Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tohnywqg_C7pIm987eNNW6NF-G0.roa
File: Tohnywqg_C7pIm987eNNW6NF-G0.roa (raw, json)
Hash identifier: VDOXoNA3NuQXIQeJv3ajYeEHCw+ujWnAPFPzllZmeTU=
Subject key identifier: 4E:88:67:CB:0A:A0:FC:2E:E9:22:6F:7C:ED:E3:4D:5B:A3:45:F8:6D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018398E3DA73A0312DC3C049C9E9B170C33F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tohnywqg_C7pIm987eNNW6NF-G0.roa
Signing time: Sun 02 Oct 2022 13:30:12 +0000
ROA not before: Sun 02 Oct 2022 13:30:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201749
IP address blocks: 83.171.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:98:e3:da:73:a0:31:2d:c3:c0:49:c9:e9:b1:70:c3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 13:30:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e8867cb0aa0fc2ee9226f7cede34d5ba345f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:dd:62:dc:23:cd:44:38:80:a5:da:65:70:
28:f2:99:66:eb:b6:db:39:cf:b8:fc:8c:3a:3e:c1:
97:fa:81:ac:10:5b:31:56:3f:05:e3:e7:cd:99:29:
ef:71:a6:68:79:55:df:2b:1d:8b:cc:a5:7c:68:0a:
3b:d7:3a:1e:a5:ff:f4:b7:27:f2:50:c3:f2:2a:a3:
05:d4:8a:ce:54:49:40:f1:fd:82:19:42:79:ea:57:
d6:2a:8d:f2:06:54:ea:3f:5d:50:46:c8:a4:9d:06:
ce:37:45:43:bb:d8:4e:83:4c:6b:86:cf:59:92:b6:
49:5b:cd:fb:c5:b6:8c:17:c7:60:bc:e2:f9:65:9e:
ab:21:c1:b6:a0:75:b5:d9:eb:ae:3d:2b:a2:23:2e:
03:22:0c:c0:ee:47:07:26:1d:f5:6f:e4:1e:d2:68:
27:f3:70:70:49:64:b4:9b:8d:f4:c8:c4:a1:db:d0:
3d:17:a5:c4:db:72:3c:b2:4a:b0:10:68:ef:75:12:
2f:d5:e2:5f:46:4e:d8:61:3b:ff:d3:80:6e:3a:b0:
66:8b:63:ea:4a:27:f9:49:61:ec:5a:20:b7:49:58:
6f:38:89:92:ff:a1:a3:ed:8c:b1:89:41:bc:08:ad:
c8:00:9f:7e:7e:66:11:58:35:33:da:4c:38:63:9c:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:67:CB:0A:A0:FC:2E:E9:22:6F:7C:ED:E3:4D:5B:A3:45:F8:6D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Tohnywqg_C7pIm987eNNW6NF-G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.204.0/22
Signature Algorithm: sha256WithRSAEncryption
43:c6:c3:8c:c4:47:c0:a7:6e:e6:5e:8a:ed:02:de:f3:60:01:
3b:96:d2:6a:dd:22:31:7c:bf:44:ab:d5:e9:5f:a9:a7:9f:85:
3f:77:e9:c8:c2:64:7f:ea:cf:6d:2d:52:53:76:cd:a1:e5:e8:
65:59:22:7f:d1:33:38:fe:01:5f:54:c0:bb:27:b8:97:de:f2:
be:87:e0:0a:15:cc:71:ce:9e:86:3c:00:e0:f8:1b:02:2d:77:
8f:c1:49:8a:f3:9f:ee:1b:0a:bf:f2:64:2d:39:3b:43:fe:72:
66:ea:96:dd:6f:65:44:b2:25:ce:50:ff:4d:62:3e:6a:47:9c:
41:28:28:d4:31:e9:5c:ac:9e:65:c7:ad:ec:98:a8:7b:91:c3:
5c:bb:02:4f:5c:d6:01:19:6d:37:4b:b4:83:16:75:8b:1d:b9:
5c:1b:60:02:77:36:f3:8a:62:24:ef:12:ec:4e:e5:b5:31:5e:
5b:96:a1:be:5d:8b:55:98:5a:0f:61:4c:a9:de:f2:4f:fe:ce:
52:b2:f3:a3:44:99:b7:dc:36:65:4c:eb:c2:23:e4:63:98:0a:
f2:4d:5c:67:54:d5:5d:7c:2d:90:93:b3:c8:5c:a9:27:fa:ef:
e6:ba:a9:86:ad:26:5c:db:6b:2d:f6:95:42:37:f0:bc:c6:c0:
c5:a3:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org