Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/TPlQLrdPCFDEJlyBomn2NkUbm9k.roa
File: TPlQLrdPCFDEJlyBomn2NkUbm9k.roa (raw, json)
Hash identifier: zks5DW0wAW1/X7lhGpOWjhBR3du4iIvWKNWeMPqmO60=
Subject key identifier: 4C:F9:50:2E:B7:4F:08:50:C4:26:5C:81:A2:69:F6:36:45:1B:9B:D9
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 11B57FC3
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/TPlQLrdPCFDEJlyBomn2NkUbm9k.roa
Signing time: Sat 01 Jan 2022 01:58:30 +0000
ROA not before: Sat 01 Jan 2022 01:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8695
IP address blocks: 185.1.39.0/24 maxlen: 24
2001:7f8:80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297107395 (0x11b57fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jan 1 01:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cf9502eb74f0850c4265c81a269f636451b9bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:22:4d:ef:f0:8e:5a:db:3a:fd:61:59:d8:
9c:8c:74:16:c2:f5:60:76:47:8d:99:db:de:35:db:
db:55:39:e4:16:ae:42:ea:75:f4:3f:2e:aa:43:68:
fe:67:c0:ea:d4:89:40:43:85:1f:cb:fb:c0:7b:87:
16:38:60:af:be:f8:e2:e4:fa:c8:f7:13:41:db:bb:
8f:82:e8:47:fc:df:c3:ea:52:e2:b9:6e:3b:8f:35:
39:0b:29:4f:33:65:26:12:27:7e:6e:6b:f0:fd:df:
18:a1:e4:c7:ed:af:b2:2b:5f:b4:a1:cc:27:3d:7e:
d1:99:91:c6:43:4e:00:33:4d:33:34:93:8d:3b:39:
75:59:08:aa:64:aa:5a:c3:a0:97:b7:7d:70:c8:56:
36:45:a5:10:88:06:6c:14:9c:33:9a:6c:f2:c9:80:
f2:39:35:af:a0:d8:0e:dc:f0:c5:2b:69:6b:4f:9f:
07:c9:44:91:6e:be:51:80:bd:e9:5a:04:7a:75:ce:
b8:07:8a:9f:cf:ff:75:9d:25:7a:3d:6b:ea:cd:76:
93:8c:55:2a:fd:70:98:b5:15:e5:ac:b7:f4:de:2d:
2b:92:26:5c:a6:9f:4d:d6:a7:ed:61:28:c2:db:14:
26:7d:43:88:f8:ab:5b:b2:77:3f:de:b5:89:f7:36:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:50:2E:B7:4F:08:50:C4:26:5C:81:A2:69:F6:36:45:1B:9B:D9
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/TPlQLrdPCFDEJlyBomn2NkUbm9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.39.0/24
IPv6:
2001:7f8:80::/48
Signature Algorithm: sha256WithRSAEncryption
6c:df:88:9a:de:f8:50:3c:a2:91:0d:32:64:a9:cc:a5:dd:64:
1d:39:21:1f:6e:be:37:fa:5f:0f:c5:8a:30:15:9d:01:31:32:
39:51:d2:14:39:44:a0:4f:34:b1:ea:83:b5:9a:46:83:6f:2f:
e0:d4:36:83:da:64:1e:1e:64:41:c4:7b:7a:b2:d7:5f:91:ac:
1a:f5:a3:37:8c:06:45:f5:c3:dd:f1:17:2e:2e:1c:db:8b:52:
d1:ff:c6:b8:20:9c:3a:8d:87:47:b1:ad:f1:fa:1b:f2:e0:91:
f7:74:3c:5e:9f:68:b8:38:09:31:8d:9e:37:bf:e5:5b:7d:04:
a8:18:fa:7e:ba:c8:e3:95:c3:d7:1b:3c:f6:be:07:65:e7:a6:
79:4d:33:57:6c:92:64:b2:10:b6:14:d1:76:63:6d:51:32:9d:
e3:8c:25:cf:12:1b:94:51:9a:37:a3:80:08:60:cc:1d:13:51:
d8:9d:2f:89:fb:65:63:20:e8:8d:09:73:fb:c9:c1:40:48:0d:
8d:2d:5d:0b:ef:d6:75:56:bd:14:80:58:8e:5e:86:d7:c2:dc:
58:21:e8:cf:7f:02:bf:d1:bf:34:34:31:24:2b:1b:aa:2c:41:
c1:14:6a:01:5d:89:43:74:e4:92:82:54:83:76:a2:e2:07:7a:
12:7d:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:59 2024 by rpki-client on console-fra.rpki-client.org