Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/TGbT94nZDxCpxL6mvbKafZhMGuE.roa
File: TGbT94nZDxCpxL6mvbKafZhMGuE.roa (raw, json)
Hash identifier: fydePPWMELCU5nSkMSKFDYBhn0AyymV4/WSmt4J0JCg=
Subject key identifier: 4C:66:D3:F7:89:D9:0F:10:A9:C4:BE:A6:BD:B2:9A:7D:98:4C:1A:E1
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 026D5050
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/TGbT94nZDxCpxL6mvbKafZhMGuE.roa
Signing time: Sat 01 Jan 2022 06:54:21 +0000
ROA not before: Sat 01 Jan 2022 06:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 195.85.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40718416 (0x26d5050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Jan 1 06:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c66d3f789d90f10a9c4bea6bdb29a7d984c1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:eb:9c:f2:9e:12:b2:30:6b:a0:e8:ab:d2:
6f:f3:f2:c5:5e:11:ac:0d:0b:b0:31:03:f7:99:9e:
d4:58:c6:f4:c2:01:ff:91:a7:53:93:a7:3a:67:ad:
92:3d:52:93:17:1b:ca:19:46:08:6d:ea:b8:9c:82:
4f:bf:00:5a:51:da:68:72:00:f2:82:f0:50:97:4d:
56:12:f5:e5:a9:a2:d4:55:d6:2e:ec:09:b8:b4:7b:
1e:e9:40:2f:32:0e:29:ab:f5:5e:11:02:bf:8e:36:
9d:a1:eb:88:2a:1c:ee:d0:fc:d6:f9:47:15:93:51:
4c:bc:4e:ea:94:b0:4e:f1:13:de:80:0f:2c:58:24:
2a:cb:57:61:88:de:d1:c1:20:1c:e2:29:6e:c5:36:
46:88:49:12:2a:72:12:9f:52:24:8b:b4:3d:90:04:
91:90:53:c6:cc:86:fa:11:86:df:35:2d:3a:28:8a:
81:2e:b0:5d:ad:81:9f:00:0f:bd:5f:e8:1f:c9:d9:
39:bc:9a:da:92:fa:9f:dc:03:fd:c4:4d:4f:24:07:
02:61:03:e4:1d:c4:0f:7e:bc:a6:08:40:de:92:09:
4c:e5:3a:41:42:d9:fb:b3:7c:52:ae:e3:b8:79:95:
eb:70:6a:e4:2d:01:d3:a9:af:cc:64:e3:e4:6e:e9:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:66:D3:F7:89:D9:0F:10:A9:C4:BE:A6:BD:B2:9A:7D:98:4C:1A:E1
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/TGbT94nZDxCpxL6mvbKafZhMGuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.12.0/24
Signature Algorithm: sha256WithRSAEncryption
12:07:b8:8e:84:d4:42:24:f3:f0:be:d7:c9:6c:d3:6d:94:1b:
f0:19:6d:c2:7b:a9:c6:31:62:76:51:9e:94:7d:80:05:9e:a7:
ed:f9:ab:01:f8:fc:92:5d:cb:a1:48:46:67:cf:37:37:94:fa:
01:d8:ab:35:f8:22:e6:18:8b:49:6d:ca:0e:9a:c9:a8:fd:48:
2c:ae:dc:33:a8:48:4e:f1:2c:98:69:e4:7d:74:4f:c6:58:ed:
22:ed:cf:6a:e0:84:d6:8f:a8:30:26:ea:28:ff:9e:c3:25:0e:
38:ce:1f:1c:46:e4:f2:8f:e7:dd:f3:0f:11:dd:f5:b1:e2:06:
9d:b9:36:64:00:1e:21:f8:14:d7:d7:61:3f:6f:00:d3:3f:79:
d4:92:ac:dd:f3:f8:8f:ac:fe:79:a7:58:07:46:cb:70:d1:2b:
f2:93:d2:52:c5:56:f0:03:9a:a4:9b:49:56:67:00:b3:d1:8f:
b9:ca:d8:0c:8f:a9:73:83:0f:1e:2b:16:7e:a8:9b:59:53:db:
3d:5f:6e:b9:2c:91:cf:f9:4c:6e:ec:cf:5a:06:49:7d:eb:97:
59:95:7d:ac:67:22:02:83:6f:fb:0a:d9:46:f7:8e:eb:07:08:
d7:a0:6c:6a:11:7a:8a:e8:f2:c9:77:d0:83:ca:cc:6d:1a:c1:
2a:c8:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org