Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/TjuKCbrQ6h-nmlk_sYRTmjUI6ro.roa
File: TjuKCbrQ6h-nmlk_sYRTmjUI6ro.roa (raw, json)
Hash identifier: pobzfQNTVTGcx0LJSoZT9+qWQ/e2lPiw0fDRKnEjRcw=
Subject key identifier: 4E:3B:8A:09:BA:D0:EA:1F:A7:9A:59:3F:B1:84:53:9A:35:08:EA:BA
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0121F68B
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/TjuKCbrQ6h-nmlk_sYRTmjUI6ro.roa
Signing time: Sat 01 Jan 2022 11:59:20 +0000
ROA not before: Sat 01 Jan 2022 11:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210201
IP address blocks: 194.34.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19003019 (0x121f68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Jan 1 11:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e3b8a09bad0ea1fa79a593fb184539a3508eaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:b3:ac:34:d9:26:3a:cf:39:f0:c4:4b:1e:
24:77:94:ed:53:f3:ed:33:32:f7:f8:e1:2f:14:df:
a2:1c:97:a7:10:9d:0b:d8:10:a6:5a:4a:ab:cb:86:
51:67:fb:3c:03:19:d0:6b:e2:95:36:d8:fb:7f:07:
c8:cd:44:9a:48:19:39:52:3a:a1:d6:c5:0d:5c:f2:
b8:eb:d3:04:eb:e3:65:fc:ea:76:58:50:43:6d:dc:
13:c2:d1:86:d5:8e:f0:ab:72:ac:1e:22:23:a5:bb:
b8:5f:81:8d:60:cf:23:60:73:d9:c8:84:7e:4b:1a:
5b:66:e8:6d:8e:49:be:cd:dc:50:87:71:66:ee:f8:
e1:8a:d3:30:e2:76:9b:72:88:c0:ff:be:4a:f0:ce:
16:97:ef:61:67:89:5f:0d:13:66:56:68:58:4c:f3:
37:a0:6a:c2:a6:1f:4b:3c:25:cf:d4:0e:48:a0:0b:
27:af:93:31:ef:a8:2c:2e:b3:5a:c0:b1:89:f5:33:
5c:9d:a7:53:9c:74:7b:4e:39:77:c9:e5:5a:57:cb:
78:88:4a:ce:11:b9:e0:7a:ae:8e:d2:37:92:e9:87:
6c:2c:fb:c1:c8:0f:63:8b:b2:d6:ea:bf:4a:0a:98:
88:a7:3b:91:80:12:01:4d:88:a6:3a:f8:fc:7e:31:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:8A:09:BA:D0:EA:1F:A7:9A:59:3F:B1:84:53:9A:35:08:EA:BA
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/TjuKCbrQ6h-nmlk_sYRTmjUI6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.96.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:00:ca:03:ee:fc:9b:bf:a0:36:fe:7c:08:73:59:e8:cc:b2:
c0:18:f6:a4:7d:9d:ec:9a:62:b8:da:12:ea:8a:02:f8:9f:bd:
5c:54:c0:a4:94:ce:c3:4f:3a:31:b9:d5:95:94:dc:a1:18:09:
31:1a:5e:14:05:0f:8e:ff:03:08:82:a7:a5:57:ac:b7:9b:2c:
92:1c:33:71:99:d2:17:86:9d:9b:44:bf:f5:07:86:e6:5d:fc:
94:44:66:5f:c1:b6:1d:0a:47:c4:40:63:77:5f:06:55:dc:94:
b9:54:1c:81:1a:08:aa:f0:e9:37:38:4c:b6:53:49:a1:e6:47:
3b:a0:da:9d:19:bf:95:39:84:6b:0b:d6:7a:2b:40:cb:fa:de:
7c:0d:5b:0d:dd:fe:83:53:d1:62:dd:47:7d:f6:ae:ae:14:d3:
b2:33:39:19:97:f9:0e:19:8a:db:97:f4:65:d8:fe:82:7b:21:
48:19:59:b0:cc:02:1c:f0:6b:a8:f6:30:e9:70:c8:c9:22:79:
0b:63:a1:c6:d4:e5:9a:df:7c:76:49:52:08:f5:da:ac:8a:8b:
27:b6:f0:74:74:a2:60:9b:93:0f:29:0a:8d:69:0e:b9:a6:d1:
2a:c4:1d:74:12:1a:28:b8:d5:f6:2d:ef:55:75:c9:51:57:99:
9c:b6:ac:b6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASH2izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTQwY2Y3NzhkZDk4MTc2NTdjZDhkNGZlZWRkNDIzZDQ2ZDFhOTY1MB4XDTIyMDEw
MTExNTkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGUzYjhhMDliYWQw
ZWExZmE3OWE1OTNmYjE4NDUzOWEzNTA4ZWFiYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlzs6w02SY6zznwxEseJHeU7VPz7TMy9/jhLxTfohyXpxCd
C9gQplpKq8uGUWf7PAMZ0GvilTbY+38HyM1EmkgZOVI6odbFDVzyuOvTBOvjZfzq
dlhQQ23cE8LRhtWO8KtyrB4iI6W7uF+BjWDPI2Bz2ciEfksaW2bobY5Jvs3cUIdx
Zu744YrTMOJ2m3KIwP++SvDOFpfvYWeJXw0TZlZoWEzzN6BqwqYfSzwlz9QOSKAL
J6+TMe+oLC6zWsCxifUzXJ2nU5x0e045d8nlWlfLeIhKzhG54HqujtI3kumHbCz7
wcgPY4uy1uq/SgqYiKc7kYASAU2Ipjr4/H4x5XcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBROO4oJutDqH6eaWT+xhFOaNQjqujAfBgNVHSMEGDAWgBRJQM93jdmBdlfN
jU/u3UI9RtGpZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NVRFBkNDNaZ1haWHpZMVA3dDFDUFViUnFXVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvYjAyNWJjLWJjNzMtNGQzYy1hNDMwLTAwMzk0YjYxMGEzNC8x
L1RqdUtDYnJRNmgtbm1sa19zWVJUbWpVSTZyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
YjAyNWJjLWJjNzMtNGQzYy1hNDMwLTAwMzk0YjYxMGEzNC8xL1NVRFBkNDNaZ1ha
WHpZMVA3dDFDUFViUnFXVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcIiYDANBgkqhkiG9w0BAQsFAAOC
AQEAagDKA+78m7+gNv58CHNZ6MyywBj2pH2d7JpiuNoS6ooC+J+9XFTApJTOw086
MbnVlZTcoRgJMRpeFAUPjv8DCIKnpVest5sskhwzcZnSF4adm0S/9QeG5l38lERm
X8G2HQpHxEBjd18GVdyUuVQcgRoIqvDpNzhMtlNJoeZHO6DanRm/lTmEawvWeitA
y/refA1bDd3+g1PRYt1HffaurhTTsjM5GZf5DhmK25f0Zdj+gnshSBlZsMwCHPBr
qPYw6XDIySJ5C2OhxtTlmt98dklSCPXarIqLJ7bwdHSiYJuTDykKjWkOuabRKsQd
dBIaKLjV9i3vVXXJUVeZnLastg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:21 2024 by rpki-client on console-fra.rpki-client.org