Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TYnwRM4Cac9p3C3RU3cItXJD05Y.roa
File: TYnwRM4Cac9p3C3RU3cItXJD05Y.roa (raw, json)
Hash identifier: BU8m1mpT43re2AB3jee1R28xSWVdG90//s/qws4EgBI=
Subject key identifier: 4D:89:F0:44:CE:02:69:CF:69:DC:2D:D1:53:77:08:B5:72:43:D3:96
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018A219E5A5FF6F8EBD760D65A108F00B7F3
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TYnwRM4Cac9p3C3RU3cItXJD05Y.roa
Signing time: Wed 23 Aug 2023 08:59:00 +0000
ROA not before: Wed 23 Aug 2023 08:59:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62091
IP address blocks: 192.162.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:9e:5a:5f:f6:f8:eb:d7:60:d6:5a:10:8f:00:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 23 08:59:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d89f044ce0269cf69dc2dd1537708b57243d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:5f:55:42:cc:79:5b:0e:40:eb:22:39:e3:
9e:c0:28:90:00:0c:3c:b4:aa:d9:fe:0c:54:60:00:
6a:ae:5a:c9:61:a1:61:77:9a:d5:6e:4e:6e:64:ca:
53:d3:18:66:49:a8:64:b3:d8:ed:79:0e:4d:e1:7e:
a8:ed:a3:ad:e3:f4:cc:90:db:07:68:d0:70:62:0b:
ff:e7:e0:e2:27:84:ec:ea:1d:d7:09:39:4f:2b:1b:
4b:8c:84:4a:d6:af:31:c2:d0:a5:d9:ff:24:f6:3e:
4b:6b:77:89:1d:ba:dd:35:72:b5:fe:5e:1c:67:09:
19:f1:d1:e8:3c:5d:62:08:bf:28:5f:8c:54:53:69:
2a:d2:72:f0:1e:fe:ce:d7:63:a8:31:c7:a4:15:9a:
47:b3:6f:78:53:57:60:3e:8c:fd:d5:df:98:1b:e6:
1c:d0:2e:8e:f3:87:85:37:77:83:31:83:0f:3d:21:
f9:fc:c5:39:6d:c5:e7:ba:4b:a2:37:6d:55:31:92:
bd:f1:99:9c:6f:85:9e:70:c7:92:d1:4f:f1:ee:5f:
60:59:69:8c:71:16:c8:db:a4:23:9d:17:d9:69:f5:
f7:30:fa:b5:83:7f:2b:df:e9:87:2b:ce:c3:9d:88:
70:88:5e:33:d1:a7:e3:13:b4:3b:d1:19:e7:a6:c7:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:F0:44:CE:02:69:CF:69:DC:2D:D1:53:77:08:B5:72:43:D3:96
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TYnwRM4Cac9p3C3RU3cItXJD05Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a3:68:b9:15:1b:f5:1b:3b:3d:8c:0c:1b:1d:bf:b7:24:fd:
b5:1a:b7:53:8e:1f:c7:15:4f:39:ee:49:49:f3:95:b9:85:4c:
03:98:8e:c8:a6:53:fa:86:be:3a:44:0f:ef:8f:e9:48:c2:49:
64:63:2b:86:36:3f:c9:4a:3f:34:b0:5b:35:27:20:cd:d3:57:
47:88:31:cb:a0:25:22:a3:b5:a5:a7:a8:7f:f2:0b:4b:89:47:
49:64:36:97:0d:60:17:f7:82:c9:18:e6:1c:00:d1:e7:5c:82:
0d:cd:9f:98:14:9b:05:e3:2e:3d:69:85:5f:37:fd:43:db:ab:
f8:9f:ad:3b:00:4a:c0:ed:eb:d7:46:53:40:63:bd:96:09:b0:
cd:ca:ce:1b:bd:b9:e1:24:49:e7:8f:88:38:bd:84:22:08:a7:
b5:2b:d8:18:ea:89:24:c1:3f:10:52:23:bc:94:40:15:2c:14:
c3:61:c5:c2:c2:46:b6:5d:9f:68:26:44:27:da:88:84:9e:7b:
2b:5e:fa:61:22:a6:16:71:9d:7e:e2:41:d4:0c:ef:08:d3:1e:
e1:c7:7a:f9:94:45:17:0b:78:8d:60:e6:19:f1:bb:df:b3:ee:
16:a0:0d:d5:a7:b3:01:6d:58:54:9b:d6:34:4a:33:f0:2e:cf:
77:cb:f8:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYohnlpf9vjr12DWWhCPALfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwODIzMDg1OTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDg5ZjA0NGNlMDI2OWNmNjlkYzJkZDE1Mzc3MDhiNTcyNDNkMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPdfVULMeVsOQOsiOeOewCiQAAw8
tKrZ/gxUYABqrlrJYaFhd5rVbk5uZMpT0xhmSahks9jteQ5N4X6o7aOt4/TMkNsH
aNBwYgv/5+DiJ4Ts6h3XCTlPKxtLjIRK1q8xwtCl2f8k9j5La3eJHbrdNXK1/l4c
ZwkZ8dHoPF1iCL8oX4xUU2kq0nLwHv7O12OoMcekFZpHs294U1dgPoz91d+YG+Yc
0C6O84eFN3eDMYMPPSH5/MU5bcXnukuiN21VMZK98Zmcb4WecMeS0U/x7l9gWWmM
cRbI26QjnRfZafX3MPq1g38r3+mHK87DnYhwiF4z0afjE7Q70RnnpsepuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2J8ETOAmnPadwt0VN3CLVyQ9OWMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvVFlud1JNNENhYzlwM0MzUlUzY0l0WEpEMDVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKJAMA0G
CSqGSIb3DQEBCwUAA4IBAQBio2i5FRv1Gzs9jAwbHb+3JP21GrdTjh/HFU857klJ
85W5hUwDmI7IplP6hr46RA/vj+lIwklkYyuGNj/JSj80sFs1JyDN01dHiDHLoCUi
o7Wlp6h/8gtLiUdJZDaXDWAX94LJGOYcANHnXIINzZ+YFJsF4y49aYVfN/1D26v4
n607AErA7evXRlNAY72WCbDNys4bvbnhJEnnj4g4vYQiCKe1K9gY6okkwT8QUiO8
lEAVLBTDYcXCwka2XZ9oJkQn2oiEnnsrXvphIqYWcZ1+4kHUDO8I0x7hx3r5lEUX
C3iNYOYZ8bvfs+4WoA3Vp7MBbVhUm9Y0SjPwLs93y/jD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:24 2025 by rpki-client