Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/TcEio5xMKxsm9i467GlsivzywG4.roa
File: TcEio5xMKxsm9i467GlsivzywG4.roa (raw, json)
Hash identifier: yOdIjl47zolN0yfhccArYiC0lG8eOwz13fmxfIhTnYc=
Subject key identifier: 4D:C1:22:A3:9C:4C:2B:1B:26:F6:2E:3A:EC:69:6C:8A:FC:F2:C0:6E
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0B84C270
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/TcEio5xMKxsm9i467GlsivzywG4.roa
Signing time: Sat 01 Jan 2022 05:53:42 +0000
ROA not before: Sat 01 Jan 2022 05:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2635
IP address blocks: 195.234.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193249904 (0xb84c270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Jan 1 05:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dc122a39c4c2b1b26f62e3aec696c8afcf2c06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:3c:66:ea:71:a5:b2:44:cf:3c:02:e4:b6:
8a:9f:ed:fb:6a:bc:71:fb:13:cf:e6:71:20:09:86:
a5:54:e4:84:ed:c2:65:90:21:ab:c6:db:66:2e:20:
6f:01:94:39:b6:0d:7c:4d:00:8e:0b:f1:9b:53:83:
d2:de:23:ed:61:7c:e9:d3:63:b8:cd:05:58:da:6c:
9b:55:1b:0b:7d:f2:f9:e8:0c:0e:25:36:02:33:80:
c2:bc:b3:30:67:9c:31:9c:42:f1:d0:15:39:b6:21:
7a:00:8d:88:5c:1d:40:d0:70:dd:65:64:95:65:56:
8a:fa:00:ab:a8:c0:c0:17:52:e8:52:58:9d:dd:c0:
ff:6f:48:47:d5:ca:41:42:e9:18:4c:1a:9c:b5:d9:
ce:30:b0:30:c2:07:e6:eb:5f:85:98:3d:cb:af:40:
ac:bd:bf:82:f6:e4:6e:20:62:62:1a:da:cd:47:5f:
3f:87:5a:d7:72:66:f2:b9:32:d2:67:4b:4a:96:9d:
c3:da:b0:5b:86:d3:5e:2c:27:1b:5d:cc:f1:8e:17:
6d:36:f4:ef:f3:0d:22:b9:43:86:6b:fd:6b:bc:e9:
b8:65:0f:7e:62:46:22:66:24:0d:3a:4e:ac:ff:b0:
3d:85:40:d1:44:ff:e9:4a:bf:88:1b:df:40:a3:0e:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:22:A3:9C:4C:2B:1B:26:F6:2E:3A:EC:69:6C:8A:FC:F2:C0:6E
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/TcEio5xMKxsm9i467GlsivzywG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.108.0/22
Signature Algorithm: sha256WithRSAEncryption
45:1a:a5:3a:48:52:5d:9c:d3:47:25:77:cb:ac:d8:b5:85:a6:
8e:0b:db:8b:dd:98:5a:fc:43:52:fe:77:4d:80:6a:b0:28:43:
1c:c1:a3:65:23:89:3f:1a:b8:87:40:f3:13:92:dd:71:00:06:
c2:67:89:86:46:8f:5f:5f:45:3b:82:f3:7d:e3:bb:00:3c:3f:
ad:71:5d:45:83:a6:c0:63:22:da:93:35:f9:81:ec:12:5e:89:
3c:2e:0a:41:ed:70:77:d0:2a:3d:11:7b:6e:6a:6c:94:f2:97:
fc:e9:0c:9d:17:a6:f5:08:4e:ad:ba:63:f8:c2:7a:f9:2c:ea:
86:49:b0:49:4b:23:e0:43:59:27:00:82:7b:b4:44:d9:84:7e:
0e:6f:87:f3:63:11:21:f3:bc:d6:15:00:84:9d:b2:b7:eb:13:
2b:31:aa:da:6e:5b:4b:df:c1:e0:01:2f:19:02:62:57:f6:80:
c4:79:3f:ab:26:59:76:f4:4d:27:ba:9b:53:19:26:bb:ef:34:
b3:8d:22:ec:e7:31:c4:46:8e:07:6d:f3:bd:db:94:63:43:c8:
83:a8:12:d6:35:67:3e:51:9c:63:b9:fb:e7:0e:1e:3c:50:e3:
26:47:b7:24:aa:57:8b:de:41:7a:07:f2:56:4f:67:b7:b2:ae:
28:72:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org