Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/TWA7icKU8nNiCDO5ReAQWY0bk94.roa
File: TWA7icKU8nNiCDO5ReAQWY0bk94.roa (raw, json)
Hash identifier: pepte83aRMe2tMrUK7qfvdm9DZvCBxQ0ndNsNFf4XC0=
Subject key identifier: 4D:60:3B:89:C2:94:F2:73:62:08:33:B9:45:E0:10:59:8D:1B:93:DE
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 0563CC43
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/TWA7icKU8nNiCDO5ReAQWY0bk94.roa
Signing time: Sat 01 Jan 2022 09:02:29 +0000
ROA not before: Sat 01 Jan 2022 09:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51364
IP address blocks: 193.142.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90426435 (0x563cc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jan 1 09:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d603b89c294f273620833b945e010598d1b93de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:1a:bf:83:97:b9:de:9e:8a:b9:8e:76:5d:
fc:cc:c0:c9:92:df:38:6e:73:37:a5:a8:82:94:1b:
fc:9e:7a:d3:e3:62:5a:14:60:73:f7:e3:df:57:e5:
fc:eb:b2:e4:83:e8:5b:50:da:6b:9e:48:f8:aa:e6:
62:6a:69:c0:2c:c1:6e:15:12:e9:91:23:d7:c1:4c:
6d:60:7b:d7:d3:f4:47:be:dd:ef:44:10:16:a4:79:
32:60:3c:9e:1f:e2:d5:1b:06:8c:be:98:2d:fa:43:
83:21:d1:a3:3c:03:90:d8:c1:c1:e4:98:aa:0f:3e:
55:d1:3d:47:2d:f4:3b:f4:61:86:f3:cd:27:b3:48:
65:0a:6e:e1:4e:24:8a:a8:7f:c3:8a:10:c2:25:98:
74:10:63:da:c7:b4:17:e9:2d:f8:24:58:39:fb:a4:
4e:96:5b:96:65:ef:80:f4:c7:b0:90:db:a7:a6:4d:
27:e5:f0:15:4d:66:23:1d:81:dd:3d:c6:c0:b4:4e:
6c:14:9b:72:d0:df:a0:d4:db:41:72:1b:aa:89:cb:
2a:56:5e:60:81:d2:f4:23:18:f6:86:1c:3f:74:a9:
9e:7d:4e:3d:fb:33:ae:67:90:c8:c0:6f:d5:85:57:
5f:8c:22:85:82:d6:cb:67:1a:1e:aa:0d:fc:c9:05:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:3B:89:C2:94:F2:73:62:08:33:B9:45:E0:10:59:8D:1B:93:DE
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/TWA7icKU8nNiCDO5ReAQWY0bk94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:66:9a:4a:fc:a3:6a:fc:3b:df:86:15:da:75:73:08:0c:cd:
64:76:95:ed:aa:79:8d:58:cf:cc:c2:06:2c:d8:fb:e0:d0:07:
89:36:28:9c:54:47:f8:bd:fb:b1:57:6e:01:b7:01:8b:db:5e:
b0:62:a2:ba:fa:42:ac:6a:f0:16:2b:fe:4b:37:a9:4b:13:96:
4b:9f:e4:1b:26:0e:b0:84:1a:75:02:72:81:bd:6e:6a:04:f4:
de:29:27:f8:40:f6:ec:ac:c6:11:60:b9:ae:21:29:47:d2:f8:
2a:50:5f:02:10:46:88:7f:23:7b:4e:e0:92:d7:f9:e0:c6:9e:
c1:77:e6:b6:68:28:0e:d8:9f:8d:35:58:f6:66:55:06:e4:41:
e4:c0:fb:57:97:ad:6c:41:81:88:48:bd:dd:7d:41:56:c0:03:
05:ee:71:cf:10:c9:61:aa:bb:55:1a:33:f2:7e:56:75:c0:ae:
af:de:55:4a:c0:1d:07:cd:28:22:72:67:04:6b:cb:ea:ff:2a:
b1:65:67:b0:7b:f9:04:5d:83:dc:ac:c1:2a:4f:ea:59:5e:34:
ba:70:97:be:a0:a7:1b:f6:2b:b7:4b:cd:5c:98:1f:7a:9c:57:
03:34:fb:6f:c0:85:c5:7b:7d:b2:60:68:bd:5a:8b:f9:0c:1a:
93:1e:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:29 2024 by rpki-client on console-ams.rpki-client.org