Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/tcVo19QUXHN4zANIobQQpDHWvGg.roa
File: tcVo19QUXHN4zANIobQQpDHWvGg.roa (raw, json)
Hash identifier: EUueyuzywjLnI+RidkW/ewpCAGesX4Dr2BeIhvk8eL4=
Subject key identifier: B5:C5:68:D7:D4:14:5C:73:78:CC:03:48:A1:B4:10:A4:31:D6:BC:68
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 056D37A1
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/tcVo19QUXHN4zANIobQQpDHWvGg.roa
Signing time: Tue 11 Jan 2022 19:04:29 +0000
ROA not before: Tue 11 Jan 2022 19:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91043745 (0x56d37a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 11 19:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5c568d7d4145c7378cc0348a1b410a431d6bc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:48:d0:18:c5:34:f9:11:26:00:fc:ff:7d:
a1:82:ca:b3:c3:02:27:43:dc:1e:44:6a:20:1b:cd:
f6:90:13:7f:be:0c:49:f9:76:a4:d9:c7:94:4d:74:
02:60:7c:20:af:dc:fa:16:35:11:fb:85:f6:8d:28:
66:e9:3c:b0:4a:ef:ef:22:b2:4e:51:2f:20:4e:2f:
0a:b8:24:1a:eb:b0:bc:a2:c7:e9:f4:bc:6f:bb:64:
fa:a7:36:db:dc:3d:70:4e:e9:eb:2f:ac:1b:bf:a3:
b0:9c:6f:37:21:dc:35:37:81:55:3e:5a:4e:18:1f:
1a:79:93:91:31:a5:80:00:dd:ff:80:c5:c1:a0:c9:
66:d0:66:0d:a5:ac:02:b7:a3:ee:1a:21:e6:78:2f:
60:dc:21:c8:08:47:50:64:c9:59:dc:6b:ac:fb:fb:
fb:0c:a8:34:e4:aa:64:7b:18:02:ba:b6:f1:2f:9f:
98:1f:49:37:67:50:57:41:df:be:2e:e7:99:28:2c:
43:87:b2:48:bb:6d:73:d7:a4:1f:e7:91:e5:bd:0b:
8e:ae:05:63:4c:56:0c:e6:96:b0:cf:23:28:89:f5:
d1:08:6c:10:f5:27:e1:f2:9a:d5:3f:ae:92:b9:5c:
73:d7:99:fb:48:9e:53:f3:13:12:3f:78:70:f0:67:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C5:68:D7:D4:14:5C:73:78:CC:03:48:A1:B4:10:A4:31:D6:BC:68
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/tcVo19QUXHN4zANIobQQpDHWvGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:85:1b:84:ce:1f:bc:8b:a6:4a:0c:69:5f:77:64:ba:6e:e7:
07:46:7f:74:ff:7f:de:46:cd:66:b8:a0:ab:d9:b6:3f:02:78:
9f:8d:6d:5f:50:4d:b0:b9:69:9e:b6:cb:92:58:22:e3:6a:df:
7a:21:53:12:eb:25:a6:1e:3d:27:bc:ec:18:aa:c1:6c:12:ec:
d2:61:be:96:9f:42:3b:69:72:f1:db:c5:03:1e:51:c9:e4:2e:
1e:25:ea:1f:be:79:24:80:0a:75:de:a0:64:27:58:f1:ac:47:
bc:db:f5:eb:e2:bc:10:40:e5:22:e3:3f:3d:89:aa:9e:6d:46:
fd:f2:53:4e:fd:87:6b:39:45:ea:2f:98:f1:90:43:6a:33:24:
61:c2:f0:c9:27:6e:ad:b0:4b:ca:67:af:c8:64:42:f3:e7:2d:
23:58:7c:62:67:60:33:3c:ae:49:ea:20:91:6f:1d:ac:df:3b:
82:d5:b9:f4:db:a7:1e:b5:81:21:bb:87:b0:be:a9:24:6f:0d:
e9:8a:24:dc:68:50:5d:f2:10:2f:bc:a7:ce:70:8d:71:20:fd:
8a:a9:03:6b:13:00:cb:09:fb:0c:3b:e8:61:d6:ce:93:db:15:
5a:b3:56:8d:65:53:a3:65:b8:e7:8e:83:27:ac:c5:ed:53:29:
da:00:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:10 2023 by rpki-client on console-fra.rpki-client.org