Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/00TF1239E251gufrNy-x1g7IKu4.roa
File: 00TF1239E251gufrNy-x1g7IKu4.roa (raw, json)
Hash identifier: 13SUYTBNYFnpkiatvoDPQCI8y8I8ou0qb9uHw+fHp00=
Subject key identifier: D3:44:C5:D7:6D:FD:13:6E:75:82:E7:EB:37:2F:B1:D6:0E:C8:2A:EE
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 06273FBE
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/00TF1239E251gufrNy-x1g7IKu4.roa
Signing time: Sat 01 Jan 2022 15:06:34 +0000
ROA not before: Sat 01 Jan 2022 15:06:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21263
IP address blocks: 192.81.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103235518 (0x6273fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Jan 1 15:06:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d344c5d76dfd136e7582e7eb372fb1d60ec82aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:54:22:86:5c:02:a3:a0:1a:c2:88:d2:07:
d8:94:5d:f3:9c:e8:f4:cb:39:8a:b1:5e:00:20:7a:
be:a8:ba:aa:4b:40:0a:30:55:5e:81:12:15:8f:04:
1f:db:75:fe:95:26:6e:d8:ac:e3:2d:4e:12:d7:32:
a3:57:69:8f:7d:e1:83:76:63:a3:7a:8f:e5:fd:5f:
50:cc:d2:12:b2:1b:d0:78:3d:e3:f2:22:3b:31:e9:
e1:b4:cc:be:79:91:17:48:0d:5b:37:eb:14:55:82:
4b:11:ad:fd:95:e6:86:fc:84:78:a4:df:7f:82:23:
dc:71:d0:bf:51:ba:c4:f3:06:0a:39:fc:ad:6e:c4:
a6:6a:ca:10:4a:fb:0b:80:5f:2b:83:9a:81:9f:2c:
f3:79:97:74:d4:c6:7d:88:f6:20:dc:6c:76:24:f4:
59:38:55:1b:c2:b6:eb:bf:d7:32:fd:32:40:f7:08:
b8:7a:5e:6a:ce:4d:37:04:fa:80:2a:ae:12:38:23:
a9:f5:8c:b0:8d:c2:86:c8:da:82:d0:2d:a3:1c:dd:
d9:4d:79:a0:86:d9:a4:cc:e3:09:dd:c5:ec:31:e7:
73:c2:19:9e:07:c2:cb:6c:b6:05:ca:3d:8d:c5:e2:
93:f6:74:40:cc:ff:ca:9c:2f:5b:26:d6:5b:f0:63:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:C5:D7:6D:FD:13:6E:75:82:E7:EB:37:2F:B1:D6:0E:C8:2A:EE
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/00TF1239E251gufrNy-x1g7IKu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.81.121.0/24
Signature Algorithm: sha256WithRSAEncryption
68:41:00:f2:72:fc:e8:29:58:74:49:9b:d1:d5:0e:95:bd:22:
da:4a:92:89:b6:9a:5c:1e:81:cc:79:97:85:20:a3:db:32:d1:
1a:7c:42:e0:69:ac:30:95:29:dc:47:33:4f:b5:8b:0a:cc:53:
26:26:d5:72:f4:64:64:f7:48:de:4b:fa:3d:68:33:f0:0d:88:
8a:cc:8e:86:2f:52:57:a3:aa:e4:48:65:64:47:6e:9b:6c:45:
a4:8a:d1:90:10:69:e5:67:8b:de:9e:fa:53:54:b3:d5:13:d2:
59:ee:00:af:fb:46:65:97:49:e9:ce:49:16:52:81:e0:20:5d:
ae:2c:1a:93:b8:94:7b:2e:66:d7:0b:34:fc:d8:e0:9a:8d:99:
76:75:0a:7d:2e:bc:b0:24:b4:fc:ab:4e:3a:ef:92:80:6e:b0:
3f:b4:ae:08:1a:96:42:d4:3b:02:48:7e:2e:dc:f3:5d:63:48:
aa:c5:4a:b6:60:49:cc:9c:6b:99:c7:15:60:bd:74:86:75:dd:
c4:9b:4b:37:12:9f:f3:7b:29:1e:5a:8b:85:43:eb:99:7a:6e:
61:49:e5:56:6e:62:71:c5:c0:d3:ab:97:a4:ec:c7:b2:66:c3:
b5:ca:cb:e9:5b:7d:5f:e2:d8:94:9c:2f:83:ef:0b:8f:4f:82:
32:cd:da:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBic/vjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGYyOTMyMTJkMjVkNDg2M2UzODZiOWM0ODBkZGM5YmU3MzgxMjRmMB4XDTIyMDEw
MTE1MDYzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM0NGM1ZDc2ZGZk
MTM2ZTc1ODJlN2ViMzcyZmIxZDYwZWM4MmFlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1lVCKGXAKjoBrCiNIH2JRd85zo9Ms5irFeACB6vqi6qktA
CjBVXoESFY8EH9t1/pUmbtis4y1OEtcyo1dpj33hg3Zjo3qP5f1fUMzSErIb0Hg9
4/IiOzHp4bTMvnmRF0gNWzfrFFWCSxGt/ZXmhvyEeKTff4Ij3HHQv1G6xPMGCjn8
rW7EpmrKEEr7C4BfK4OagZ8s83mXdNTGfYj2INxsdiT0WThVG8K267/XMv0yQPcI
uHpeas5NNwT6gCquEjgjqfWMsI3ChsjagtAtoxzd2U15oIbZpMzjCd3F7DHnc8IZ
ngfCy2y2Bco9jcXik/Z0QMz/ypwvWybWW/BjbK8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTTRMXXbf0TbnWC5+s3L7HWDsgq7jAfBgNVHSMEGDAWgBRt8pMhLSXUhj44
a5xIDdyb5zgSTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JmS1RJUzBsMUlZLU9HdWNTQTNjbS1jNEVrOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvYWVjYjhhLWQ3NjMtNDY0Mi04MDM2LWY0MDA0MDJiNTM2Yy8x
LzAwVEYxMjM5RTI1MWd1ZnJOeS14MWc3SUt1NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
YWVjYjhhLWQ3NjMtNDY0Mi04MDM2LWY0MDA0MDJiNTM2Yy8xL2JmS1RJUzBsMUlZ
LU9HdWNTQTNjbS1jNEVrOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBReTANBgkqhkiG9w0BAQsFAAOC
AQEAaEEA8nL86ClYdEmb0dUOlb0i2kqSibaaXB6BzHmXhSCj2zLRGnxC4GmsMJUp
3EczT7WLCsxTJibVcvRkZPdI3kv6PWgz8A2IisyOhi9SV6Oq5EhlZEdum2xFpIrR
kBBp5WeL3p76U1Sz1RPSWe4Ar/tGZZdJ6c5JFlKB4CBdriwak7iUey5m1ws0/Njg
mo2ZdnUKfS68sCS0/KtOOu+SgG6wP7SuCBqWQtQ7Akh+LtzzXWNIqsVKtmBJzJxr
mccVYL10hnXdxJtLNxKf83spHlqLhUPrmXpuYUnlVm5iccXA06uXpOzHsmbDtcrL
6Vt9X+LYlJwvg+8Lj0+CMs3aaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org