Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TYY-mTf8jOzEiXGEXEbbtBx9z8U.roa
File: TYY-mTf8jOzEiXGEXEbbtBx9z8U.roa (raw, json)
Hash identifier: L0cV4kSiRpJbN8yiCz8xEDRwtLBIoFhZegcCFoSBgTI=
Subject key identifier: 4D:86:3E:99:37:FC:8C:EC:C4:89:71:84:5C:46:DB:B4:1C:7D:CF:C5
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0365FB0D
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TYY-mTf8jOzEiXGEXEbbtBx9z8U.roa
Signing time: Sat 01 Jan 2022 11:54:05 +0000
ROA not before: Sat 01 Jan 2022 11:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44176
IP address blocks: 193.38.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57015053 (0x365fb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 11:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d863e9937fc8cecc48971845c46dbb41c7dcfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b9:53:e8:a9:2c:b4:06:69:09:20:6e:30:e4:
3f:6e:53:d6:91:f1:2c:18:8d:d2:02:ab:59:6c:66:
b0:2d:da:5e:5b:6e:75:3b:e2:01:8b:b1:97:75:d8:
5b:1c:93:3e:f9:5e:92:cb:36:d7:c8:4f:1a:7c:84:
47:b3:5a:3e:2f:d3:bd:81:24:a6:7f:19:15:be:da:
b7:a4:25:01:f6:0a:d8:27:d8:76:cd:f1:a2:de:d4:
af:2d:35:9c:d3:05:12:6c:d9:4f:c3:04:ed:6b:67:
ef:27:18:b0:10:31:61:db:6c:08:9d:3d:c4:18:8f:
b1:e6:61:7f:d9:00:98:ab:39:43:5f:15:1e:1e:04:
28:27:2f:91:0b:bf:06:18:33:2b:7d:92:6c:5b:8f:
90:b5:fa:53:7b:d2:d0:83:9b:73:2b:b6:4c:ff:2d:
87:b6:0e:56:5b:99:b6:00:a6:f3:80:32:55:ac:1f:
9b:c1:f2:c8:2c:b5:cc:e9:a2:82:c3:3a:f9:6a:11:
4f:81:a2:3c:37:d7:a8:20:6b:dd:cb:3b:69:40:1a:
8e:e2:d3:8c:8d:20:56:07:32:75:0e:0c:4f:d4:70:
70:1a:1f:9d:4c:df:9c:a5:de:4b:85:b1:f0:57:b8:
cb:7e:dd:32:29:81:cb:8d:48:73:ec:67:c6:6d:67:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:3E:99:37:FC:8C:EC:C4:89:71:84:5C:46:DB:B4:1C:7D:CF:C5
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/TYY-mTf8jOzEiXGEXEbbtBx9z8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:50:e2:9c:b7:28:4f:b5:2c:8b:7c:4e:a0:f1:7e:e5:10:dc:
ed:af:db:a6:6f:30:06:bf:80:43:09:63:a9:8f:2a:d3:7d:5b:
96:74:2f:6c:95:82:cd:15:a8:95:55:a2:27:79:a2:b5:07:c9:
c1:30:e3:17:af:ad:70:68:65:80:0d:bf:ec:a5:54:64:ca:81:
54:01:10:b0:d0:22:2a:92:47:9d:a5:7a:0f:5a:08:d4:7d:ff:
d9:e1:58:4f:28:c7:d8:95:d8:cf:3c:0b:cd:b7:42:cb:7a:68:
49:0a:f3:d2:71:7a:39:ac:3e:2d:f6:9c:9c:98:48:ec:f5:5c:
2d:de:96:0d:34:91:98:ac:e0:15:df:74:f7:f2:7f:0e:46:dd:
78:e6:13:cd:c2:38:27:55:d4:36:ac:13:cf:fe:3e:4b:38:d4:
21:e0:15:60:b6:b3:a2:33:4b:5c:c7:1e:04:64:48:16:f5:a2:
38:24:0a:d2:c7:88:50:99:4a:b8:35:db:fe:dd:b7:3b:26:cc:
29:9c:83:66:ff:a5:b5:b9:f9:33:a1:02:9f:64:9b:17:41:ca:
d4:7f:63:6d:9c:cb:b0:4e:d9:25:15:47:d7:a5:a7:cb:57:52:
82:ed:90:9c:85:ed:24:a4:65:8e:8b:ce:fe:2a:07:bd:6c:0a:
39:e8:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org