Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/TzT3BpqHTLGLbzSclYnyTgbMW3c.roa
File: TzT3BpqHTLGLbzSclYnyTgbMW3c.roa (raw, json)
Hash identifier: UAo0qpG94Hc7tCGu+qsPvCy4Y4wAz83g7L+gcibpBN8=
Subject key identifier: 4F:34:F7:06:9A:87:4C:B1:8B:6F:34:9C:95:89:F2:4E:06:CC:5B:77
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 04007871
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/TzT3BpqHTLGLbzSclYnyTgbMW3c.roa
Signing time: Sat 01 Jan 2022 13:54:48 +0000
ROA not before: Sat 01 Jan 2022 13:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 193.163.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67139697 (0x4007871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jan 1 13:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f34f7069a874cb18b6f349c9589f24e06cc5b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:d0:89:c0:c8:7c:60:ce:e0:cd:50:dd:e8:
55:d7:c6:63:c7:52:51:38:33:d6:d8:d8:d3:8f:40:
ce:54:0c:ea:81:d2:d6:26:3d:09:51:bf:6a:99:02:
3f:fe:ab:73:1d:69:eb:fa:d1:71:77:d4:90:89:5b:
51:ac:50:36:53:4f:1d:f1:50:6a:d4:05:1e:52:4d:
e2:de:91:a9:fd:01:07:83:83:05:62:f6:4f:0b:d4:
4b:4b:d5:57:6b:18:5d:7e:5c:9b:28:3c:54:1a:64:
d8:92:03:db:2c:49:ec:fb:2b:6c:50:2f:dd:c8:39:
35:40:8e:0a:d3:d2:9d:7b:e8:0e:aa:77:3e:45:de:
86:98:96:0c:91:05:1b:93:59:8f:ee:81:6f:35:0a:
a6:78:49:97:4d:3a:9f:ad:d5:74:39:cf:94:f5:fe:
a3:a0:a1:b9:1f:f8:e0:04:90:6f:b6:39:d3:94:de:
64:97:81:b5:60:31:d3:12:66:85:3d:1b:7e:de:c7:
f6:5e:21:5d:6b:f9:5d:1b:ae:02:44:6b:cc:01:e3:
2b:41:18:08:30:d3:f3:05:ea:76:f2:26:20:bd:d3:
ad:04:c2:e1:6d:31:3b:af:34:3b:d7:10:80:6a:df:
e4:cd:52:9c:ee:81:97:e1:ec:fe:65:58:74:c2:98:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:F7:06:9A:87:4C:B1:8B:6F:34:9C:95:89:F2:4E:06:CC:5B:77
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/TzT3BpqHTLGLbzSclYnyTgbMW3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d8:6f:28:ab:ac:85:7c:7f:3a:b8:4c:87:dd:c3:46:65:ca:
6f:c1:1c:53:92:75:b4:08:c4:13:61:ce:c4:d9:58:1a:22:08:
38:ce:b3:85:99:a6:be:83:2b:d9:02:ac:32:7a:f7:79:42:9b:
44:40:ab:17:13:68:1a:5c:bd:43:aa:d6:74:41:ed:cd:18:5e:
a1:98:2c:3e:3e:08:6d:37:3c:86:b8:d8:06:16:4b:d3:4e:57:
7d:a3:cd:04:6c:d3:78:af:3d:92:b2:82:cb:3b:aa:d9:f1:c0:
ab:0d:ab:ab:e8:0e:e8:98:ca:a2:bd:8b:ba:c1:33:db:83:c9:
dc:31:96:0c:be:9e:04:76:d7:4a:77:e8:94:e7:cc:9c:86:95:
b4:a9:c0:ec:c2:25:49:b0:69:63:a7:13:19:4d:11:a3:66:8c:
c8:e9:ec:cf:44:f0:19:32:68:74:a7:a8:76:13:2f:17:1b:fc:
51:43:cf:61:49:df:47:31:fa:85:0a:f5:2f:65:69:85:d3:ab:
a5:78:50:1f:89:4c:df:7d:ca:1d:b5:3e:37:aa:23:20:92:9e:
af:18:c4:4d:d8:b1:c1:f1:d8:34:2f:da:be:e5:9b:b4:33:ca:
e1:43:15:d2:54:8c:a7:58:df:d3:47:40:46:b9:ea:41:2b:63:
03:cd:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:17 2025 by rpki-client