Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/TcWOctMGf-GD9XTg_lNLqfBJ_Zc.roa
File: TcWOctMGf-GD9XTg_lNLqfBJ_Zc.roa (raw, json)
Hash identifier: +6w51z4PFj6WOg0WZq52QEj5KRm39Dh+uFFmiGU9bsA=
Subject key identifier: 4D:C5:8E:72:D3:06:7F:E1:83:F5:74:E0:FE:53:4B:A9:F0:49:FD:97
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 0ACFF9B6
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/TcWOctMGf-GD9XTg_lNLqfBJ_Zc.roa
Signing time: Sat 01 Jan 2022 13:06:58 +0000
ROA not before: Sat 01 Jan 2022 13:06:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200324
IP address blocks: 194.41.49.0/24 maxlen: 24
194.41.50.0/24 maxlen: 24
194.41.48.0/24 maxlen: 24
194.41.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181402038 (0xacff9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jan 1 13:06:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dc58e72d3067fe183f574e0fe534ba9f049fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:98:c8:d0:91:2b:08:e6:10:23:99:fd:2f:
05:02:fe:c7:f9:13:f5:3b:ad:36:63:19:f3:27:c2:
61:d3:7a:6d:91:6e:69:57:17:2f:4e:40:7e:c2:86:
ca:9e:52:3f:f6:d3:c2:75:66:94:e6:02:e1:59:ff:
55:0f:1e:47:49:c8:98:7e:55:c9:6d:48:e5:a3:30:
e3:d4:5a:66:2d:89:e1:2a:80:43:2e:60:d3:50:ad:
0a:74:08:84:0f:af:fc:3e:3a:d6:70:5d:b2:90:2e:
b4:7f:25:9c:9d:51:e2:d5:2c:9b:f5:5c:ef:3c:16:
3c:6d:82:94:a3:23:6c:91:32:74:f4:08:75:b0:2e:
7b:b0:c7:2d:77:b8:95:10:d8:a7:85:f1:4e:d4:c8:
08:d3:87:43:dd:8c:30:0b:0e:63:71:c8:21:db:f9:
d8:09:68:e0:93:d2:39:d5:8b:43:6d:68:d0:bb:d9:
e7:dc:f4:27:02:13:7c:18:0e:e5:31:a8:79:d7:26:
b3:6c:d6:ef:ee:b4:c5:b4:c8:77:1d:67:75:f8:16:
fb:2f:d4:e6:af:f5:6b:c5:f7:f6:aa:c0:04:60:57:
f8:61:a6:b5:58:dc:72:7e:8c:77:68:3c:81:5e:6c:
c4:c8:e1:0a:eb:29:55:08:ef:4f:de:e6:8d:41:d0:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:8E:72:D3:06:7F:E1:83:F5:74:E0:FE:53:4B:A9:F0:49:FD:97
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/TcWOctMGf-GD9XTg_lNLqfBJ_Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:09:8b:7d:e9:7a:0e:f5:74:7e:b1:d5:2b:75:a5:6d:83:8a:
4e:51:23:59:ab:18:4d:4c:01:5f:a2:74:32:30:fe:44:d5:00:
90:e5:c3:8b:81:98:07:11:82:6a:d6:5b:99:04:eb:64:81:bf:
70:48:aa:c7:fd:db:76:88:e7:e0:05:db:b7:6b:ad:df:b2:fc:
de:f9:77:dc:bb:f6:3e:f6:08:7e:cf:f1:b2:b8:8c:cf:4e:c6:
80:25:4e:b1:c6:e1:94:02:21:b8:4d:37:6e:c8:8f:ac:6b:ba:
26:16:b7:33:b7:92:eb:eb:64:7a:14:fb:a0:bf:7f:50:93:3d:
cb:b8:b4:9c:dc:03:7d:17:50:0b:80:b7:04:ae:f9:cb:47:d0:
d4:dd:45:93:74:29:5e:95:ae:45:3e:44:29:58:31:4a:15:38:
55:0f:37:a9:eb:57:9a:61:08:56:39:ee:70:f8:91:36:e5:29:
61:ab:fe:dc:0b:2f:c9:03:f0:6f:94:50:e9:be:a2:b2:a6:63:
cb:20:6b:db:22:56:35:40:4f:b0:88:a0:4e:35:78:14:9c:60:
6d:68:e4:e8:f6:1f:ea:73:02:78:ad:7d:80:6f:3b:27:4a:0e:
3f:8a:36:39:7f:c5:2b:19:99:30:54:37:bd:a6:71:09:82:94:
f3:fe:96:55
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECs/5tjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MDg5ZGI3MjUwZmQ4NDc2Yzg5OGFlZTBhNWZiZjJhOTg4MzQwMWZlMB4XDTIyMDEw
MTEzMDY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGRjNThlNzJkMzA2
N2ZlMTgzZjU3NGUwZmU1MzRiYTlmMDQ5ZmQ5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlRmMjQkSsI5hAjmf0vBQL+x/kT9TutNmMZ8yfCYdN6bZFu
aVcXL05AfsKGyp5SP/bTwnVmlOYC4Vn/VQ8eR0nImH5VyW1I5aMw49RaZi2J4SqA
Qy5g01CtCnQIhA+v/D461nBdspAutH8lnJ1R4tUsm/Vc7zwWPG2ClKMjbJEydPQI
dbAue7DHLXe4lRDYp4XxTtTICNOHQ92MMAsOY3HIIdv52Alo4JPSOdWLQ21o0LvZ
59z0JwITfBgO5TGoedcms2zW7+60xbTIdx1ndfgW+y/U5q/1a8X39qrABGBX+GGm
tVjccn6Md2g8gV5sxMjhCuspVQjvT97mjUHQCAcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRNxY5y0wZ/4YP1dOD+U0up8En9lzAfBgNVHSMEGDAWgBSgidtyUP2EdsiY
ruCl+/KpiDQB/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29JbmJjbEQ5aEhiSW1LN2dwZnZ5cVlnMEFmNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvMmE4ODMyLWNkZDYtNGQ4Yy05M2YzLWQ4MjVkMDM2NTc4OS8x
L1RjV09jdE1HZi1HRDlYVGdfbE5McWZCSl9aYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
MmE4ODMyLWNkZDYtNGQ4Yy05M2YzLWQ4MjVkMDM2NTc4OS8xL29JbmJjbEQ5aEhi
SW1LN2dwZnZ5cVlnMEFmNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsIpMDANBgkqhkiG9w0BAQsFAAOC
AQEAqAmLfel6DvV0frHVK3WlbYOKTlEjWasYTUwBX6J0MjD+RNUAkOXDi4GYBxGC
atZbmQTrZIG/cEiqx/3bdojn4AXbt2ut37L83vl33Lv2PvYIfs/xsriMz07GgCVO
scbhlAIhuE03bsiPrGu6Jha3M7eS6+tkehT7oL9/UJM9y7i0nNwDfRdQC4C3BK75
y0fQ1N1Fk3QpXpWuRT5EKVgxShU4VQ83qetXmmEIVjnucPiRNuUpYav+3AsvyQPw
b5RQ6b6isqZjyyBr2yJWNUBPsIigTjV4FJxgbWjk6PYf6nMCeK19gG87J0oOP4o2
OX/FKxmZMFQ3vaZxCYKU8/6WVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-fra.rpki-client.org