Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/TQcPWXacyDoIfFpHmGNtr-sXW7k.roa
File: TQcPWXacyDoIfFpHmGNtr-sXW7k.roa (raw, json)
Hash identifier: plWwpYZckO017wKitHlgRNt5+bVOZ5nS0o0ypZZlrKE=
Subject key identifier: 4D:07:0F:59:76:9C:C8:3A:08:7C:5A:47:98:63:6D:AF:EB:17:5B:B9
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 06F047D5
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/TQcPWXacyDoIfFpHmGNtr-sXW7k.roa
Signing time: Sat 01 Jan 2022 05:00:05 +0000
ROA not before: Sat 01 Jan 2022 05:00:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13278
IP address blocks: 195.234.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116410325 (0x6f047d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jan 1 05:00:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d070f59769cc83a087c5a4798636dafeb175bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:e0:05:b1:d5:bf:bc:f9:1b:bc:cc:de:76:
14:2b:e9:81:25:0c:9a:1f:11:54:39:b6:77:12:5a:
37:12:02:b3:28:d7:05:a5:0c:06:f7:f3:6e:b7:09:
5c:56:72:95:70:0d:e8:7f:6f:6c:ea:04:d5:80:ce:
81:69:80:9f:62:93:bd:ed:ed:68:c3:63:04:84:86:
0a:41:7c:cc:c0:16:2b:00:e2:a7:62:9c:44:85:5a:
ce:a7:13:84:81:38:f9:aa:9a:86:6b:72:85:ce:c6:
ff:69:38:af:9f:cb:2d:74:ad:5e:f7:9b:63:10:85:
5e:65:30:02:ed:72:85:13:01:2b:8b:93:37:96:34:
79:25:3d:b4:c5:1f:3f:e8:19:88:8b:2a:50:37:87:
87:7b:8e:46:dd:b4:00:57:2e:9c:f8:d0:a5:65:94:
a9:fa:6f:65:f3:82:c3:48:86:b8:06:ac:e6:1d:0f:
39:83:76:83:f4:d3:b6:b8:cf:41:21:b6:8a:d8:a4:
60:d2:84:d1:90:0d:8d:d1:2f:70:13:72:22:a9:e7:
97:84:85:ed:a5:08:0c:66:c9:75:17:bb:8a:d0:a2:
03:49:8a:3a:f4:3a:04:94:04:85:49:d3:87:cb:7f:
27:05:4d:48:36:39:55:01:8a:01:2a:ee:16:8c:5a:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:0F:59:76:9C:C8:3A:08:7C:5A:47:98:63:6D:AF:EB:17:5B:B9
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/TQcPWXacyDoIfFpHmGNtr-sXW7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.165.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4c:de:f1:52:c1:06:29:d6:e7:b2:39:c7:a2:49:4f:8d:6b:
ef:7b:ea:fa:9a:ec:ae:3a:45:d8:7a:c9:cf:5d:74:2f:df:f3:
f4:23:e7:07:42:d6:1f:75:f6:41:4c:72:d3:85:a9:20:c6:43:
f4:d5:f9:ce:72:31:12:83:b0:a8:15:ed:8b:29:ce:c4:ca:1d:
6a:6e:5a:d1:a5:d9:2b:25:bd:55:2e:17:85:5a:73:f1:c2:9d:
3a:77:50:30:5a:f7:1c:a9:8f:22:68:a7:4b:dd:81:ff:ef:09:
1a:aa:4f:50:96:36:de:8c:44:89:36:85:87:13:29:59:30:76:
bc:b6:61:f4:b6:12:9b:13:e3:57:72:ec:87:a0:43:79:22:07:
50:58:cd:04:d9:8b:7a:a7:14:2a:fb:50:52:04:8b:dc:7e:b2:
94:54:a6:0d:9e:55:13:be:8e:2c:f0:ac:a8:65:2d:94:67:08:
bb:3e:ad:6a:24:71:b2:08:5d:45:80:b2:a9:59:7a:17:c4:ec:
0a:5f:b2:46:e4:46:d4:16:da:ab:83:e4:98:29:c8:96:8c:17:
fc:cf:6f:64:df:92:39:d4:73:ef:32:51:35:fc:71:48:30:7b:
2a:32:6b:b6:e0:86:e8:6d:3a:d4:6b:0e:c6:72:12:b8:10:cf:
a2:83:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org