Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/TnNmLtCr5sfdP4aJyx-FZ_BP7P8.roa
File: TnNmLtCr5sfdP4aJyx-FZ_BP7P8.roa (raw, json)
Hash identifier: V0y5wVJuSPgMTMslJg6UedVUxxJ77Gt5baiD7UAJRnM=
Subject key identifier: 4E:73:66:2E:D0:AB:E6:C7:DD:3F:86:89:CB:1F:85:67:F0:4F:EC:FF
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 018571956C87448A485263AD064818EEC10F
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/TnNmLtCr5sfdP4aJyx-FZ_BP7P8.roa
Signing time: Mon 02 Jan 2023 08:24:56 +0000
ROA not before: Mon 02 Jan 2023 08:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30950
IP address blocks: 193.28.236.0/24 maxlen: 24
185.58.68.0/22 maxlen: 22
2001:67c:324::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:6c:87:44:8a:48:52:63:ad:06:48:18:ee:c1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Jan 2 08:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e73662ed0abe6c7dd3f8689cb1f8567f04fecff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:d7:1a:09:e3:57:9f:c9:42:eb:44:0a:64:
95:e1:18:79:87:85:c0:31:9c:18:94:0a:34:e5:c9:
f2:ae:b9:18:73:15:4f:85:4d:82:f7:ae:be:12:41:
4a:92:f9:a5:b8:bb:6d:b2:ba:3c:34:7d:73:68:f5:
dd:e4:78:f4:7d:dd:19:77:3e:21:db:83:0e:31:38:
3c:95:b2:8b:f0:12:a2:4c:88:8e:87:f8:dc:01:6e:
07:1e:15:dc:09:30:fc:8a:c7:b3:d2:6e:f5:62:75:
46:5f:8a:44:4f:50:70:f4:e7:69:f4:03:3c:55:07:
64:61:f3:f5:ce:e6:99:b4:2c:f7:ac:d6:cc:17:10:
a3:57:64:d8:0d:29:85:40:ba:0a:d6:35:65:fa:00:
35:75:73:11:1a:10:09:28:49:80:74:71:96:ff:fc:
53:99:d0:96:49:8a:fb:ca:13:a4:90:92:dc:c9:e3:
48:ef:95:24:4c:0c:5e:a0:46:a0:2a:40:3a:db:58:
b5:68:3c:e8:a1:8f:4d:f6:4c:44:35:2a:6d:40:30:
f7:0f:f8:fa:0c:b5:19:a4:13:ed:e4:96:a6:b7:3a:
da:be:c0:14:e2:08:bf:fd:cb:d9:98:3e:aa:fb:32:
6f:54:96:6b:0f:a6:98:9e:c5:55:ac:6f:cc:60:ac:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:66:2E:D0:AB:E6:C7:DD:3F:86:89:CB:1F:85:67:F0:4F:EC:FF
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/TnNmLtCr5sfdP4aJyx-FZ_BP7P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.68.0/22
193.28.236.0/24
IPv6:
2001:67c:324::/48
Signature Algorithm: sha256WithRSAEncryption
1f:63:15:1c:54:b7:52:74:bd:ea:8f:40:ce:08:fb:87:bf:d8:
56:18:f3:ba:91:fa:0e:0e:a5:f5:b2:1f:0b:fb:51:10:78:34:
c1:8d:25:2d:7c:de:c1:e4:e5:49:b5:54:cc:9d:0f:4a:b2:af:
55:2e:14:91:f8:08:81:4d:74:85:b1:2d:46:7d:49:63:53:87:
38:e6:64:bf:f2:10:83:15:8b:9a:b0:c8:d9:b6:95:79:e0:dc:
50:98:09:53:8b:76:10:69:e3:fe:1e:ca:b2:8d:2d:83:fe:01:
04:0a:b1:bf:3e:6f:8f:41:8f:50:a2:3b:71:de:ec:67:fa:f9:
0a:92:f3:0f:9f:24:56:9e:78:c6:bd:d0:fd:5f:c7:d2:f7:dc:
4a:01:5e:11:09:6f:5b:3e:6e:6b:a2:e2:92:71:d7:10:c8:83:
b9:e3:80:33:ce:ed:6a:31:12:ca:ec:86:f6:b3:d5:00:70:fb:
06:b2:c7:63:0f:ab:44:3a:2c:cb:a5:a5:54:e8:9f:1d:07:1a:
af:2f:22:9d:c5:86:c6:16:0e:bd:86:91:5c:7a:09:ff:2e:05:
28:6c:e4:e7:74:cc:41:06:49:66:17:f7:b7:33:13:9e:44:d5:
76:f1:9f:89:d0:57:3a:5f:8d:88:90:94:20:71:c7:29:b9:61:
e4:07:42:da
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVxlWyHRIpIUmOtBkgY7sEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjMwMTAyMDgyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTczNjYyZWQwYWJlNmM3ZGQzZjg2ODljYjFmODU2N2YwNGZlY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHXGgnjV5/JQutECmSV4Rh5h4XA
MZwYlAo05cnyrrkYcxVPhU2C966+EkFKkvmluLttsro8NH1zaPXd5Hj0fd0Zdz4h
24MOMTg8lbKL8BKiTIiOh/jcAW4HHhXcCTD8isez0m71YnVGX4pET1Bw9Odp9AM8
VQdkYfP1zuaZtCz3rNbMFxCjV2TYDSmFQLoK1jVl+gA1dXMRGhAJKEmAdHGW//xT
mdCWSYr7yhOkkJLcyeNI75UkTAxeoEagKkA621i1aDzooY9N9kxENSptQDD3D/j6
DLUZpBPt5JamtzravsAU4gi//cvZmD6q+zJvVJZrD6aYnsVVrG/MYKxtxwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFE5zZi7Qq+bH3T+GicsfhWfwT+z/MB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvVG5ObUx0Q3I1c2ZkUDRhSnl4LUZaX0JQN1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuTpEAwQA
wRzsMA8EAgACMAkDBwAgAQZ8AyQwDQYJKoZIhvcNAQELBQADggEBAB9jFRxUt1J0
veqPQM4I+4e/2FYY87qR+g4OpfWyHwv7URB4NMGNJS183sHk5Um1VMydD0qyr1Uu
FJH4CIFNdIWxLUZ9SWNThzjmZL/yEIMVi5qwyNm2lXng3FCYCVOLdhBp4/4eyrKN
LYP+AQQKsb8+b49Bj1CiO3He7Gf6+QqS8w+fJFaeeMa90P1fx9L33EoBXhEJb1s+
bmui4pJx1xDIg7njgDPO7WoxEsrshvaz1QBw+wayx2MPq0Q6LMulpVTonx0HGq8v
Ip3FhsYWDr2GkVx6Cf8uBShs5Od0zEEGSWYX97czE55E1Xbxn4nQVzpfjYiQlCBx
xym5YeQHQto=
-----END CERTIFICATE-----
Generated at Sat Apr 19 09:49:01 2025 by rpki-client