Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTyIsxGIxUMPS-CdW25SShGzQ3c.roa
File: TTyIsxGIxUMPS-CdW25SShGzQ3c.roa (raw, json)
Hash identifier: mR8cC3OKWgE3c3UDiPUR36bruamhxyHC1N459lCeiDs=
Subject key identifier: 4D:3C:88:B3:11:88:C5:43:0F:4B:E0:9D:5B:6E:52:4A:11:B3:43:77
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01836583F1693C993470BA7BDE83E64209EF
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTyIsxGIxUMPS-CdW25SShGzQ3c.roa
Signing time: Thu 22 Sep 2022 14:04:49 +0000
ROA not before: Thu 22 Sep 2022 14:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 91.243.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:83:f1:69:3c:99:34:70:ba:7b:de:83:e6:42:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 22 14:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d3c88b31188c5430f4be09d5b6e524a11b34377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:66:f2:84:ca:11:d9:15:54:6f:7f:34:ff:
11:c9:77:fa:31:c6:5a:14:0c:70:27:83:84:20:51:
08:af:82:4a:70:1c:63:a7:93:16:8c:ef:40:5a:09:
03:ca:a3:bc:d1:98:8b:2a:8b:fe:5c:6a:19:d7:96:
f7:8c:ce:8a:5b:c1:55:56:b2:98:75:ce:7e:40:b9:
aa:1c:73:7f:f0:f3:56:4f:5f:d4:f7:02:e7:ba:55:
5d:4a:b0:7b:28:3d:5a:f6:b7:2f:72:50:be:3a:c5:
68:f2:a3:12:fe:10:61:92:26:ae:a3:cd:e0:9d:ba:
7d:55:b9:e8:e1:89:95:0b:46:c3:08:a8:86:d1:cb:
70:a8:13:29:19:37:36:9d:3f:42:7f:e6:c5:4d:4a:
da:58:8b:4f:65:3d:34:22:53:99:1d:6c:d6:ad:ad:
31:9d:49:37:d7:ca:b7:fe:32:22:c1:95:6c:e9:29:
d3:49:ab:ad:c9:fa:72:51:a1:d7:31:d2:08:b4:cd:
c8:bd:41:42:eb:4f:47:f7:9b:34:d3:4a:fd:e2:0f:
b7:94:5e:f9:49:8b:f3:f7:5c:65:80:c2:82:0e:14:
80:b6:40:6e:a5:59:97:10:4d:13:0f:40:e7:45:b3:
01:1d:56:a3:c8:05:4d:40:c1:77:86:5f:c0:93:79:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:88:B3:11:88:C5:43:0F:4B:E0:9D:5B:6E:52:4A:11:B3:43:77
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTyIsxGIxUMPS-CdW25SShGzQ3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8d:f4:7a:26:88:a9:b8:68:50:a8:48:64:09:4c:b9:81:06:
3f:03:de:3e:9b:b2:a1:b8:08:bd:da:2d:c0:d9:74:d8:ba:6a:
aa:ca:ed:f3:e7:2f:43:fc:90:18:57:9b:08:2a:d3:64:c3:54:
8f:14:ec:bf:18:e8:cd:be:fa:0f:fb:1b:e8:b9:c1:fb:10:7b:
6c:88:ec:7a:99:95:ba:a6:65:52:af:19:48:62:66:ed:c7:59:
21:3a:bf:5a:48:e0:f6:49:f8:8d:86:18:7a:9d:11:61:2b:63:
fa:ed:b1:3c:46:e6:22:1b:02:d2:5b:ec:df:d5:fd:58:a1:02:
ca:64:6d:a3:52:df:c1:48:a5:db:39:75:4b:eb:8c:eb:38:83:
13:ab:4c:ca:e1:6a:67:e9:f9:45:61:51:8e:9d:d6:1f:1b:16:
bf:09:e0:10:de:0b:08:de:de:fc:84:31:b9:bb:32:c8:a1:08:
99:1c:48:93:89:de:c3:c6:2b:a9:96:05:1a:dd:25:f6:91:00:
d6:f4:c3:a1:18:71:56:dd:28:8b:02:2b:70:58:2e:25:96:9f:
0a:e5:34:98:c6:6c:22:7f:69:43:8c:f6:62:65:ba:6b:32:96:
60:3b:cf:87:9e:10:49:fb:b2:e3:33:3f:dd:2e:6e:77:da:f4:
c5:ab:04:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org