Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TytYLLQSqbo81S-pd3HRKAB74PA.roa
File: TytYLLQSqbo81S-pd3HRKAB74PA.roa (raw, json)
Hash identifier: ZyESqjiPrS5Mx7tXIpQPZbK2NgjeIpH088aPyR4/+7A=
Subject key identifier: 4F:2B:58:2C:B4:12:A9:BA:3C:D5:2F:A9:77:71:D1:28:00:7B:E0:F0
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018248EF5F2D932601A4A50E5440CCB9DB3A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TytYLLQSqbo81S-pd3HRKAB74PA.roa
Signing time: Fri 29 Jul 2022 07:50:23 +0000
ROA not before: Fri 29 Jul 2022 07:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.208.69.0/24 maxlen: 24
91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
194.156.151.0/24 maxlen: 24
194.156.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:ef:5f:2d:93:26:01:a4:a5:0e:54:40:cc:b9:db:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jul 29 07:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f2b582cb412a9ba3cd52fa97771d128007be0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:ce:5f:dd:48:e2:5b:54:c4:31:2d:59:15:
59:fa:e3:d1:ca:b9:00:22:1f:37:2b:11:6b:d7:57:
d5:86:f9:65:ff:96:b4:2e:e9:3e:db:b5:70:77:70:
30:a2:97:68:ac:9f:d5:41:aa:dc:dc:b8:6e:8f:8a:
d9:4c:5d:b6:b6:47:c7:e2:0f:e1:d6:89:67:9a:8a:
2c:f5:86:bd:09:3c:aa:6c:00:77:da:2a:10:10:d6:
dc:24:0a:21:d6:c5:f8:b9:7d:8b:df:3e:f9:dc:a5:
43:8d:b2:f5:78:a9:dd:16:72:79:f2:5a:49:66:cb:
41:1f:1f:d8:8c:f6:1a:93:9f:bd:3b:1c:06:aa:b1:
c5:67:76:c1:93:b8:68:4b:4a:31:c1:57:30:a4:62:
a8:08:35:7b:e7:0b:b2:f9:b3:b8:51:42:20:98:7e:
ee:42:76:55:81:78:f7:50:76:6d:9e:d4:86:69:fb:
b9:8b:6d:a3:6e:f4:ee:e0:e7:08:13:94:39:bc:53:
7e:71:08:c5:ac:ef:ab:bd:0c:24:09:44:c6:73:8c:
78:2f:93:42:c3:a0:c0:38:54:0f:69:a8:5f:ca:6e:
c9:5e:b8:b5:b7:fe:28:3d:a9:1f:ef:8b:8b:5c:e2:
f3:4f:b8:e8:47:08:c0:4c:ad:51:8e:d2:b9:b5:aa:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:58:2C:B4:12:A9:BA:3C:D5:2F:A9:77:71:D1:28:00:7B:E0:F0
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TytYLLQSqbo81S-pd3HRKAB74PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.69.0/24
91.208.73.0/24
91.213.200.0/24
194.156.150.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:15:c2:51:cd:bd:d6:7e:92:8e:40:35:8f:d5:11:36:c1:0f:
80:0f:c2:6c:16:48:e8:be:15:3c:94:37:83:4f:50:a4:f0:76:
53:3c:0e:66:55:a5:aa:37:eb:8a:7c:92:54:54:88:b6:a5:7f:
eb:39:b1:ef:ad:b3:9c:15:a8:86:6a:dd:f8:f0:0a:cf:19:b9:
b2:d0:bf:18:14:60:81:d9:36:4e:aa:50:9d:62:dc:f4:64:f7:
de:0c:73:87:70:a3:02:12:a1:df:b1:5d:af:4c:18:ee:e9:59:
73:66:68:96:45:28:49:54:35:bf:f6:86:86:82:0e:b0:b8:5e:
34:80:e2:6d:1b:33:b4:85:3d:4f:64:ec:a5:69:08:1e:55:a5:
c8:78:44:c4:3f:83:85:35:76:0a:be:09:e9:94:0e:a4:07:f4:
dc:3e:14:0e:14:52:3c:4d:4a:a6:40:96:68:e3:53:89:92:ec:
53:fa:34:55:39:a8:f3:29:54:c0:38:17:1c:64:e4:0e:41:89:
d3:0a:40:b1:a6:32:8a:92:80:cb:de:2c:2e:3c:c8:f1:b5:93:
d7:5b:47:2e:f4:63:ad:00:29:21:3c:f9:02:43:b5:c5:f7:e2:
d2:22:42:81:f5:84:81:fc:e6:d3:6b:cc:2a:b3:d9:46:a9:ba:
ca:40:91:18
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYJI718tkyYBpKUOVEDMuds6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjIwNzI5MDc1MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjJiNTgyY2I0MTJhOWJhM2NkNTJmYTk3NzcxZDEyODAwN2JlMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFXOX91I4ltUxDEtWRVZ+uPRyrkA
Ih83KxFr11fVhvll/5a0Luk+27Vwd3AwopdorJ/VQarc3Lhuj4rZTF22tkfH4g/h
1olnmoos9Ya9CTyqbAB32ioQENbcJAoh1sX4uX2L3z753KVDjbL1eKndFnJ58lpJ
ZstBHx/YjPYak5+9OxwGqrHFZ3bBk7hoS0oxwVcwpGKoCDV75wuy+bO4UUIgmH7u
QnZVgXj3UHZtntSGafu5i22jbvTu4OcIE5Q5vFN+cQjFrO+rvQwkCUTGc4x4L5NC
w6DAOFQPaahfym7JXri1t/4oPakf74uLXOLzT7joRwjATK1RjtK5tarYSQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE8rWCy0Eqm6PNUvqXdx0SgAe+DwMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvVHl0WUxMUVNxYm84MVMtcGQzSFJLQUI3NFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW9BFAwQA
W9BJAwQAW9XIAwQBwpyWMA0GCSqGSIb3DQEBCwUAA4IBAQA9FcJRzb3WfpKOQDWP
1RE2wQ+AD8JsFkjovhU8lDeDT1Ck8HZTPA5mVaWqN+uKfJJUVIi2pX/rObHvrbOc
FaiGat348ArPGbmy0L8YFGCB2TZOqlCdYtz0ZPfeDHOHcKMCEqHfsV2vTBju6Vlz
ZmiWRShJVDW/9oaGgg6wuF40gOJtGzO0hT1PZOylaQgeVaXIeETEP4OFNXYKvgnp
lA6kB/TcPhQOFFI8TUqmQJZo41OJkuxT+jRVOajzKVTAOBccZOQOQYnTCkCxpjKK
koDL3iwuPMjxtZPXW0cu9GOtACkhPPkCQ7XF9+LSIkKB9YSB/ObTa8wqs9lGqbrK
QJEY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org