Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TFEmrQETS-hLUUQ1wKqmfg5bPm8.roa
File: TFEmrQETS-hLUUQ1wKqmfg5bPm8.roa (raw, json)
Hash identifier: fr8HiH/46uIphgThIXSw4FN5Ur5luva3TDWV02ACntQ=
Subject key identifier: 4C:51:26:AD:01:13:4B:E8:4B:51:44:35:C0:AA:A6:7E:0E:5B:3E:6F
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0185625E8D8006EC527CDD2B08397A9FD554
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TFEmrQETS-hLUUQ1wKqmfg5bPm8.roa
Signing time: Fri 30 Dec 2022 09:30:41 +0000
ROA not before: Fri 30 Dec 2022 09:30:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21467
IP address blocks: 193.109.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:5e:8d:80:06:ec:52:7c:dd:2b:08:39:7a:9f:d5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Dec 30 09:30:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c5126ad01134be84b514435c0aaa67e0e5b3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:9c:4f:69:9e:9e:6d:27:de:3e:64:92:08:
d5:6c:b3:b6:7d:82:31:55:df:be:7d:be:dd:39:a7:
82:97:a3:96:76:97:4f:d9:2d:f3:d3:66:ce:89:a3:
3c:9f:ec:be:4b:f9:8a:d3:15:09:10:bd:28:ab:f6:
37:7f:1f:c0:1b:86:57:7a:29:16:55:83:3c:4b:bf:
8a:d5:77:c8:ca:12:8d:29:1b:40:ef:83:f2:5a:8b:
df:59:77:86:c9:b5:84:d2:a2:8f:d0:12:21:40:40:
3f:e6:26:35:71:96:08:26:e0:09:78:c5:01:a3:2c:
34:dd:cf:e0:7c:aa:3e:ed:23:c8:a4:dd:82:7e:77:
f7:dd:e2:71:4d:e9:92:58:c3:43:b5:d6:e0:3c:32:
92:9a:4b:6a:bf:a7:6e:87:87:a6:5e:bf:81:0a:a8:
13:07:2b:17:1a:0b:4e:08:86:9e:93:24:e0:c2:24:
8b:e3:f7:e5:59:ff:2b:da:9c:13:5d:57:b1:dc:2e:
9e:0e:63:ae:0a:46:fd:e9:9e:14:fd:f6:05:c5:59:
90:c4:03:95:41:ec:f8:4b:e6:81:49:ea:57:2a:de:
02:9d:86:57:6d:26:ef:d8:72:a1:5d:9c:c4:c1:6e:
f0:36:dd:92:da:e0:0d:e3:84:c5:c1:66:49:ad:36:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:26:AD:01:13:4B:E8:4B:51:44:35:C0:AA:A6:7E:0E:5B:3E:6F
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TFEmrQETS-hLUUQ1wKqmfg5bPm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:43:22:2e:39:d5:2f:26:b4:4b:ff:d7:a0:83:9c:1f:4a:77:
a2:46:8c:b0:5d:e5:85:ef:57:f3:6c:48:5f:6e:9c:27:d9:69:
29:1c:bb:d5:6b:fd:3e:e4:82:d5:7c:cc:a6:3c:de:5c:6d:bd:
ab:9d:a9:c2:fe:3c:5a:3c:b4:00:4c:3f:ab:63:09:22:ce:7e:
e3:29:00:ea:b5:88:f7:07:79:44:b5:31:91:2c:fd:e8:02:67:
98:ed:7d:a3:5b:3e:9d:48:b3:28:ac:54:38:ae:51:e7:06:81:
8a:7f:bf:fa:56:d9:af:75:56:57:4f:3b:5e:81:f9:26:47:d1:
c8:68:c3:ca:0f:ed:50:1c:76:3b:dc:92:38:a6:69:7e:06:b0:
80:21:b0:d1:a7:0a:9e:b7:2a:4d:53:1d:4b:8a:b3:4b:69:ea:
ce:c2:f0:b1:53:84:6f:d1:98:58:b1:91:ff:a5:ec:bc:59:42:
b0:7e:3e:4c:7c:c9:07:30:81:05:c9:2b:fc:1c:d2:1e:50:a0:
60:00:3e:35:34:09:b1:70:07:ff:67:fc:e8:b0:0f:58:cd:ae:
42:32:30:a8:8c:63:78:b1:34:33:c2:33:41:e8:03:99:b7:93:
c4:db:c3:f7:80:9e:09:58:02:02:ee:9e:42:65:55:31:0c:55:
05:54:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org