Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/trbVIXHCJTjh622sRlgjKJF_Sco.roa
File: trbVIXHCJTjh622sRlgjKJF_Sco.roa (raw, json)
Hash identifier: u2XAMZ5yAGBsS+t0au2dEQ4/a6wNPBKbc4A2H/Vw3pA=
Subject key identifier: B6:B6:D5:21:71:C2:25:38:E1:EB:6D:AC:46:58:23:28:91:7F:49:CA
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01830C8A21E2A4C07C03422406670395BF7B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/trbVIXHCJTjh622sRlgjKJF_Sco.roa
Signing time: Mon 05 Sep 2022 07:25:22 +0000
ROA not before: Mon 05 Sep 2022 07:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.224.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:8a:21:e2:a4:c0:7c:03:42:24:06:67:03:95:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 5 07:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6b6d52171c22538e1eb6dac46582328917f49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:7a:af:da:94:a3:95:cf:81:f8:7d:d0:e8:
fb:2a:3d:b9:da:5b:93:1a:b2:82:42:38:fe:8f:8b:
45:82:db:31:9f:d3:72:c5:3c:d1:55:73:7a:76:12:
f7:cd:f2:4d:59:5e:18:4f:c8:e3:76:01:fe:e0:84:
64:72:c3:b5:7f:6c:54:99:3e:0e:74:0d:5a:3e:46:
95:ab:86:14:4f:81:17:0b:1c:03:f8:75:0d:02:e8:
15:af:57:10:7a:25:59:39:9e:94:0b:12:ef:8a:37:
a7:27:50:ba:b4:cd:5e:19:99:56:dd:93:e3:ba:ab:
73:2a:95:a9:5c:e2:f4:d7:6b:d5:84:5c:fd:97:ec:
a5:80:b6:2e:5b:ea:0f:2f:a5:53:6f:a3:6c:db:1b:
57:a9:33:23:b7:15:e4:bd:30:0a:e4:75:d6:80:4f:
ec:9d:17:d2:af:8b:d6:58:f3:a7:06:16:f0:9a:0f:
6e:67:97:4f:c9:1b:d0:1b:ad:4f:9c:90:d0:e4:8f:
24:9e:aa:33:a1:2e:12:3b:a0:0c:f3:7c:75:7d:91:
d6:2c:f2:63:15:22:4f:7b:90:0c:91:a8:74:e9:49:
5d:e8:0f:ed:2c:47:d5:34:ef:be:3a:11:ac:24:5e:
ab:9c:de:5a:d2:12:dc:e6:69:e3:be:85:9b:49:32:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:D5:21:71:C2:25:38:E1:EB:6D:AC:46:58:23:28:91:7F:49:CA
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/trbVIXHCJTjh622sRlgjKJF_Sco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a1:df:ee:6b:9a:e1:09:3a:89:db:8a:34:55:74:d0:0b:43:
9a:ea:24:cf:55:cc:c8:a2:57:bf:72:67:5c:08:02:35:b4:8c:
ac:44:6b:da:7e:af:ad:69:f4:55:9d:67:52:af:ca:54:af:04:
ca:ad:6f:3c:70:ab:bd:50:50:8c:fb:92:97:a6:10:07:50:a9:
ab:1f:3d:82:b3:db:37:b9:ec:7d:39:47:cd:3a:e0:71:70:46:
6b:82:a9:0e:da:16:77:64:8a:77:ad:10:6b:b8:3a:36:4a:73:
10:c9:1e:a1:21:06:71:2e:82:2e:91:29:4c:23:4d:75:5f:00:
de:18:14:70:39:a4:10:a1:ec:38:f3:1f:0b:3d:a5:00:21:83:
25:21:90:31:4a:22:b7:53:19:c3:72:6b:10:1a:2c:e0:12:dd:
f9:42:6f:3e:b4:ef:05:19:d7:68:55:9c:ff:96:64:5d:31:0c:
15:7b:85:c6:b3:47:fa:1b:08:88:bd:f6:f0:ce:be:82:7f:a4:
1d:8f:02:01:c0:60:7b:6b:a7:ad:34:90:ef:58:db:72:78:71:
34:07:3a:f6:c2:51:e6:9f:41:3d:1f:be:1e:eb:1e:07:83:63:
e4:62:bd:c7:91:8d:3e:51:ff:64:f7:b4:2d:4f:4f:3b:e8:1b:
6a:23:40:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMMiiHipMB8A0IkBmcDlb97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjIwOTA1MDcyNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmI2ZDUyMTcxYzIyNTM4ZTFlYjZkYWM0NjU4MjMyODkxN2Y0OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD16r9qUo5XPgfh90Oj7Kj252luT
GrKCQjj+j4tFgtsxn9NyxTzRVXN6dhL3zfJNWV4YT8jjdgH+4IRkcsO1f2xUmT4O
dA1aPkaVq4YUT4EXCxwD+HUNAugVr1cQeiVZOZ6UCxLvijenJ1C6tM1eGZlW3ZPj
uqtzKpWpXOL012vVhFz9l+ylgLYuW+oPL6VTb6Ns2xtXqTMjtxXkvTAK5HXWgE/s
nRfSr4vWWPOnBhbwmg9uZ5dPyRvQG61PnJDQ5I8knqozoS4SO6AM83x1fZHWLPJj
FSJPe5AMkah06Uld6A/tLEfVNO++OhGsJF6rnN5a0hLc5mnjvoWbSTI2mQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLa21SFxwiU44ettrEZYIyiRf0nKMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvdHJiVklYSENKVGpoNjIyc1JsZ2pLSkZfU2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfgAwQA
UEfuMA0GCSqGSIb3DQEBCwUAA4IBAQBdod/ua5rhCTqJ24o0VXTQC0Oa6iTPVczI
ole/cmdcCAI1tIysRGvafq+tafRVnWdSr8pUrwTKrW88cKu9UFCM+5KXphAHUKmr
Hz2Cs9s3uex9OUfNOuBxcEZrgqkO2hZ3ZIp3rRBruDo2SnMQyR6hIQZxLoIukSlM
I011XwDeGBRwOaQQoew48x8LPaUAIYMlIZAxSiK3UxnDcmsQGizgEt35Qm8+tO8F
GddoVZz/lmRdMQwVe4XGs0f6GwiIvfbwzr6Cf6QdjwIBwGB7a6etNJDvWNtyeHE0
Bzr2wlHmn0E9H74e6x4Hg2PkYr3HkY0+Uf9k97QtT0876BtqI0CP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org