Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tvM_TLbnQZwL7dRWtPBjkHs_vjM.roa
File: tvM_TLbnQZwL7dRWtPBjkHs_vjM.roa (raw, json)
Hash identifier: 5sApabT8n7DZrTl/lbbx8iK6Clpg/Bv+iAk3TkQuEMY=
Subject key identifier: B6:F3:3F:4C:B6:E7:41:9C:0B:ED:D4:56:B4:F0:63:90:7B:3F:BE:33
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 1519450D
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tvM_TLbnQZwL7dRWtPBjkHs_vjM.roa
Signing time: Sat 01 Jan 2022 13:58:51 +0000
ROA not before: Sat 01 Jan 2022 13:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20709
IP address blocks: 81.17.137.0/24 maxlen: 24
81.17.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353977613 (0x1519450d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 13:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f33f4cb6e7419c0bedd456b4f063907b3fbe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:3e:12:59:b5:34:6c:fa:05:1f:2b:8d:3d:
ab:4b:9e:96:65:92:e8:7a:b1:6b:6f:32:7a:5a:5a:
45:d7:76:d6:47:0f:d3:c8:1f:e2:62:0d:9c:ba:7f:
81:e2:ba:ed:e6:b6:ed:70:17:e1:97:05:79:16:27:
e9:e5:c8:6d:fa:9a:32:ce:8d:49:07:58:18:0b:e9:
b8:50:55:20:9a:86:c4:b1:85:c8:41:9b:42:78:ec:
cd:74:a2:44:15:4a:d4:24:30:1f:45:0f:12:4c:eb:
74:99:a7:79:34:19:38:10:21:41:1c:75:66:5f:46:
82:b5:2d:2c:7e:db:c4:b6:e4:b4:a2:c0:fd:99:8e:
d3:b2:7b:82:08:5a:3a:7d:c4:85:72:20:37:fd:ea:
67:67:42:ef:4e:dd:9a:b1:b7:a3:22:da:a3:26:f6:
bb:2d:ca:29:51:64:16:43:30:22:41:00:85:52:df:
42:07:8b:b8:fa:14:42:26:64:a4:29:e6:e9:1b:0a:
df:f0:e1:1a:90:47:ba:d2:d3:9f:7b:c4:3f:56:8e:
0c:3a:8a:d6:88:85:cd:eb:b0:57:bf:3a:0f:1e:5d:
f6:e0:17:c8:76:e0:09:9f:11:6c:7e:22:dd:82:b4:
a3:8b:88:d4:c7:b1:48:99:80:2d:0d:94:cc:dd:8e:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:3F:4C:B6:E7:41:9C:0B:ED:D4:56:B4:F0:63:90:7B:3F:BE:33
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tvM_TLbnQZwL7dRWtPBjkHs_vjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.137.0/24
81.17.143.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ca:91:a0:bd:67:dc:67:3e:c6:8f:76:1f:23:8c:fa:ce:d8:
cd:b2:85:59:eb:a2:67:ac:e3:99:80:92:f8:63:66:4e:ce:20:
3c:2c:24:43:8a:d9:3c:6b:c9:9a:34:04:2c:6c:8d:c1:ae:2f:
cd:c0:fa:8f:be:8c:e8:04:19:e2:45:4b:7a:d8:2a:f8:58:ce:
0c:07:43:d8:23:37:94:46:86:4d:e1:04:32:8f:ac:e9:bd:e5:
44:79:1f:2c:2f:5e:70:8d:fe:02:06:c5:69:67:d6:bc:5e:86:
eb:d7:15:3f:79:90:85:09:90:a5:03:41:ce:a6:87:33:dc:a4:
e7:a4:8b:0d:7a:49:23:5d:9e:7d:a6:fb:30:45:ae:0a:63:31:
62:9c:05:d6:de:8f:03:22:23:fd:3e:c5:39:15:70:51:ae:9b:
0a:ef:bd:c4:f4:9c:a1:31:9d:cf:a8:d5:f3:fa:49:1f:8a:57:
a5:fb:a9:2a:78:3c:7a:f4:b4:ba:bc:99:94:6b:a6:37:23:69:
86:9a:9f:11:8c:84:fb:89:35:8c:78:96:8e:9e:e6:35:fe:2c:
8c:6c:3e:89:94:8d:24:e2:39:c8:6a:fe:42:5b:48:8d:0c:e4:
f0:f0:27:b1:df:89:c6:5a:fa:5b:f6:aa:3b:29:de:12:a4:3f:
0f:83:ec:bb
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFRlFDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MDU3NGMyODc4ZDZiNTM2MTM5Yjg5NWYwOGM5YzZkYjE4ZTEyYTliMB4XDTIyMDEw
MTEzNTg1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZmMzNmNGNiNmU3
NDE5YzBiZWRkNDU2YjRmMDYzOTA3YjNmYmUzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALppPhJZtTRs+gUfK409q0uelmWS6Hqxa28yelpaRdd21kcP
08gf4mINnLp/geK67ea27XAX4ZcFeRYn6eXIbfqaMs6NSQdYGAvpuFBVIJqGxLGF
yEGbQnjszXSiRBVK1CQwH0UPEkzrdJmneTQZOBAhQRx1Zl9GgrUtLH7bxLbktKLA
/ZmO07J7gghaOn3EhXIgN/3qZ2dC707dmrG3oyLaoyb2uy3KKVFkFkMwIkEAhVLf
QgeLuPoUQiZkpCnm6RsK3/DhGpBHutLTn3vEP1aODDqK1oiFzeuwV786Dx5d9uAX
yHbgCZ8RbH4i3YK0o4uI1MexSJmALQ2UzN2OPMcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS28z9MtudBnAvt1Fa08GOQez++MzAfBgNVHSMEGDAWgBTgV0woeNa1NhOb
iV8IycbbGOEqmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRGZE1LSGpXdFRZVG00bGZDTW5HMnhqaEtwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMjhkNjAwLWE4NjktNGFiMS05YjJlLTQ0NjAxOTk2NmExOS8x
L3R2TV9UTGJuUVp3TDdkUld0UEJqa0hzX3ZqTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MjhkNjAwLWE4NjktNGFiMS05YjJlLTQ0NjAxOTk2NmExOS8xLzRGZE1LSGpXdFRZ
VG00bGZDTW5HMnhqaEtwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFERiQMEAFERjzANBgkqhkiG9w0B
AQsFAAOCAQEAc8qRoL1n3Gc+xo92HyOM+s7YzbKFWeuiZ6zjmYCS+GNmTs4gPCwk
Q4rZPGvJmjQELGyNwa4vzcD6j76M6AQZ4kVLetgq+FjODAdD2CM3lEaGTeEEMo+s
6b3lRHkfLC9ecI3+AgbFaWfWvF6G69cVP3mQhQmQpQNBzqaHM9yk56SLDXpJI12e
fab7MEWuCmMxYpwF1t6PAyIj/T7FORVwUa6bCu+9xPScoTGdz6jV8/pJH4pXpfup
Kng8evS0uryZlGumNyNphpqfEYyE+4k1jHiWjp7mNf4sjGw+iZSNJOI5yGr+QltI
jQzk8PAnsd+Jxlr6W/aqOyneEqQ/D4Psuw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net