Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TDukoccJlOen6IFgyYZEoeSSgRA.roa
File: TDukoccJlOen6IFgyYZEoeSSgRA.roa (raw, json)
Hash identifier: 60EX9Fe3KTLTtrq4oY5C4KcaXwoVI8CmsQVzV2OCITA=
Subject key identifier: 4C:3B:A4:A1:C7:09:94:E7:A7:E8:81:60:C9:86:44:A1:E4:92:81:10
Certificate issuer: /CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Certificate serial: E36A5C
Authority key identifier: DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TDukoccJlOen6IFgyYZEoeSSgRA.roa
Signing time: Sat 01 Jan 2022 07:58:13 +0000
ROA not before: Sat 01 Jan 2022 07:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 79.110.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14903900 (0xe36a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Validity
Not Before: Jan 1 07:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c3ba4a1c70994e7a7e88160c98644a1e4928110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:b1:06:e2:31:75:22:dc:0d:86:05:15:38:
43:b8:2b:d5:d8:cb:b2:a7:81:97:a5:26:d3:8e:53:
36:b6:cf:ca:e7:6d:6d:8a:3f:59:91:22:0c:d2:89:
7e:ce:4c:f6:7f:c4:4e:19:c1:c1:91:c9:58:09:58:
bc:00:75:45:1d:fc:01:4b:a9:cd:a8:70:64:47:5d:
5c:cb:2e:7f:b5:ca:34:f0:d4:c2:ad:9e:a8:09:d7:
07:9a:b8:b0:c4:91:4e:0a:f0:88:6e:fb:2a:dd:89:
18:27:a0:22:b7:74:2f:0f:ef:4f:ae:4f:35:8d:9d:
5c:d2:e6:2d:99:68:5b:62:18:6c:6e:24:ef:36:6a:
e9:53:91:e1:3c:de:cd:d4:82:53:28:7f:61:e0:27:
b1:4b:7b:02:2a:30:14:0d:3c:f8:a8:d6:bd:d7:b6:
76:23:99:79:26:9c:cb:06:8a:f5:d7:f0:b7:43:96:
55:fc:06:b6:db:fd:f8:37:10:61:76:0d:92:92:9b:
34:57:68:88:4a:f9:46:14:21:da:58:41:fc:56:db:
1a:f1:ee:fd:06:23:bf:2b:ab:55:44:3b:bf:23:88:
7b:16:c4:fb:30:c5:d2:4f:3f:e7:e9:89:c4:88:92:
a9:92:15:b6:29:30:13:f9:ed:24:34:26:be:38:d1:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:A4:A1:C7:09:94:E7:A7:E8:81:60:C9:86:44:A1:E4:92:81:10
X509v3 Authority Key Identifier:
keyid:DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TDukoccJlOen6IFgyYZEoeSSgRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ae:f3:64:1d:21:cb:fc:93:18:8c:e8:8a:f0:d3:96:5b:a5:
3c:a4:6c:73:2d:99:9d:60:cc:3e:8e:4c:e1:c8:0e:2b:b8:e6:
0a:f4:7f:ee:83:a0:76:96:20:17:f1:58:0e:dd:ef:eb:de:b3:
8d:67:e8:33:da:c9:fe:be:46:bc:f8:fa:10:33:ff:76:c0:71:
ea:c2:25:42:c8:52:37:68:4e:67:20:44:54:d6:9e:59:b9:62:
14:9e:4e:ae:55:26:de:4f:95:f3:97:10:f8:b1:0b:9e:ff:38:
28:60:58:72:de:61:cf:07:58:aa:ce:e5:ad:eb:bf:e7:fb:b4:
ba:07:22:e3:70:d7:3d:d6:57:80:b2:5e:71:be:6e:f9:81:fd:
88:bf:c0:21:1f:d7:22:52:48:15:21:35:8d:85:31:2c:c6:9a:
e6:47:1d:88:c5:a7:ca:72:f0:65:a5:93:f9:3f:ca:55:0c:44:
0d:20:5b:4b:69:2c:45:4e:d0:71:76:97:d2:18:02:d5:08:c8:
1d:09:b2:ab:2a:39:07:02:f6:0d:6b:50:0e:c3:97:40:5b:d0:
ba:17:2b:aa:2a:08:37:9b:e2:92:87:13:ab:fa:7e:af:7e:ad:
b4:0c:d2:69:f1:0a:84:78:6d:59:86:d5:93:41:1c:ff:1a:6b:
78:47:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-fra.rpki-client.org