Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/TTbViMiStLi_dxIMu1oIDTUmQ0c.roa
File: TTbViMiStLi_dxIMu1oIDTUmQ0c.roa (raw, json)
Hash identifier: 8cfF6h+QAbn6txMTFhZCsjk3bfH/NHgCfEjwVKRysWg=
Subject key identifier: 4D:36:D5:88:C8:92:B4:B8:BF:77:12:0C:BB:5A:08:0D:35:26:43:47
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 91AD12
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/TTbViMiStLi_dxIMu1oIDTUmQ0c.roa
Signing time: Sat 01 Jan 2022 01:57:53 +0000
ROA not before: Sat 01 Jan 2022 01:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30882
IP address blocks: 79.171.240.0/23 maxlen: 23
79.171.240.0/24 maxlen: 24
79.171.244.0/23 maxlen: 23
79.171.241.0/24 maxlen: 24
79.171.242.0/23 maxlen: 23
79.171.242.0/24 maxlen: 24
79.171.246.0/23 maxlen: 23
79.171.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9547026 (0x91ad12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jan 1 01:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d36d588c892b4b8bf77120cbb5a080d35264347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:90:71:f1:18:a8:f9:94:b1:73:16:8b:69:
8b:67:e3:d1:ef:fa:e3:9e:32:dd:d7:51:80:01:db:
c9:38:20:78:91:2c:71:31:76:e4:25:ff:f8:52:ef:
30:a2:fe:58:4e:77:7c:32:2c:d9:09:63:d1:b7:85:
4b:5a:51:b7:04:c2:38:40:3a:ce:53:06:75:7f:41:
c7:d0:31:79:c5:66:0b:dc:36:cd:c8:9d:b4:1b:34:
38:1a:bb:98:d4:ee:9c:f7:2a:18:b7:1f:0b:ef:82:
0f:25:be:91:84:3d:31:fe:77:d5:2e:32:d1:0c:ab:
53:92:86:1f:66:5f:7e:b2:61:6c:42:df:06:6e:03:
ce:fd:9a:9f:53:e7:48:a6:8d:a0:65:48:f4:70:5e:
12:65:86:c2:38:14:f3:df:3d:d7:f1:75:18:94:b3:
d4:b5:6d:80:a1:fc:9b:1c:0e:23:88:38:7f:c7:89:
47:2a:85:0a:fa:2f:1b:8b:14:37:ca:c1:64:7a:33:
7f:6d:2b:a7:bc:78:5a:32:8e:99:fc:42:ff:ec:e0:
22:66:29:f1:df:6a:8e:ac:63:61:be:1f:c2:7d:41:
0c:22:0e:ab:38:b2:b7:3c:3f:c0:a5:54:e7:44:df:
5b:08:4d:b4:18:50:b7:c2:0e:84:34:10:08:c8:4f:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:D5:88:C8:92:B4:B8:BF:77:12:0C:BB:5A:08:0D:35:26:43:47
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/TTbViMiStLi_dxIMu1oIDTUmQ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:e1:88:6f:34:17:83:3a:30:57:c6:32:e1:bf:27:3c:96:f0:
90:60:34:32:a0:88:bc:ee:3a:98:f2:29:ff:8d:63:07:3c:9d:
a3:cb:fc:36:0f:3e:c8:a7:99:0f:93:1f:e6:35:d2:18:09:d6:
9c:4e:68:28:69:2b:d2:20:6c:32:a8:ca:e6:ae:20:8a:2e:de:
d1:4c:aa:76:3b:8a:18:c5:e2:3c:3a:7a:7d:f5:01:dc:c1:c2:
9b:3c:ea:65:8d:b0:47:17:75:8a:75:6f:58:a3:42:de:02:2c:
e5:ab:49:eb:10:0d:63:2d:3e:02:ff:02:b5:c8:12:4c:7d:67:
7d:b5:4d:c9:70:17:7d:c2:28:d3:26:44:68:11:9c:3c:06:75:
1f:45:f3:24:50:de:a3:16:2f:1f:2c:fb:c9:a7:aa:d3:11:44:
95:75:cc:6b:69:0c:b5:67:42:6d:96:4e:14:4e:24:b4:05:a4:
27:f4:51:06:f1:2a:0a:ae:4d:38:ac:28:23:93:43:52:8f:c3:
04:80:2d:3a:67:e9:3f:53:e6:22:23:70:55:d8:a0:f1:47:3e:
5b:96:b3:8d:be:10:37:20:07:5a:53:d2:fd:3c:e7:d0:18:28:
ed:5e:d2:00:67:a7:15:21:37:88:ed:0a:c4:a2:91:27:eb:06:
d6:36:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org