Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ttMNGMDtD9kVs62NiVXtqQWBpt0.roa
File: ttMNGMDtD9kVs62NiVXtqQWBpt0.roa (raw, json)
Hash identifier: CkeZvJSR17mPyWbjTFLe9r+FBCHOUi9X7uxOniA2+YY=
Subject key identifier: B6:D3:0D:18:C0:ED:0F:D9:15:B3:AD:8D:89:55:ED:A9:05:81:A6:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182AAD532ECB35C025F0680BAF1364B267E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ttMNGMDtD9kVs62NiVXtqQWBpt0.roa
Signing time: Wed 17 Aug 2022 08:04:35 +0000
ROA not before: Wed 17 Aug 2022 08:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 193.124.3.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.223.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:d5:32:ec:b3:5c:02:5f:06:80:ba:f1:36:4b:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 17 08:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6d30d18c0ed0fd915b3ad8d8955eda90581a6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:c6:e7:8c:79:1a:d5:f6:43:48:6a:0f:38:
de:06:46:76:6c:c4:a7:34:9e:61:15:18:86:75:70:
d6:35:0b:6f:ee:57:a0:07:e9:66:58:23:09:2e:4d:
c9:46:bb:8f:9f:d4:d6:d9:cf:6b:f6:75:59:38:c0:
dc:9e:c0:7a:ab:12:d8:9f:5d:e1:e5:86:f6:73:ae:
74:4c:83:fc:c4:44:8f:8d:7e:e1:9f:15:69:c4:69:
8e:c0:44:dc:dc:c2:9a:e2:f4:46:42:93:0c:4c:b0:
18:72:71:74:21:a1:c9:0c:2a:fb:ec:a5:4c:75:90:
c6:5f:aa:2a:96:cd:38:b4:21:b6:ba:38:f5:81:02:
76:02:9f:88:19:38:43:25:58:28:e8:42:ab:4a:67:
b6:41:a6:de:32:a7:6f:d9:b7:6b:88:8d:63:c4:e5:
66:8b:99:1c:22:4e:5a:36:87:ed:fe:88:42:20:02:
1b:ab:56:d0:75:38:92:f8:24:25:e6:0b:86:43:c2:
a8:0b:1c:de:15:1b:8b:3a:19:c9:2b:99:06:2c:f1:
ca:e9:73:c4:3e:48:b5:85:06:ed:bc:8b:84:38:b6:
b5:a6:13:b8:b6:00:96:80:21:20:7f:ee:af:03:5a:
b8:3e:7a:7e:e3:13:fc:34:01:f9:1b:5a:6c:55:a3:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:0D:18:C0:ED:0F:D9:15:B3:AD:8D:89:55:ED:A9:05:81:A6:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ttMNGMDtD9kVs62NiVXtqQWBpt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
194.87.118.0/24
194.87.187.0/24
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:b0:d9:f7:74:ca:19:9c:f5:1f:5c:91:c5:c4:aa:42:6e:
a7:63:91:5b:3f:44:7c:5d:cc:29:5e:52:35:3d:b6:c8:70:f7:
c9:83:49:0f:a9:9f:5a:36:f2:65:1d:a6:fa:24:8a:f1:aa:86:
ba:34:3c:6c:ad:4b:66:9c:84:af:a9:27:77:6b:a7:b9:64:96:
7d:88:3d:65:fc:29:c9:46:e9:70:6f:ee:3c:85:55:ef:0e:84:
cc:b2:45:2d:fa:0c:3d:86:75:fc:40:91:24:48:52:b8:a5:ca:
45:c1:48:3a:c2:b9:c2:4f:ac:05:66:9c:e1:7f:06:1d:6d:06:
7a:a9:47:a5:c5:1b:34:b6:07:f5:f8:29:10:82:41:30:ad:48:
7a:01:30:a1:a1:1d:1e:56:61:25:9b:b1:5b:ca:7a:11:2c:e1:
08:3e:8c:15:14:d1:0d:e8:d1:7a:61:12:26:9c:ab:f6:a1:ec:
1e:49:13:74:87:1c:b7:f2:5c:65:08:2d:3b:2f:97:f9:7f:eb:
dd:b4:fe:d1:d8:5c:8c:f1:bd:18:69:47:44:80:9f:85:e4:8f:
f7:9f:2c:1e:b6:bc:ba:03:6c:d1:ff:47:55:63:4a:17:45:c1:
2c:d5:a2:60:5f:74:cd:d7:7e:02:05:09:ea:f0:fc:5e:ec:bb:
6d:6e:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-ams.rpki-client.org