Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/TAUoKYnkdbBscVZdc7CvptppQEc.roa
File: TAUoKYnkdbBscVZdc7CvptppQEc.roa (raw, json)
Hash identifier: UN/2k4yMBqdRoTjNDA90aWXn5YFRwLaMQ3vqFPjN7h4=
Subject key identifier: 4C:05:28:29:89:E4:75:B0:6C:71:56:5D:73:B0:AF:A6:DA:69:40:47
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 04D2ACF1
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/TAUoKYnkdbBscVZdc7CvptppQEc.roa
Signing time: Sat 01 Jan 2022 13:01:25 +0000
ROA not before: Sat 01 Jan 2022 13:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206610
IP address blocks: 194.147.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80915697 (0x4d2acf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 1 13:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c05282989e475b06c71565d73b0afa6da694047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:d9:9e:3c:da:cb:2b:3c:92:0e:c1:75:6a:
fd:77:41:44:c2:c1:ab:fa:f1:3c:c7:f6:e5:ce:86:
5a:3c:db:ec:20:4f:a7:e0:d4:5a:5b:f3:8e:ea:f3:
8e:76:7f:bd:4e:f4:48:68:89:ec:45:53:f6:ec:b6:
4b:9d:ed:27:96:06:14:4d:b5:1a:00:3d:6c:9e:33:
14:87:77:89:ed:5e:37:a7:86:7d:a0:01:8e:b0:2a:
3c:85:e8:8f:53:1e:2b:bf:3d:21:07:1c:e5:18:da:
6f:cb:3d:60:c0:70:bf:4a:a0:8b:8c:bf:4e:24:26:
24:27:85:6d:0e:dd:eb:67:86:fb:1b:37:4c:bf:22:
94:40:e6:94:04:26:1f:a7:4c:7f:34:24:02:db:c3:
24:54:47:64:73:1c:2d:9a:f0:d3:64:17:28:d5:f4:
67:f7:cf:a0:b7:36:42:e5:01:1f:e4:17:28:30:11:
df:38:05:f1:0e:ee:c0:22:dc:6f:71:16:4c:38:5a:
e2:20:ba:49:14:71:83:f0:40:bd:2d:42:88:3d:17:
06:1d:c0:77:15:77:59:1e:94:78:0b:e0:39:5c:34:
5f:d4:2f:71:02:7d:6b:88:bc:da:3e:a4:54:4f:b4:
31:07:b2:85:da:7e:4f:96:3a:90:97:74:ee:46:33:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:28:29:89:E4:75:B0:6C:71:56:5D:73:B0:AF:A6:DA:69:40:47
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/TAUoKYnkdbBscVZdc7CvptppQEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.93.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8a:33:ab:ef:c0:f4:46:f2:91:c4:47:c9:2d:4f:03:ea:49:
79:e2:8f:c4:e4:86:1e:db:62:a7:35:3e:0b:32:c5:52:e1:23:
0c:59:eb:d4:21:72:bf:f2:a9:68:e4:99:0d:77:59:f3:5c:bd:
9b:2e:9e:e2:49:ac:e9:a4:dd:10:41:e7:b1:29:68:55:4a:a6:
b5:42:00:55:5e:9f:48:b6:3a:7f:9a:65:21:ab:2f:ef:01:43:
41:60:2f:9f:08:2e:d8:a9:48:59:2f:26:59:56:05:8c:43:1f:
d2:7b:85:69:a6:e1:38:3b:ff:b3:c6:45:c2:6b:52:1e:8a:62:
12:48:d2:76:37:ba:ba:f1:e1:d9:f1:da:c9:52:da:2a:7d:78:
f4:4f:f7:4b:50:a4:1b:d0:85:e3:88:96:d8:29:3f:f2:18:05:
a5:9f:30:16:20:f0:27:87:c8:26:7b:a5:d6:81:f4:c3:d8:12:
8e:a3:12:3c:df:4b:ce:31:dc:92:dc:96:5c:87:42:7e:a5:0f:
e0:3c:21:1a:e4:58:d1:ce:b7:ae:1e:cf:ed:8a:75:34:3f:88:
03:0a:f8:cd:8d:bb:9e:0a:47:d1:15:19:a6:1f:07:85:f6:c1:
47:41:7c:6e:61:de:92:67:05:b6:60:9b:a1:8b:f3:ef:5d:1c:
bb:c3:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org