Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t2cmNLTTnWNf5L-HXLhkX1LzTrk.roa
File: t2cmNLTTnWNf5L-HXLhkX1LzTrk.roa (raw, json)
Hash identifier: Mw05G3XGjE1eQG56cIpmjCSki3Pk04ffsgsstpI6O4c=
Subject key identifier: B7:67:26:34:B4:D3:9D:63:5F:E4:BF:87:5C:B8:64:5F:52:F3:4E:B9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 158AA672
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t2cmNLTTnWNf5L-HXLhkX1LzTrk.roa
Signing time: Wed 29 Jun 2022 03:49:02 +0000
ROA not before: Wed 29 Jun 2022 03:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 193.36.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361408114 (0x158aa672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 29 03:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7672634b4d39d635fe4bf875cb8645f52f34eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:8a:f2:b8:31:87:00:cc:c0:f0:6e:5b:b1:
a1:42:f7:11:97:1f:a2:a5:ee:69:d6:2c:8a:80:7f:
fc:32:04:f5:de:0a:8c:88:09:7f:35:05:39:3d:28:
aa:a4:e6:f2:3f:06:5d:af:ba:b0:44:1b:22:d8:ff:
0b:83:5c:6a:ae:31:a5:54:6e:92:a2:9c:03:c5:e7:
a6:6e:d4:9b:7e:08:1b:32:86:da:74:9e:c2:d6:7f:
44:9a:1d:fb:ea:fb:bd:58:36:ef:76:34:69:3b:0f:
83:39:ed:03:b7:05:a8:23:ce:32:bd:0c:4d:5b:36:
56:cb:a0:6f:50:ad:74:8d:0e:18:28:59:17:4f:cb:
19:cf:01:da:7a:99:e6:b3:1d:31:8b:93:62:a7:e4:
04:cc:90:01:e4:74:1c:26:ae:28:bc:02:99:f1:11:
e0:d0:0f:08:b8:99:48:78:b6:49:a8:e4:c0:72:05:
de:36:b2:d3:8e:60:60:2e:ee:a5:f0:57:f3:2c:39:
aa:33:0d:29:55:b1:dd:c6:40:14:b4:23:da:a9:a5:
f8:86:e1:bc:46:6d:8a:4e:6f:4b:24:c9:04:c0:ed:
89:29:70:9d:ff:50:f3:1e:95:73:5e:55:e4:8e:ca:
e1:8b:d5:89:ca:bf:89:aa:bc:db:90:46:aa:53:27:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:26:34:B4:D3:9D:63:5F:E4:BF:87:5C:B8:64:5F:52:F3:4E:B9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/t2cmNLTTnWNf5L-HXLhkX1LzTrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
06:03:55:5c:b8:f3:e9:2d:88:54:67:d8:5e:98:05:40:ed:7f:
8d:6f:64:e7:6d:7b:82:cb:c3:da:70:9e:20:43:e5:d0:e3:84:
dc:0a:9e:cf:36:5a:e0:ea:78:b7:ec:3f:ca:26:2a:40:de:0a:
ff:5b:9f:5c:41:de:96:b7:f5:64:e0:83:58:b1:c2:33:a0:56:
ed:59:bf:75:09:ea:05:aa:eb:12:79:df:63:74:13:c6:55:d6:
a4:3e:1f:82:c5:b9:66:b6:19:9f:0d:de:1c:0e:77:f6:f9:48:
cd:95:f6:b8:4f:5f:a9:aa:3e:7d:c1:cf:50:f8:6a:a4:53:86:
6b:85:4f:81:b3:7c:6f:b3:e5:b9:ff:d6:2d:47:91:8a:49:e7:
d8:7a:1a:1b:c3:b1:b3:af:cd:7c:a2:4c:aa:f4:19:2a:3e:3f:
b7:88:26:49:dd:c6:f0:95:8b:be:a0:b1:69:42:3d:90:bf:d9:
81:39:60:bb:88:56:49:9d:0b:63:dd:17:f5:23:b3:01:7a:27:
a0:d9:96:c5:1b:04:af:95:4b:8a:ec:2e:5a:bd:31:63:a4:62:
df:b8:ff:cd:ae:53:d5:b5:7f:78:07:98:90:e1:90:11:49:37:
5f:62:50:01:df:36:57:c1:64:92:b9:cc:a6:2c:c2:62:57:e1:
f2:43:eb:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFYqmcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDYy
OTAzNDkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjc2NzI2MzRiNGQz
OWQ2MzVmZTRiZjg3NWNiODY0NWY1MmYzNGViOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI0OivK4MYcAzMDwbluxoUL3EZcfoqXuadYsioB//DIE9d4K
jIgJfzUFOT0oqqTm8j8GXa+6sEQbItj/C4Ncaq4xpVRukqKcA8Xnpm7Um34IGzKG
2nSewtZ/RJod++r7vVg273Y0aTsPgzntA7cFqCPOMr0MTVs2Vsugb1CtdI0OGChZ
F0/LGc8B2nqZ5rMdMYuTYqfkBMyQAeR0HCauKLwCmfER4NAPCLiZSHi2SajkwHIF
3jay045gYC7upfBX8yw5qjMNKVWx3cZAFLQj2qml+IbhvEZtik5vSyTJBMDtiSlw
nf9Q8x6Vc15V5I7K4YvVicq/iaq825BGqlMnA78CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3ZyY0tNOdY1/kv4dcuGRfUvNOuTAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L3QyY21OTFRUbldOZjVMLUhYTGhrWDFMelRyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEkSDANBgkqhkiG9w0BAQsFAAOC
AQEABgNVXLjz6S2IVGfYXpgFQO1/jW9k5217gsvD2nCeIEPl0OOE3AqezzZa4Op4
t+w/yiYqQN4K/1ufXEHelrf1ZOCDWLHCM6BW7Vm/dQnqBarrEnnfY3QTxlXWpD4f
gsW5ZrYZnw3eHA539vlIzZX2uE9fqao+fcHPUPhqpFOGa4VPgbN8b7Pluf/WLUeR
iknn2HoaG8Oxs6/NfKJMqvQZKj4/t4gmSd3G8JWLvqCxaUI9kL/ZgTlgu4hWSZ0L
Y90X9SOzAXonoNmWxRsEr5VLiuwuWr0xY6Ri37j/za5T1bV/eAeYkOGQEUk3X2JQ
Ad82V8FkkrnMpizCYlfh8kPrsw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org