Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa
File: 6g0iW01iV8ji994B37nUMCw_Tpg.roa (raw, json)
Hash identifier: P5ESylDrLDA6WLUEBS00+2mBmnSt/sKbyq1YDrHy3Z0=
Subject key identifier: EA:0D:22:5B:4D:62:57:C8:E2:F7:DE:01:DF:B9:D4:30:2C:3F:4E:98
Certificate issuer: /CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
Certificate serial: EE0B33
Authority key identifier: DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa
Signing time: Sat 01 Jan 2022 10:02:59 +0000
ROA not before: Sat 01 Jan 2022 10:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.35.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15600435 (0xee0b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0068373933ff0f6e5dfe667a55c8d557d3455c
Validity
Not Before: Jan 1 10:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea0d225b4d6257c8e2f7de01dfb9d4302c3f4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:a5:7c:31:62:f8:9e:60:13:90:da:ae:af:
d2:43:14:c7:a9:88:e8:b9:e1:29:86:48:ae:06:00:
c2:b7:2b:cf:04:77:f0:09:9e:42:99:3a:50:57:0b:
17:7a:a3:36:6d:ab:2f:f8:12:49:50:94:1f:a0:67:
20:51:50:de:18:58:de:b5:fa:82:0c:3e:5a:2f:46:
f3:12:c8:87:7d:c8:1d:35:9d:1c:39:4d:a2:a4:7a:
76:b9:b7:0f:34:e3:cd:78:37:42:49:b0:a2:8b:98:
16:f9:2e:0e:71:71:e0:e2:48:05:2d:84:93:d1:ba:
e1:ff:1b:4f:03:ae:74:66:84:7c:38:84:1f:75:78:
76:f4:ef:57:64:4f:78:14:73:c9:a1:8a:c7:1b:f5:
b9:73:8b:10:e2:90:88:4f:18:7c:a0:69:6f:a6:ef:
02:47:a7:2a:9e:5d:58:d4:b6:da:b2:de:c1:96:4d:
8b:c7:3f:e8:17:52:cf:d8:e2:bf:fe:18:97:7e:42:
c0:3a:69:a0:f1:52:16:c6:d7:65:e3:43:d4:14:ad:
57:ad:9c:95:9a:24:de:57:9a:84:65:53:6e:90:bb:
70:ab:d2:0f:a5:04:48:45:f1:ee:a0:b7:ee:a6:ff:
65:e9:a4:7e:a2:f4:58:5b:cc:cf:33:63:7c:c1:27:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:22:5B:4D:62:57:C8:E2:F7:DE:01:DF:B9:D4:30:2C:3F:4E:98
X509v3 Authority Key Identifier:
keyid:DD:00:68:37:39:33:FF:0F:6E:5D:FE:66:7A:55:C8:D5:57:D3:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QBoNzkz_w9uXf5melXI1VfTRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/6g0iW01iV8ji994B37nUMCw_Tpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0f8525-0fbc-4402-9a3e-cf2743a9d962/1/3QBoNzkz_w9uXf5melXI1VfTRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.229.0/24
Signature Algorithm: sha256WithRSAEncryption
62:12:b7:f3:b8:44:eb:b7:29:c5:0c:8a:94:28:12:4f:70:87:
ef:bf:ce:af:17:d2:81:5c:f0:c5:d8:2a:fc:59:51:5b:e5:0e:
6a:14:1f:92:92:29:56:4d:ea:a2:42:cc:2f:d7:89:97:1e:95:
ac:de:12:d0:7e:88:2a:20:9f:06:ba:c6:53:84:67:3c:96:78:
94:17:b4:ea:49:da:1a:65:d5:8c:be:df:f1:47:ba:9f:c1:88:
a4:d0:15:7b:7e:9a:60:30:c9:20:ac:41:68:70:c1:fe:08:72:
79:25:1c:c3:fc:49:c2:22:c5:d4:ca:6f:b0:8f:9e:ff:1a:f7:
7c:57:ba:aa:77:c7:70:03:c3:31:32:6c:e6:4c:cc:a2:75:69:
ac:ca:6e:4b:5e:26:52:ea:3d:03:36:bf:6d:9c:24:a5:b4:6d:
e1:c2:b5:68:fb:95:dc:33:7c:57:1f:d7:5c:92:52:92:a2:bb:
53:52:99:76:80:98:1e:18:ea:ab:8d:5a:00:aa:f5:b7:78:4c:
5e:98:b5:a4:bf:f3:1a:1e:b5:a9:40:7f:1a:a0:b3:6f:51:4a:
0b:52:64:28:b9:82:be:8f:7f:bb:40:8e:6c:01:30:ff:a1:4c:
1e:18:f1:56:08:ce:2f:97:f7:88:ce:f1:d2:f3:29:66:65:49:
5e:66:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:53 2023 by rpki-client on console-ams.rpki-client.org