Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa
File: TOazzzFUD6i-Hpmia7AAhNQ53ME.roa (raw, json)
Hash identifier: 1GiYirB9wcwJAi8sISWUGgKSIPSuSFP4MFUT4Z8wxXw=
Subject key identifier: 4C:E6:B3:CF:31:54:0F:A8:BE:1E:99:A2:6B:B0:00:84:D4:39:DC:C1
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 03A83EC3
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa
Signing time: Sat 01 Jan 2022 15:58:14 +0000
ROA not before: Sat 01 Jan 2022 15:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199431
IP address blocks: 94.247.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61357763 (0x3a83ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 15:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce6b3cf31540fa8be1e99a26bb00084d439dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a5:9e:30:78:c1:e9:d7:8e:1a:71:53:95:cf:
90:29:da:c1:89:27:87:c6:7c:04:df:15:88:90:6a:
3d:e8:cd:05:04:0f:26:76:74:06:f0:5f:24:a1:7f:
db:96:a6:1d:b1:18:df:0e:b9:ea:1f:1d:19:3b:94:
05:4b:53:d5:39:e2:c0:52:07:45:50:64:69:83:fd:
e1:3e:24:f5:35:bc:d9:de:b0:93:32:70:d2:13:9d:
51:5a:78:d0:76:d7:71:4c:c2:68:df:be:12:48:81:
cb:57:03:73:7f:3a:a2:ca:d1:18:58:78:fb:f5:d9:
a2:69:46:0f:d4:83:3d:67:68:c4:ee:ce:21:8c:7b:
69:43:b1:b4:a7:0a:52:8d:ee:0d:17:d7:1d:49:93:
a9:79:99:f1:06:f8:9e:ed:78:29:2c:a8:dd:90:65:
0a:f6:0f:c8:5d:48:13:eb:65:50:4a:5a:0e:3f:77:
d6:57:7a:42:cb:01:c8:9c:6a:a5:06:f6:11:17:6a:
2a:2e:af:5a:9a:a7:dd:34:50:30:49:da:79:d9:35:
ad:58:cd:60:39:1b:2e:76:13:dc:5a:d8:0d:43:02:
b6:f1:ac:e0:d5:a5:13:5a:a8:a5:e3:cc:c6:bf:e7:
c6:cb:46:3c:64:86:df:52:d2:4a:11:00:10:d9:77:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E6:B3:CF:31:54:0F:A8:BE:1E:99:A2:6B:B0:00:84:D4:39:DC:C1
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0d:e0:41:70:93:44:c1:43:a5:af:ff:67:42:a4:62:c2:2e:
42:10:92:33:b1:f1:67:77:93:6b:85:73:7a:11:36:d0:1e:c6:
00:d0:4b:4b:60:6f:6c:39:12:32:c4:82:13:4c:b8:00:17:fd:
b3:c5:b9:ef:4b:c8:f0:22:6c:e1:ec:fd:b4:12:26:35:05:3f:
7c:08:d6:27:db:4c:47:7a:89:f3:f9:97:0e:fe:4e:66:51:8a:
fd:96:5d:1b:ad:23:b9:d3:86:bf:4b:49:c7:1a:3d:f4:d3:79:
70:da:ec:1e:b0:00:bd:df:73:38:90:79:5b:41:e9:c8:60:6e:
01:0a:ba:2e:31:61:5f:d1:3f:9a:e2:dd:bd:d0:1e:ea:5f:98:
fa:93:f8:7a:8a:77:99:35:3b:2a:57:ca:d3:f0:c0:5c:3b:59:
db:1e:32:b8:ff:fc:b7:94:a4:e7:c8:63:fd:78:05:7c:5b:cb:
93:3b:be:ab:36:1e:5f:f7:a8:c7:83:8b:09:d0:32:8d:8e:03:
61:5d:a6:6d:45:d9:b8:02:c5:2d:f4:4f:27:b7:3c:9e:58:dc:
a7:7c:c9:4b:11:32:f9:35:5c:8a:2e:df:a0:4a:b9:73:81:f5:
80:be:f6:00:18:96:a4:09:50:65:52:0f:19:90:fa:fa:8a:67:
c0:a4:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org