Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TbcySsKCjifct_Q3bgMJYsZdX_M.roa
File: TbcySsKCjifct_Q3bgMJYsZdX_M.roa (raw, json)
Hash identifier: X4AT8R0QGrjfgBC8tVz8xdIeKI4T2AGcFPMakM747JA=
Subject key identifier: 4D:B7:32:4A:C2:82:8E:27:DC:B7:F4:37:6E:03:09:62:C6:5D:5F:F3
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CDF0B6B
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TbcySsKCjifct_Q3bgMJYsZdX_M.roa
Signing time: Thu 14 Apr 2022 09:44:08 +0000
ROA not before: Thu 14 Apr 2022 09:44:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.233.150.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215944043 (0xcdf0b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 14 09:44:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4db7324ac2828e27dcb7f4376e030962c65d5ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:f7:4b:f0:ec:06:90:a2:8f:cc:02:a7:e1:
f7:31:e3:b6:ea:8c:6d:7a:3e:dc:62:7c:8c:bc:80:
5d:ec:2e:d0:72:47:46:03:ec:22:ed:40:fd:0b:75:
59:33:a7:d3:1b:f7:5b:cb:a7:83:df:ea:f9:fc:1d:
a7:ac:35:5a:94:e3:27:5d:a2:1f:9f:70:03:c1:6e:
c4:1b:a5:70:5a:be:4b:d5:0a:33:2e:98:b6:02:fd:
f2:b2:a8:1a:50:eb:ed:3e:fb:4e:cf:a9:4f:64:0e:
04:2c:4f:cf:ce:ad:18:a3:0f:b9:7d:ec:1f:b1:57:
d4:87:b4:bd:89:a9:f2:c9:98:ec:ee:33:45:6d:bb:
a1:f3:37:f9:1f:a9:eb:00:8f:88:d0:97:56:14:b3:
e8:ef:b4:ed:22:69:a1:72:15:d1:8e:8a:60:56:32:
71:78:2a:73:19:79:23:55:11:01:47:5d:34:0c:46:
4c:6e:56:4e:2e:e6:9e:bf:64:57:e0:86:fb:ba:2b:
19:97:8f:5a:b9:f4:31:20:f6:c4:43:d3:13:a6:df:
92:b9:1e:2b:bc:aa:32:ec:0b:4c:0f:ea:fb:82:49:
6e:2b:ec:88:88:49:86:75:9d:b8:f0:ab:e5:bf:a8:
85:84:14:c8:61:c5:69:02:ef:4e:8c:90:11:9b:4f:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:32:4A:C2:82:8E:27:DC:B7:F4:37:6E:03:09:62:C6:5D:5F:F3
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TbcySsKCjifct_Q3bgMJYsZdX_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
73:86:e7:e7:02:e1:a9:ee:ce:71:58:fd:17:01:09:87:b9:f4:
3a:00:df:5c:3b:49:62:9c:af:72:18:a9:65:dd:af:2c:1d:a1:
74:dc:44:e0:a1:ad:69:ae:c1:00:4b:04:32:99:36:c6:e3:86:
d7:9a:a5:ab:cf:d8:a9:26:27:a2:42:79:10:43:30:ea:4d:bc:
9d:4c:f6:2c:69:47:38:43:54:80:1e:49:6c:3e:3e:09:84:f7:
24:15:78:29:ba:73:66:d9:61:28:61:ab:1c:aa:44:9d:82:9d:
5d:81:4d:5f:cc:5e:19:df:10:8b:3e:e0:f7:c0:a3:63:fa:88:
73:20:a4:0e:7d:ee:3e:43:07:33:43:7b:a1:dd:ce:51:8d:8b:
7e:0d:78:0b:9d:fb:f8:02:26:74:0f:e8:d5:a7:8d:70:07:cf:
91:e4:99:de:11:d4:93:e6:58:a5:47:fe:a3:c1:0e:d0:e8:92:
98:22:17:d0:32:ec:6f:e9:e2:7e:a1:7e:26:cd:43:14:27:83:
b7:66:69:70:7c:50:57:ab:2e:21:a5:a1:8a:7e:c0:dc:f8:68:
4f:1f:73:0b:6a:bb:27:43:d5:ae:ff:63:e0:fd:07:56:a0:5c:
2c:67:de:80:75:9e:43:4d:f6:57:76:94:77:8e:22:53:00:2a:
c5:78:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org