Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tjYoBLreRnFKz1p21pHdDVTJ5I4.roa
File: tjYoBLreRnFKz1p21pHdDVTJ5I4.roa (raw, json)
Hash identifier: ynS59jdr3mpvImkxu6hZSpVlnmzDaRuCZ2JLZiav5EM=
Subject key identifier: B6:36:28:04:BA:DE:46:71:4A:CF:5A:76:D6:91:DD:0D:54:C9:E4:8E
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0182817E788B5907B48071B615D15B0044AE
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tjYoBLreRnFKz1p21pHdDVTJ5I4.roa
Signing time: Tue 09 Aug 2022 07:25:25 +0000
ROA not before: Tue 09 Aug 2022 07:25:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 92.53.184.0/22 maxlen: 22
92.53.188.0/22 maxlen: 24
92.53.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:7e:78:8b:59:07:b4:80:71:b6:15:d1:5b:00:44:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Aug 9 07:25:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6362804bade46714acf5a76d691dd0d54c9e48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:e2:e4:a4:fe:bc:d6:98:c0:92:43:35:78:
59:10:d2:31:0e:1c:96:fa:f8:53:e4:93:ae:a3:54:
18:ac:1e:89:26:59:eb:fd:49:b4:a4:e7:14:3b:fe:
69:d1:69:43:9a:a2:7e:78:f2:d6:5b:70:27:bd:a8:
f8:9d:fa:9f:4b:f7:d7:33:e7:0d:f5:b2:0d:6c:94:
ac:f4:2a:8a:9f:9e:1e:4c:39:19:6b:8e:2f:cd:6b:
b0:68:75:b3:e0:b6:3e:13:16:94:40:9e:ec:87:87:
64:5b:0d:21:7d:f6:8e:14:7c:ca:23:a4:a1:fa:03:
bf:72:77:70:e9:dc:19:93:ba:52:94:63:26:b1:85:
ef:9b:ad:f1:49:ed:06:ec:ae:88:7f:d7:6a:37:81:
03:25:37:df:81:43:d7:13:9e:69:c4:4d:5a:72:0e:
36:6a:d7:59:ec:f7:7a:e8:eb:43:2a:dc:41:60:23:
1d:72:c1:69:c9:cd:51:da:18:13:c0:c8:cf:74:33:
fd:31:a3:49:ba:74:5a:d4:8f:2d:6b:66:3c:87:55:
4c:d9:20:2a:13:50:24:66:a2:ab:3c:a6:07:84:ee:
da:42:ab:ae:21:0a:e7:3e:50:53:b0:c4:d0:a9:67:
21:70:b7:c1:3d:63:00:c1:08:a9:79:2b:63:96:85:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:28:04:BA:DE:46:71:4A:CF:5A:76:D6:91:DD:0D:54:C9:E4:8E
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tjYoBLreRnFKz1p21pHdDVTJ5I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.168.0/22
92.53.184.0/21
Signature Algorithm: sha256WithRSAEncryption
22:63:c5:79:44:fb:2f:e6:8a:27:ce:c3:14:e8:2f:52:8f:8f:
6f:8e:c5:90:7e:1a:fc:9a:c0:9a:62:35:12:2a:7d:c7:9a:96:
b5:c7:10:62:cf:b6:49:40:db:15:a6:c4:e2:fc:09:cf:85:e2:
94:20:d2:41:54:63:46:5b:11:4c:ab:e7:29:68:f6:cd:2d:58:
af:29:0b:11:97:a8:32:d9:b8:ac:31:45:a3:64:30:55:27:06:
28:50:69:78:5b:dc:a3:0e:37:ea:e6:40:66:fe:91:13:7e:7d:
71:ba:c9:94:02:a8:99:55:41:b2:ae:20:e6:17:b0:b3:9b:56:
32:f9:94:f0:1d:e9:c7:60:73:e9:37:ad:02:29:56:fa:bd:16:
cd:6e:da:9d:09:9d:32:18:21:e6:a4:29:c7:4c:aa:93:de:44:
8b:4f:0d:5f:c8:e9:63:7d:0c:90:94:1e:46:68:96:21:98:e8:
8d:3b:f9:64:64:e4:71:ff:fe:72:8f:af:ca:bf:d5:b6:87:94:
6c:f4:14:55:2b:6f:70:3c:82:8b:26:7b:2e:27:d4:eb:fe:3f:
99:f1:6d:ce:db:1d:1f:6f:83:fa:c1:86:8e:0e:1f:2e:0f:d4:
fa:68:3e:f1:9c:ec:0e:42:39:81:b8:bc:13:ac:2c:c3:9b:24:
b3:fc:86:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKBfniLWQe0gHG2FdFbAESuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjIwODA5MDcyNTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjM2MjgwNGJhZGU0NjcxNGFjZjVhNzZkNjkxZGQwZDU0YzllNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lTi5KT+vNaYwJJDNXhZENIxDhyW
+vhT5JOuo1QYrB6JJlnr/Um0pOcUO/5p0WlDmqJ+ePLWW3Anvaj4nfqfS/fXM+cN
9bINbJSs9CqKn54eTDkZa44vzWuwaHWz4LY+ExaUQJ7sh4dkWw0hffaOFHzKI6Sh
+gO/cndw6dwZk7pSlGMmsYXvm63xSe0G7K6If9dqN4EDJTffgUPXE55pxE1acg42
atdZ7Pd66OtDKtxBYCMdcsFpyc1R2hgTwMjPdDP9MaNJunRa1I8ta2Y8h1VM2SAq
E1AkZqKrPKYHhO7aQquuIQrnPlBTsMTQqWchcLfBPWMAwQipeStjloUMAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLY2KAS63kZxSs9adtaR3Q1UyeSOMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvdGpZb0JMcmVSbkZLejFwMjFwSGREVlRKNUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXDWoAwQD
XDW4MA0GCSqGSIb3DQEBCwUAA4IBAQAiY8V5RPsv5oonzsMU6C9Sj49vjsWQfhr8
msCaYjUSKn3Hmpa1xxBiz7ZJQNsVpsTi/AnPheKUINJBVGNGWxFMq+cpaPbNLViv
KQsRl6gy2bisMUWjZDBVJwYoUGl4W9yjDjfq5kBm/pETfn1xusmUAqiZVUGyriDm
F7Czm1Yy+ZTwHenHYHPpN60CKVb6vRbNbtqdCZ0yGCHmpCnHTKqT3kSLTw1fyOlj
fQyQlB5GaJYhmOiNO/lkZORx//5yj6/Kv9W2h5Rs9BRVK29wPIKLJnsuJ9Tr/j+Z
8W3O2x0fb4P6wYaODh8uD9T6aD7xnOwOQjmBuLwTrCzDmySz/IYm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org