Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TNIdt7tA-W1_INdR38UyEYKNavk.roa
File: TNIdt7tA-W1_INdR38UyEYKNavk.roa (raw, json)
Hash identifier: KRK1zDwc96lhoqkR0FDWW0v7uCqHiVzRgkbqvmItp4I=
Subject key identifier: 4C:D2:1D:B7:BB:40:F9:6D:7F:20:D7:51:DF:C5:32:11:82:8D:6A:F9
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018481E8E953DAA6E77319DAEEE629082BFC
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TNIdt7tA-W1_INdR38UyEYKNavk.roa
Signing time: Wed 16 Nov 2022 19:27:15 +0000
ROA not before: Wed 16 Nov 2022 19:27:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.82.13.0/24 maxlen: 24
194.187.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:e8:e9:53:da:a6:e7:73:19:da:ee:e6:29:08:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Nov 16 19:27:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cd21db7bb40f96d7f20d751dfc53211828d6af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:52:0a:46:d2:fe:75:1d:80:88:0d:c3:5e:
2c:31:c4:f3:20:b9:ab:3d:4e:41:6d:7c:fd:3e:48:
f7:99:20:05:50:c1:34:f1:fe:7e:d7:20:ee:c0:28:
da:69:1c:a6:b4:31:a3:17:69:b5:77:98:31:a0:a0:
8b:be:be:18:a0:53:3b:82:ce:2e:da:b3:66:d6:64:
c2:ba:08:63:fd:fe:48:d2:9f:89:87:d9:fc:cd:bf:
05:55:62:5d:f7:5e:78:46:49:01:06:c3:19:16:91:
03:55:c5:f6:b1:e0:7f:62:af:fc:ff:36:8c:58:3f:
ee:8f:15:1b:04:9a:79:4f:8c:c9:4e:40:c0:20:3c:
c8:92:5d:d3:65:24:1b:24:89:a3:5f:9a:10:da:35:
42:35:04:f7:a1:34:73:6d:58:e2:56:8c:bf:48:61:
07:0a:9d:70:ef:ac:1e:a3:c5:3a:58:2c:6d:19:70:
37:b8:77:91:2b:7a:73:c7:0f:f0:72:ef:d9:b0:60:
30:7f:c6:5d:9b:04:46:21:1b:f7:2e:8f:a2:75:de:
d5:22:ac:9c:10:df:ed:d3:33:d2:08:58:fd:43:a7:
ae:af:ca:0d:4d:59:3a:08:c4:c0:3e:eb:f7:10:17:
08:20:7d:ac:76:a4:98:37:b1:6a:32:b4:3e:7e:26:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:1D:B7:BB:40:F9:6D:7F:20:D7:51:DF:C5:32:11:82:8D:6A:F9
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/TNIdt7tA-W1_INdR38UyEYKNavk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.13.0/24
194.187.122.0/24
Signature Algorithm: sha256WithRSAEncryption
55:62:3d:6a:9b:ec:fd:00:a3:a1:22:aa:bc:8d:db:26:5c:39:
16:fe:27:36:c4:1e:3e:f2:0e:f1:ea:bc:14:12:81:3b:47:7c:
43:bc:29:0f:12:35:3d:90:da:e9:0d:f9:ac:f0:12:de:e8:d6:
39:f6:ce:47:6d:35:51:f2:6a:d1:21:1e:e7:9b:16:bc:14:b6:
eb:e6:79:31:e0:2c:64:2c:8b:21:42:bd:23:04:9e:4c:a3:4b:
33:ed:8d:08:5c:fb:8f:5e:2a:9e:19:56:b4:36:df:ed:97:dd:
64:53:27:4b:a8:3b:fe:0e:55:13:2d:41:fe:d4:b9:9c:16:32:
9f:b0:02:ec:b1:e9:ef:29:75:2d:3a:4b:e1:76:59:59:a0:59:
9e:88:a7:72:25:32:cb:c3:47:78:db:92:c1:84:99:90:f8:fb:
32:ac:51:ab:89:2a:cc:70:08:54:66:3e:1c:b5:13:f6:b8:4a:
c4:50:23:84:87:bf:e4:f9:62:03:13:d9:29:c4:6a:26:f8:26:
d7:8f:2c:f1:02:1c:b6:0d:19:27:87:ad:80:f8:8e:62:ae:58:
ef:52:4a:3f:d0:5c:e1:ed:e9:76:95:88:f6:8f:8f:d9:0a:9a:
be:c7:9c:dc:b8:3b:fe:0d:f0:1d:c6:2b:1c:8f:12:c2:4b:8a:
f7:3a:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org