Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tvp5-xej_besVva9W4TgNzIiqxY.roa
File: tvp5-xej_besVva9W4TgNzIiqxY.roa (raw, json)
Hash identifier: pjC3g+R/5XraSV+g5qeiYTDyGccAiF0WDmLjhfRR8oM=
Subject key identifier: B6:FA:79:FB:17:A3:FD:B7:AC:56:F6:BD:5B:84:E0:37:32:22:AB:16
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 16F54741
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tvp5-xej_besVva9W4TgNzIiqxY.roa
Signing time: Sat 01 Jan 2022 14:55:46 +0000
ROA not before: Sat 01 Jan 2022 14:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.77.1.0/24 maxlen: 24
185.77.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385173313 (0x16f54741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 1 14:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6fa79fb17a3fdb7ac56f6bd5b84e0373222ab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:72:84:49:28:45:38:f1:69:c7:d8:fd:39:
17:f7:46:dc:0e:a9:ba:2c:8f:a0:de:10:a2:32:b5:
80:d1:39:cd:08:10:f7:1e:7b:94:4e:2f:14:c7:bc:
81:c0:06:ab:9f:9d:35:db:1e:44:c6:f5:22:3f:cf:
c1:70:d0:52:b1:4c:bf:b5:95:63:00:f2:46:92:ed:
52:f0:8f:b5:f3:5c:00:b5:9b:a8:1d:89:70:be:be:
a4:d2:e1:3a:62:22:31:e1:6e:9c:63:b5:f7:e6:8a:
1b:37:91:44:2c:8a:91:19:e1:41:6b:27:c8:93:15:
16:ad:7d:4b:08:df:7b:b4:f1:1e:be:44:fb:55:b4:
a1:1b:a2:c0:f9:c4:aa:a6:e5:3a:db:6e:c2:e2:af:
45:6b:09:0b:39:7a:2f:a6:32:7d:8c:61:da:bb:11:
41:d7:8b:81:0e:aa:19:59:ac:ce:25:5d:07:58:90:
f6:3a:01:f3:fd:6e:ab:34:2d:d2:a7:64:43:c3:05:
37:75:c9:b0:5c:aa:ab:00:ff:b0:6f:b7:d0:97:15:
8e:39:18:9f:24:69:b1:fb:2b:a7:a6:e3:f4:65:e4:
d6:c2:a9:98:4b:dc:1a:ad:2f:d9:d2:53:88:a9:e2:
1a:6e:a6:04:27:af:2e:c8:26:1c:1c:3f:f7:83:ea:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:79:FB:17:A3:FD:B7:AC:56:F6:BD:5B:84:E0:37:32:22:AB:16
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tvp5-xej_besVva9W4TgNzIiqxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.1.0-185.77.2.255
Signature Algorithm: sha256WithRSAEncryption
76:8c:c8:6e:36:85:42:61:75:f2:75:4e:6e:2d:62:e1:66:b5:
ba:fd:10:d5:51:9f:36:da:61:dc:0c:78:37:8f:73:8b:48:56:
18:99:12:9f:e6:37:04:d2:2a:bc:ad:b5:5a:50:ae:d9:6a:8c:
32:99:c1:c1:0e:b2:38:93:ae:ee:af:c3:bd:36:21:47:30:9d:
64:7b:b5:96:b0:c6:f3:a0:fb:48:92:94:b8:6c:b5:be:10:f1:
4b:9f:a8:c4:24:b8:16:44:72:85:2e:05:a9:97:32:5b:41:7e:
24:3e:5b:64:ef:44:34:0a:e4:63:44:31:4d:cd:7f:d1:25:3b:
30:ad:82:ad:c9:e8:24:c7:e0:ab:64:5b:04:2f:82:f5:0d:80:
25:10:88:b0:48:4c:b2:af:95:af:79:80:e1:7c:cb:39:78:95:
46:f0:3a:53:35:fd:a0:e1:c6:fd:e7:a0:7d:b1:27:1f:6a:c4:
50:44:8d:47:fb:0d:ee:41:cc:3b:48:d9:d8:c8:d1:71:c2:fb:
db:63:ee:f8:49:0a:84:bf:1b:fb:64:43:3d:3d:f6:1b:c3:62:
d7:28:f5:9f:d2:38:72:3b:3f:e6:72:f4:ad:37:ad:07:af:b8:
41:d7:65:2d:82:0d:95:bf:fc:e2:ba:d5:2c:69:90:d7:61:e7:
24:16:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-fra.rpki-client.org