Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/TG662sqzJ9xgapDKZebAZvfxS64.roa
File: TG662sqzJ9xgapDKZebAZvfxS64.roa (raw, json)
Hash identifier: HU6oD0ByGUavOQQiuLSy5GcDgbg3F6PBvwIsY+MZyc8=
Subject key identifier: 4C:6E:BA:DA:CA:B3:27:DC:60:6A:90:CA:65:E6:C0:66:F7:F1:4B:AE
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 024E8B
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/TG662sqzJ9xgapDKZebAZvfxS64.roa
Signing time: Thu 10 Mar 2022 21:19:28 +0000
ROA not before: Thu 10 Mar 2022 21:19:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8515
IP address blocks: 195.42.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151179 (0x24e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Mar 10 21:19:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6ebadacab327dc606a90ca65e6c066f7f14bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:0a:33:b8:89:86:b9:1e:9c:35:99:3d:27:
07:4f:93:18:f9:62:d0:f6:f1:52:e6:e5:be:a9:06:
75:48:9c:08:d8:82:e1:66:01:c4:6b:37:3c:26:18:
a4:1b:37:6b:19:4e:95:ed:21:2f:7c:76:09:ca:cf:
77:0d:81:af:31:b2:89:d7:d6:be:ad:a9:5f:0f:09:
29:a7:33:e4:8d:39:64:16:56:39:dd:35:36:e8:f7:
a0:9d:99:99:8c:be:8e:b1:3e:fa:c8:59:3a:bc:05:
8b:a6:7f:10:b0:fa:25:ca:7c:9c:e8:2f:1f:ee:80:
4e:1d:52:63:b2:76:85:ff:7c:76:e9:ba:43:a5:60:
d9:2b:3d:b5:c4:44:ed:17:69:7b:be:73:29:b5:34:
9e:32:47:cf:f9:71:bd:ab:2f:85:2b:d8:1c:3e:97:
17:3c:25:35:46:b5:10:00:80:7a:1b:c2:5f:de:a5:
17:1d:ab:d5:10:7f:6b:d8:c0:8c:af:14:57:cf:a3:
92:23:a9:a4:43:2d:c3:41:e4:2b:23:a3:0e:18:01:
04:18:be:e4:06:f0:6b:56:c8:22:dd:6c:32:d2:e2:
75:36:06:0b:b7:ca:8e:8a:fd:fd:fb:7d:ad:05:9c:
f1:66:23:4d:ba:a9:1d:b7:15:1c:c2:68:ec:01:74:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:BA:DA:CA:B3:27:DC:60:6A:90:CA:65:E6:C0:66:F7:F1:4B:AE
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/TG662sqzJ9xgapDKZebAZvfxS64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.160.0/19
Signature Algorithm: sha256WithRSAEncryption
65:57:03:01:e7:e2:43:44:31:c0:1e:a7:4f:e1:99:92:96:b1:
16:ae:91:e9:72:67:6c:56:46:65:d8:57:63:ac:e7:ca:cc:bd:
79:d9:d9:3a:d8:20:8c:eb:dd:87:ef:18:ee:af:af:1d:0e:49:
58:85:4c:ff:de:5d:c1:4c:11:e5:59:0d:51:e9:dc:95:93:15:
a9:a8:a5:c7:e6:75:ab:07:0c:3b:35:9d:2f:21:6d:72:7a:33:
74:40:9d:cf:be:78:c7:bd:d6:04:62:ca:86:0e:e3:ff:03:7a:
28:c6:5e:5a:ec:0e:1a:7a:0e:eb:bc:b0:fe:e4:74:96:48:22:
b9:08:0a:97:5c:df:68:6d:57:9c:1c:e3:df:27:84:ed:09:a0:
84:8a:e9:ed:62:68:79:82:c2:ec:7b:44:91:5d:07:94:3c:b3:
f8:ff:e3:7b:18:49:b2:94:94:04:8a:cf:82:4b:ed:e8:0d:ec:
19:e3:b2:f7:d5:db:1d:7f:f4:a1:fd:64:42:e8:ee:79:94:71:
65:7a:ae:e6:34:56:d6:d5:a0:36:53:8e:d0:e1:04:57:80:45:
cd:7d:43:4a:85:4c:6f:01:8b:60:1e:56:25:57:65:ee:6a:ac:
e4:2b:c0:2f:e7:96:7c:02:07:d8:25:f9:3d:9b:36:d8:30:22:
44:92:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:20 2024 by rpki-client on console-fra.rpki-client.org