Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/TQby_4cVpBSKhDLKllULg_qP78A.roa
File: TQby_4cVpBSKhDLKllULg_qP78A.roa (raw, json)
Hash identifier: 3vf2fmxW8KAPUrTjDxx2pEDl18qXGplcDVF03sOAKL0=
Subject key identifier: 4D:06:F2:FF:87:15:A4:14:8A:84:32:CA:96:55:0B:83:FA:8F:EF:C0
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0186FE7CF7C6B5D9DC29BB46E984C750404A
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/TQby_4cVpBSKhDLKllULg_qP78A.roa
Signing time: Mon 20 Mar 2023 10:07:28 +0000
ROA not before: Mon 20 Mar 2023 10:07:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43966
IP address blocks: 79.173.66.0/23 maxlen: 24
79.173.77.0/24 maxlen: 24
79.173.80.0/20 maxlen: 24
94.243.192.0/20 maxlen: 24
94.243.232.0/21 maxlen: 24
79.173.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:7c:f7:c6:b5:d9:dc:29:bb:46:e9:84:c7:50:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Mar 20 10:07:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d06f2ff8715a4148a8432ca96550b83fa8fefc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:de:7a:fe:6d:6d:b5:d5:d2:12:54:8b:ae:
d3:e9:4d:00:27:5d:b7:c0:ea:c7:5b:69:bb:bf:e3:
34:a9:78:12:3a:d4:50:5a:b8:da:4c:ed:24:6c:3e:
3e:e4:51:9e:09:f6:a1:c6:bc:50:84:aa:84:bd:ca:
87:9a:f1:0b:0b:7f:2a:51:59:e3:44:c7:23:00:8c:
9b:c1:69:9f:7b:68:53:65:b4:4b:f1:e8:7d:e5:0e:
a4:a2:4c:24:42:e7:26:71:25:ac:39:9b:81:b9:13:
83:1b:29:6e:91:49:29:a6:c5:ec:59:6b:4f:b1:1e:
14:54:20:d4:99:7d:04:6a:86:c6:a4:ef:19:da:58:
7d:0d:21:89:42:6a:85:d9:26:44:c1:66:d8:e0:a8:
8e:fb:69:a0:e2:2d:9e:99:53:0d:2a:c8:5e:fd:be:
7c:ea:bb:2e:da:ce:a4:62:bd:f3:1f:6b:f6:5a:79:
cd:f3:f4:98:25:00:fd:df:49:c3:e5:08:08:ec:9b:
8e:70:9f:8b:e1:87:0c:d5:0d:f4:a2:31:7b:32:83:
95:fc:46:61:c1:e4:2f:a9:ce:05:6f:14:43:68:66:
16:cf:3f:ae:fd:49:7e:b2:1a:8c:0f:7f:f5:18:e2:
4c:83:d8:7f:87:c6:57:d6:f2:b5:c6:37:cc:04:6d:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:F2:FF:87:15:A4:14:8A:84:32:CA:96:55:0B:83:FA:8F:EF:C0
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/TQby_4cVpBSKhDLKllULg_qP78A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.64.0/22
79.173.77.0/24
79.173.80.0/20
94.243.192.0/20
94.243.232.0/21
Signature Algorithm: sha256WithRSAEncryption
09:aa:6b:ee:63:20:13:27:88:08:32:51:77:ae:65:65:6f:dc:
7f:72:c9:ad:5b:a2:d2:16:9d:b8:c8:9e:e5:8d:19:45:a3:c1:
9e:38:f8:cf:a6:72:fa:ee:e8:16:c5:1b:0c:6d:6d:15:88:fd:
cd:26:44:c3:9a:35:83:18:f3:d8:13:5d:7a:c0:20:82:75:10:
2d:e7:53:7e:9a:4a:95:46:a0:19:f7:5c:5d:5f:8e:ea:8c:9f:
5c:e5:19:40:93:e2:11:f9:86:f1:be:53:5a:7f:71:fa:dc:1f:
a3:9c:53:a7:de:01:df:6a:9a:c1:52:cb:30:11:bf:7b:7f:83:
41:96:42:b9:9b:89:d7:d5:ca:b4:ed:34:9b:74:71:11:a4:c1:
68:12:63:90:5c:30:5c:c6:3b:cf:c1:99:d5:4d:9e:c8:6d:5e:
78:56:c9:4b:69:d3:09:fd:d2:78:2e:b6:04:9c:da:cc:f1:8e:
44:64:36:9e:f1:8e:e0:5d:a8:a5:88:27:53:90:bb:73:28:8c:
19:0b:ac:83:1f:ee:63:1a:e8:2a:a7:cd:c6:f0:f0:c1:e4:46:
35:c3:98:8d:bd:3a:3b:68:3c:47:aa:62:06:a8:5e:fa:0b:99:
b0:e9:2e:04:8d:a2:57:20:b7:6b:45:aa:05:f5:25:71:55:01:
8d:c3:c5:42
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYb+fPfGtdncKbtG6YTHUEBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx
Y2YxMTMwHhcNMjMwMzIwMTAwNzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDA2ZjJmZjg3MTVhNDE0OGE4NDMyY2E5NjU1MGI4M2ZhOGZlZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16/eev5tbbXV0hJUi67T6U0AJ123
wOrHW2m7v+M0qXgSOtRQWrjaTO0kbD4+5FGeCfahxrxQhKqEvcqHmvELC38qUVnj
RMcjAIybwWmfe2hTZbRL8eh95Q6kokwkQucmcSWsOZuBuRODGylukUkppsXsWWtP
sR4UVCDUmX0EaobGpO8Z2lh9DSGJQmqF2SZEwWbY4KiO+2mg4i2emVMNKshe/b58
6rsu2s6kYr3zH2v2WnnN8/SYJQD930nD5QgI7JuOcJ+L4YcM1Q30ojF7MoOV/EZh
weQvqc4FbxRDaGYWzz+u/Ul+shqMD3/1GOJMg9h/h8ZX1vK1xjfMBG2JOQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFE0G8v+HFaQUioQyypZVC4P6j+/AMB8GA1UdIwQY
MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvVFFieV80Y1ZwQlNLaERMS2xsVUxnX3FQNzhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCT61AAwQA
T61NAwQET61QAwQEXvPAAwQDXvPoMA0GCSqGSIb3DQEBCwUAA4IBAQAJqmvuYyAT
J4gIMlF3rmVlb9x/csmtW6LSFp24yJ7ljRlFo8GeOPjPpnL67ugWxRsMbW0ViP3N
JkTDmjWDGPPYE116wCCCdRAt51N+mkqVRqAZ91xdX47qjJ9c5RlAk+IR+YbxvlNa
f3H63B+jnFOn3gHfaprBUsswEb97f4NBlkK5m4nX1cq07TSbdHERpMFoEmOQXDBc
xjvPwZnVTZ7IbV54VslLadMJ/dJ4LrYEnNrM8Y5EZDae8Y7gXailiCdTkLtzKIwZ
C6yDH+5jGugqp83G8PDB5EY1w5iNvTo7aDxHqmIGqF76C5mw6S4EjaJXILdrRaoF
9SVxVQGNw8VC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:11 2025 by rpki-client