Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/mT-y90tC2SfQh6wWwK0yGIhiRwk.roa
File: mT-y90tC2SfQh6wWwK0yGIhiRwk.roa (raw, json)
Hash identifier: TcKhvWMIpszpOAUV1v4SCM/iHvRf5PbnkuHQCwXhs+Y=
Subject key identifier: 99:3F:B2:F7:4B:42:D9:27:D0:87:AC:16:C0:AD:32:18:88:62:47:09
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0181FBF55BAB58BD11F9C9178A137ACC8377
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/mT-y90tC2SfQh6wWwK0yGIhiRwk.roa
Signing time: Thu 14 Jul 2022 09:06:09 +0000
ROA not before: Thu 14 Jul 2022 09:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212715
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:f5:5b:ab:58:bd:11:f9:c9:17:8a:13:7a:cc:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jul 14 09:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=993fb2f74b42d927d087ac16c0ad321888624709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:c9:e7:4b:2f:2a:6f:47:e9:51:83:6a:5c:
26:71:06:45:cd:2b:9e:de:f8:a4:86:8c:ab:ec:0b:
c5:f0:86:51:3e:03:bd:f6:0f:f7:75:52:b1:73:48:
c5:99:68:71:74:26:43:c0:20:e9:aa:18:c1:11:be:
e8:c5:5e:61:f5:dc:e4:c8:13:23:52:47:90:80:9a:
c1:a1:32:2d:c8:ab:af:8e:8d:f7:cc:fa:ef:81:3b:
1a:30:00:87:5d:12:58:55:f2:fd:45:84:85:69:41:
0f:e3:9a:e2:73:85:2d:3d:bb:73:00:3b:9c:f2:47:
84:eb:27:9d:d8:11:23:73:9c:26:ea:e1:ff:74:94:
0b:29:56:dd:eb:d7:03:df:23:84:9e:8b:c1:06:1e:
8b:2a:f4:d7:75:e6:a0:fc:b3:47:4f:1e:bb:46:1b:
cd:67:58:d9:6e:b4:b5:31:72:b2:f3:4d:3a:01:a5:
18:9e:44:7b:e7:60:bd:b2:ad:a0:72:46:23:08:27:
85:ec:ee:e5:e3:2b:c5:68:1f:d7:6f:46:52:d7:16:
07:34:28:6a:55:2a:fb:45:d9:cd:e3:d0:31:31:ef:
d0:cb:87:16:f9:42:3f:20:63:09:71:be:be:96:66:
2a:0b:d9:aa:ef:c2:b1:27:c7:59:ac:9f:c4:db:f7:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:B2:F7:4B:42:D9:27:D0:87:AC:16:C0:AD:32:18:88:62:47:09
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/mT-y90tC2SfQh6wWwK0yGIhiRwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:32:2b:3f:19:45:fc:c3:ef:75:8e:a6:0b:3f:68:c9:20:86:
5b:e3:7d:8f:c7:2b:70:05:26:03:1b:4f:ab:ce:cd:45:22:ce:
bd:02:5f:db:2d:49:81:38:c7:7a:05:5c:fc:f2:bf:9c:d4:50:
d6:1e:84:e5:32:e8:32:22:a8:f4:22:56:5d:87:89:ce:24:0c:
cf:3d:5b:8e:2b:8f:3c:26:28:24:fd:ab:05:7c:55:c5:d8:aa:
d7:3d:5f:73:23:5d:fe:95:a1:c3:ce:cc:d5:94:ad:7b:73:fa:
a9:8d:e4:39:07:21:cf:7e:6b:8a:e0:db:14:a7:fc:72:a6:f3:
b9:52:1b:bb:35:cb:9f:97:4b:49:3c:fa:72:dc:c9:de:49:e0:
cf:31:b6:0e:7c:e8:d4:7f:7b:4a:cd:aa:ca:5a:cf:0c:51:fd:
54:74:48:28:a7:64:44:26:6f:fe:c3:11:0b:b2:80:ad:e0:f5:
01:bd:86:78:45:3c:15:53:b0:38:c0:84:9d:9a:b5:3e:e4:da:
5e:13:53:9e:89:dd:ba:c7:ea:96:f3:a1:7b:ff:fa:4a:a0:33:
83:46:88:1a:b0:11:6d:13:6c:66:9e:7e:c5:e2:fd:34:dd:67:
7a:ab:a8:01:32:95:7e:a3:ae:e1:67:f8:d4:8d:c5:33:da:82:
d2:32:1a:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH79VurWL0R+ckXihN6zIN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjIwNzE0MDkwNjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTNmYjJmNzRiNDJkOTI3ZDA4N2FjMTZjMGFkMzIxODg4NjI0NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiHJ50svKm9H6VGDalwmcQZFzSue
3vikhoyr7AvF8IZRPgO99g/3dVKxc0jFmWhxdCZDwCDpqhjBEb7oxV5h9dzkyBMj
UkeQgJrBoTItyKuvjo33zPrvgTsaMACHXRJYVfL9RYSFaUEP45ric4UtPbtzADuc
8keE6yed2BEjc5wm6uH/dJQLKVbd69cD3yOEnovBBh6LKvTXdeag/LNHTx67RhvN
Z1jZbrS1MXKy8006AaUYnkR752C9sq2gckYjCCeF7O7l4yvFaB/Xb0ZS1xYHNChq
VSr7RdnN49AxMe/Qy4cW+UI/IGMJcb6+lmYqC9mq78KxJ8dZrJ/E2/cIDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJk/svdLQtkn0IesFsCtMhiIYkcJMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEvbVQteTkwdEMyU2ZRaDZ3V3dLMHlHSWhpUndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6EDMA0G
CSqGSIb3DQEBCwUAA4IBAQDJMis/GUX8w+91jqYLP2jJIIZb432PxytwBSYDG0+r
zs1FIs69Al/bLUmBOMd6BVz88r+c1FDWHoTlMugyIqj0IlZdh4nOJAzPPVuOK488
Jigk/asFfFXF2KrXPV9zI13+laHDzszVlK17c/qpjeQ5ByHPfmuK4NsUp/xypvO5
Uhu7Ncufl0tJPPpy3MneSeDPMbYOfOjUf3tKzarKWs8MUf1UdEgop2REJm/+wxEL
soCt4PUBvYZ4RTwVU7A4wISdmrU+5NpeE1Oeid26x+qW86F7//pKoDODRogasBFt
E2xmnn7F4v003Wd6q6gBMpV+o67hZ/jUjcUz2oLSMhpU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org