCwo1SJR0UYgQZlPIUBoX5xU05fCevxCjfpTSdRDF1vG+xdjmRGz0
HlXghOl1kai2zdigRzbKRo+oS1lTCaVwEK4b8N817N/AwhhCfYKhQi7Trm5egepi
4Ht6uu2cYiwgBE1BOImgs0PUYa2rGNnufIm10kdHSDNn+I3auOK8cIBWmkOuxc0a
fSwKIbJ9bmU7AjPNUP9EH43jUGD0po26Tsc7W4AQHpyWRspjft4DWv/IDGGNARAt
Bse7ZKpskgqVjxghjzDsGLRAQ4CSuT0XOl3DcJQS9bSQPLfTPxyOv/2Dj7LRQFGS
W087QmJjew==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org