Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1aTY21RhuX3gERR1PVy_ByJgZ2k.roa
File: 1aTY21RhuX3gERR1PVy_ByJgZ2k.roa (raw, json)
Hash identifier: IUXXjntM/UufE+BQ474CcDjS/dHHIsPUYFe0Bi3RC34=
Subject key identifier: D5:A4:D8:DB:54:61:B9:7D:E0:11:14:75:3D:5C:BF:07:22:60:67:69
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 1909FA62
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1aTY21RhuX3gERR1PVy_ByJgZ2k.roa
Signing time: Wed 01 Jun 2022 13:47:22 +0000
ROA not before: Wed 01 Jun 2022 13:47:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202010
IP address blocks: 5.1.74.0/24 maxlen: 32
5.1.81.139/32 maxlen: 32
5.1.81.0/24 maxlen: 32
178.251.228.0/24 maxlen: 32
5.1.81.140/32 maxlen: 32
2a01:367:dead::/48 maxlen: 48
2a01:367:beef::/48 maxlen: 48
2a01:367:ffa1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420084322 (0x1909fa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jun 1 13:47:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5a4d8db5461b97de01114753d5cbf0722606769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:bf:da:68:04:e4:f7:76:c5:e3:67:0b:32:
19:63:aa:40:7c:fd:85:89:39:23:59:0e:82:5a:35:
2a:88:56:2e:b4:96:f9:98:8f:c1:6e:3d:2a:04:a0:
96:66:2e:c5:a1:ef:1a:53:4b:b9:c5:41:c0:25:bb:
b5:0b:eb:0f:09:6f:9b:11:9e:5d:2a:a4:9f:ba:20:
83:ce:07:cc:67:0c:f8:f9:76:14:dc:b3:9e:e7:d7:
4c:92:fc:d2:2d:1b:b3:03:55:9a:f0:03:ef:58:d4:
9f:47:f0:a0:d9:b5:f1:8c:17:c6:f4:e9:ca:a4:4d:
59:b3:61:7f:77:67:60:23:91:66:7a:41:a9:3a:a9:
9f:db:62:da:39:33:fe:e8:57:87:5a:cc:e4:c5:a5:
95:06:94:2c:b9:95:8d:7c:cd:30:2a:57:ed:ea:80:
c7:92:ec:4e:7c:8c:80:9a:aa:04:05:75:c9:a3:ee:
d2:a9:13:b4:68:37:82:8f:ad:7a:54:d3:49:dc:63:
1c:51:16:89:93:c4:6f:f1:32:41:ce:35:36:50:6f:
f9:4f:a9:be:c6:91:e0:65:fe:47:b1:fa:97:58:8c:
e7:b6:7d:49:ac:9b:ab:81:4b:da:2d:4e:5f:6c:e3:
a5:87:64:61:9c:4c:57:18:17:9a:3c:20:bb:14:fa:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:D8:DB:54:61:B9:7D:E0:11:14:75:3D:5C:BF:07:22:60:67:69
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1aTY21RhuX3gERR1PVy_ByJgZ2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
5.1.81.0/24
178.251.228.0/24
IPv6:
2a01:367:beef::/48
2a01:367:dead::/48
2a01:367:ffa1::/48
Signature Algorithm: sha256WithRSAEncryption
17:f9:b8:b1:02:ea:54:ba:88:c3:31:f2:e8:c9:93:ef:6d:39:
68:a8:55:2f:82:ec:6e:f4:c4:66:bf:64:34:0a:8c:a0:de:73:
d3:40:e6:f3:37:ec:3f:54:39:49:75:21:9f:13:bc:f9:ed:94:
ec:63:83:a8:5a:73:63:31:46:98:e6:63:b6:ca:82:e3:f1:af:
84:73:34:66:2a:dd:93:bb:df:87:61:0f:85:14:f1:42:37:73:
8c:0b:59:4d:14:30:2b:6c:41:2e:5d:dc:61:b3:a4:86:d8:90:
ad:e5:c5:89:d7:00:9e:30:95:43:c5:a4:e1:ec:70:17:4c:b6:
a1:fc:74:c9:10:65:9d:f9:ab:63:36:da:a2:20:d5:8c:b6:56:
85:d8:5a:b3:c3:c5:9a:a6:43:33:46:dc:10:70:30:d6:ba:a2:
1d:10:dc:a6:69:3a:d0:b8:91:fc:5a:a6:62:04:12:0b:08:30:
f9:8b:0f:e6:15:90:b4:12:cf:de:36:58:57:52:63:f3:cf:65:
0a:56:1a:e1:83:8e:62:4f:69:53:f9:86:0b:e4:62:f1:e8:18:
bc:ec:10:95:44:be:62:32:8c:69:14:ea:07:3b:39:f2:8d:0f:
f0:e4:52:2d:f8:20:f9:43:02:9b:5d:86:7b:4d:53:46:0e:76:
5b:f4:80:6d
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIEGQn6YjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NDI1M2M0ZjIzM2NlOTg0NzY5OWFlNjhlY2JmNWQ3NTE0YjBmYWRiMB4XDTIyMDYw
MTEzNDcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVhNGQ4ZGI1NDYx
Yjk3ZGUwMTExNDc1M2Q1Y2JmMDcyMjYwNjc2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALAwv9poBOT3dsXjZwsyGWOqQHz9hYk5I1kOglo1KohWLrSW
+ZiPwW49KgSglmYuxaHvGlNLucVBwCW7tQvrDwlvmxGeXSqkn7ogg84HzGcM+Pl2
FNyznufXTJL80i0bswNVmvAD71jUn0fwoNm18YwXxvTpyqRNWbNhf3dnYCORZnpB
qTqpn9ti2jkz/uhXh1rM5MWllQaULLmVjXzNMCpX7eqAx5LsTnyMgJqqBAV1yaPu
0qkTtGg3go+telTTSdxjHFEWiZPEb/EyQc41NlBv+U+pvsaR4GX+R7H6l1iM57Z9
Saybq4FL2i1OX2zjpYdkYZxMVxgXmjwguxT6Ss0CAwEAAaOCAjgwggI0MB0GA1Ud
DgQWBBTVpNjbVGG5feARFHU9XL8HImBnaTAfBgNVHSMEGDAWgBS0JTxPIzzphHaZ
rmjsv111FLD62zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RDVThUeU04NllSMm1hNW83TDlkZFJTdy10cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8x
LzFhVFkyMVJodVgzZ0VSUjFQVnlfQnlKZ1oyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDFkNmUxLTVjYWQtNDBkYi05NzczLTU4YjM4ZjVhYzgwYi8xL3RDVThUeU04NllS
Mm1hNW83TDlkZFJTdy10cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBO
BggrBgEFBQcBBwEB/wQ/MD0wGAQCAAEwEgMEAAUBSgMEAAUBUQMEALL75DAhBAIA
AjAbAwcAKgEDZ77vAwcAKgEDZ96tAwcAKgEDZ/+hMA0GCSqGSIb3DQEBCwUAA4IB
AQAX+bixAupUuojDMfLoyZPvbTloqFUvguxu9MRmv2Q0Coyg3nPTQObzN+w/VDlJ
dSGfE7z57ZTsY4OoWnNjMUaY5mO2yoLj8a+EczRmKt2Tu9+HYQ+FFPFCN3OMC1lN
FDArbEEuXdxhs6SG2JCt5cWJ1wCeMJVDxaTh7HAXTLah/HTJEGWd+atjNtqiINWM
tlaF2Fqzw8WapkMzRtwQcDDWuqIdENymaTrQuJH8WqZiBBILCDD5iw/mFZC0Es/e
NlhXUmPzz2UKVhrhg45iT2lT+YYL5GLx6Bi87BCVRL5iMoxpFOoHOznyjQ/w5FIt
+CD5QwKbXYZ7TVNGDnZb9IBt
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org