Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/tSC5OTFzzX5yQuOVT0rzTkSlpEA.roa
File: tSC5OTFzzX5yQuOVT0rzTkSlpEA.roa (raw, json)
Hash identifier: xsvCQzl6OlK7buv31a8bXhTs0Ea+m2VGe6U+YLfYw8I=
Subject key identifier: B5:20:B9:39:31:73:CD:7E:72:42:E3:95:4F:4A:F3:4E:44:A5:A4:40
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849A1F09F390FC9308C737311A8259BCF0
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/tSC5OTFzzX5yQuOVT0rzTkSlpEA.roa
Signing time: Mon 21 Nov 2022 12:17:16 +0000
ROA not before: Mon 21 Nov 2022 12:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42739
IP address blocks: 37.139.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:1f:09:f3:90:fc:93:08:c7:37:31:1a:82:59:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 21 12:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b520b9393173cd7e7242e3954f4af34e44a5a440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:f9:40:bc:78:ea:3f:c5:95:36:04:ff:57:
15:67:99:b7:c3:98:cf:6c:5e:b2:87:dd:00:31:06:
72:66:ef:91:74:25:c2:28:cf:9c:e2:c3:f7:af:bb:
9a:b7:e1:2a:7e:db:67:d9:c0:55:45:75:b3:8d:9d:
52:ed:50:03:33:47:d3:a6:2e:bb:81:91:80:c5:1c:
ec:c4:77:87:dd:68:7c:4f:6b:5a:96:df:d6:6d:71:
6b:24:67:0c:54:db:3d:20:14:1e:ea:b3:17:93:1e:
fb:e2:c8:9e:04:1d:02:4f:13:64:99:9a:b7:8c:d4:
78:ed:b9:24:ad:fc:8a:14:a6:d3:6d:33:23:b7:b8:
c9:37:5e:98:68:7e:b6:a2:04:79:1d:e7:2e:ff:f4:
fc:e0:c0:42:61:89:9c:be:bc:42:c3:cc:f1:2c:7e:
78:85:40:bc:65:b9:76:ff:cb:0b:a1:d1:d3:0d:15:
ea:8e:31:ec:83:61:3a:f5:24:b9:2d:b0:b3:e2:43:
95:d2:b5:a3:d8:c0:2d:bb:8a:6d:4d:ce:40:9a:99:
2a:ee:c6:c1:9e:8a:66:b1:89:55:5b:30:7e:49:26:
4d:2b:c4:45:dc:dc:7c:1c:a2:d4:25:09:62:95:aa:
10:8a:18:c4:86:53:dd:5c:01:66:83:d6:c1:ce:71:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:B9:39:31:73:CD:7E:72:42:E3:95:4F:4A:F3:4E:44:A5:A4:40
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/tSC5OTFzzX5yQuOVT0rzTkSlpEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.144.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c5:bb:65:f7:b6:47:58:85:5d:f0:cc:c5:de:96:bf:7b:f0:
c8:44:86:1c:ad:e5:b2:67:2c:19:af:65:8d:b7:a5:81:84:b8:
8e:5c:43:9b:f9:f1:19:15:55:4e:8f:d0:27:db:0c:44:d9:b2:
c4:9a:ae:8f:9c:da:79:ad:04:e7:0c:b2:61:5b:22:3c:db:19:
55:79:36:4a:d0:48:8d:72:7e:ad:41:ba:84:5e:d0:a5:43:a8:
8d:43:8d:ae:a7:ce:a2:ca:04:27:a0:71:7e:05:fd:2f:41:bf:
d2:f8:b1:2c:05:4e:0d:5e:0f:48:8e:ee:fd:1a:eb:70:ea:8c:
24:0f:d5:bf:ad:68:04:9f:4b:13:2f:c7:82:55:c4:bf:51:0b:
38:ef:71:8e:cd:59:e3:98:84:cf:2c:5a:8d:bb:ee:49:59:98:
38:d0:2a:ff:c7:37:e9:a0:55:8a:b1:ba:e4:4b:7c:52:8f:f8:
eb:51:a6:52:00:af:b4:84:61:eb:dd:fd:9b:02:20:9b:66:6d:
36:97:33:c9:34:c7:4e:28:6f:db:78:43:3e:27:d5:ac:81:8c:
af:e4:31:82:cb:e4:3b:aa:f8:d0:73:2a:58:b0:bf:31:3c:f8:
da:d4:11:c5:57:57:32:cc:60:07:93:e1:89:37:1e:86:a2:00:
56:48:1d:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSaHwnzkPyTCMc3MRqCWbzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjIxMTIxMTIxNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTIwYjkzOTMxNzNjZDdlNzI0MmUzOTU0ZjRhZjM0ZTQ0YTVhNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqH5QLx46j/FlTYE/1cVZ5m3w5jP
bF6yh90AMQZyZu+RdCXCKM+c4sP3r7uat+Eqfttn2cBVRXWzjZ1S7VADM0fTpi67
gZGAxRzsxHeH3Wh8T2talt/WbXFrJGcMVNs9IBQe6rMXkx774sieBB0CTxNkmZq3
jNR47bkkrfyKFKbTbTMjt7jJN16YaH62ogR5Hecu//T84MBCYYmcvrxCw8zxLH54
hUC8Zbl2/8sLodHTDRXqjjHsg2E69SS5LbCz4kOV0rWj2MAtu4ptTc5Ampkq7sbB
nopmsYlVWzB+SSZNK8RF3Nx8HKLUJQlilaoQihjEhlPdXAFmg9bBznEDowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUguTkxc81+ckLjlU9K805EpaRAMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvdFNDNU9URnp6WDV5UXVPVlQwcnpUa1NscEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYuQMA0G
CSqGSIb3DQEBCwUAA4IBAQBYxbtl97ZHWIVd8MzF3pa/e/DIRIYcreWyZywZr2WN
t6WBhLiOXEOb+fEZFVVOj9An2wxE2bLEmq6PnNp5rQTnDLJhWyI82xlVeTZK0EiN
cn6tQbqEXtClQ6iNQ42up86iygQnoHF+Bf0vQb/S+LEsBU4NXg9Iju79Gutw6owk
D9W/rWgEn0sTL8eCVcS/UQs473GOzVnjmITPLFqNu+5JWZg40Cr/xzfpoFWKsbrk
S3xSj/jrUaZSAK+0hGHr3f2bAiCbZm02lzPJNMdOKG/beEM+J9WsgYyv5DGCy+Q7
qvjQcypYsL8xPPja1BHFV1cyzGAHk+GJNx6GogBWSB2E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org