Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TlTsuOImsG7rmy918pyAZseZaqM.roa
File: TlTsuOImsG7rmy918pyAZseZaqM.roa (raw, json)
Hash identifier: ipzVX149VswsRDS0+gjjxyWienJDNqgZc7CioVyCPZA=
Subject key identifier: 4E:54:EC:B8:E2:26:B0:6E:EB:9B:2F:75:F2:9C:80:66:C7:99:6A:A3
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA0E541
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TlTsuOImsG7rmy918pyAZseZaqM.roa
Signing time: Sat 01 Jan 2022 05:03:42 +0000
ROA not before: Sat 01 Jan 2022 05:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 93.120.100.0/22 maxlen: 24
93.120.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463529281 (0x1ba0e541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e54ecb8e226b06eeb9b2f75f29c8066c7996aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:dc:e9:00:77:f6:5b:78:63:eb:6a:38:ed:
73:3b:03:73:15:6e:1a:14:09:fc:ac:3c:63:04:04:
99:58:ee:8f:50:8b:43:40:26:59:73:22:72:2b:90:
bb:b6:cd:6f:40:b1:d0:e8:b6:4c:d9:0d:5b:b6:3e:
b2:cd:03:93:da:25:55:73:9f:ed:b5:97:8e:f4:cd:
da:43:64:ac:0d:e0:7c:c3:a1:8a:51:c5:c7:d1:84:
1b:c2:ba:48:71:eb:b5:1f:ae:b5:b1:6c:a2:b0:7f:
a5:38:a6:fb:93:24:59:ec:96:29:1f:27:90:ae:96:
b8:8f:56:ef:ca:f3:bc:e8:6d:c1:b5:a9:96:64:4e:
47:03:a0:be:ab:2c:61:80:ac:f6:4b:38:9f:b6:7f:
83:37:6d:8e:f8:df:ff:54:c2:93:00:95:12:0c:4d:
fa:8a:27:18:fb:3a:b4:e3:6b:cd:c7:d0:38:78:6d:
15:89:b4:a2:75:08:6d:54:3a:1f:4a:c9:fd:d1:39:
96:04:82:cf:f7:41:56:2a:7a:7c:11:7b:12:4d:01:
c5:eb:e2:c8:8d:bd:88:33:75:04:1b:6a:e3:4e:07:
1e:92:45:62:26:bf:a4:3e:b3:d0:87:45:10:85:68:
96:ad:6d:96:ad:c4:04:5b:1e:39:f9:8d:a0:8b:23:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:EC:B8:E2:26:B0:6E:EB:9B:2F:75:F2:9C:80:66:C7:99:6A:A3
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/TlTsuOImsG7rmy918pyAZseZaqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.100.0-93.120.111.255
Signature Algorithm: sha256WithRSAEncryption
8a:50:0e:6f:9d:77:2e:e0:4c:0b:cd:5c:f7:43:e9:85:41:91:
7b:e8:ce:85:84:7e:21:83:9a:8e:22:5f:24:43:7b:fc:ae:93:
a3:53:0a:5b:48:65:d2:8d:bc:be:4e:e4:d4:73:d2:ec:1c:6b:
b6:13:2e:9f:3f:f0:12:ed:47:63:82:a6:38:56:24:af:92:95:
e7:72:8d:7c:17:dd:31:03:53:18:68:9e:e3:82:4e:de:13:1e:
20:6e:5b:90:fe:6b:51:12:bd:43:2e:4d:40:0d:33:29:d9:98:
18:cc:b8:af:cb:3f:8b:98:d9:72:88:f2:d7:18:74:20:fb:6f:
da:de:c0:d4:2d:85:ed:26:32:e2:c5:bc:6a:fd:9f:70:70:27:
d2:ce:b6:30:32:a4:b7:9d:a5:d6:4a:bb:fa:cf:b5:76:13:96:
c6:d9:d8:97:90:5d:08:97:f3:8c:b9:7e:6d:95:f2:1f:19:f5:
96:0a:97:40:21:de:95:4c:6f:58:9c:e9:b1:e4:ba:54:83:96:
f8:fc:48:88:16:00:b1:45:5f:82:91:18:43:f3:41:69:f8:5d:
be:2f:62:e4:d8:96:d5:dc:45:33:45:1d:d1:77:b8:d8:f1:39:
76:e6:74:9c:f8:1d:4e:81:2d:30:24:e6:88:64:7c:5f:e9:c6:
90:26:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org