Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/TVP6OVkqrB63VfCnodVmYMOBywM.roa
File: TVP6OVkqrB63VfCnodVmYMOBywM.roa (raw, json)
Hash identifier: UOUdn81eHCGAzfqIWChnK9Bc4Ox7dPorlc4Tphrh1f8=
Subject key identifier: 4D:53:FA:39:59:2A:AC:1E:B7:55:F0:A7:A1:D5:66:60:C3:81:CB:03
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 07F95F8C
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/TVP6OVkqrB63VfCnodVmYMOBywM.roa
Signing time: Sat 01 Jan 2022 04:51:37 +0000
ROA not before: Sat 01 Jan 2022 04:51:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15532
IP address blocks: 91.206.104.0/23 maxlen: 23
194.11.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133783436 (0x7f95f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jan 1 04:51:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d53fa39592aac1eb755f0a7a1d56660c381cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:95:36:d6:b6:f3:2c:23:57:1b:9a:02:3d:
f0:be:c5:f2:65:cd:8b:5c:b3:0b:af:ab:fa:09:7a:
5a:b1:e4:69:c6:48:15:00:00:25:26:aa:dc:35:2c:
d2:ef:42:b7:3c:6a:e2:90:af:6f:ec:78:e1:52:f6:
d9:8c:0e:90:44:4f:9b:a2:06:58:61:98:2b:f3:81:
0a:aa:00:b1:5b:47:76:d7:38:7e:cd:11:4a:7d:e1:
07:41:2b:49:b7:39:7a:8a:85:01:b8:18:a4:15:41:
73:6c:db:8c:f7:02:fd:63:4e:63:9b:99:7d:75:55:
48:ba:e2:1b:e5:e4:c5:fb:37:86:6a:5c:44:88:e2:
0d:ab:83:1d:b1:9a:68:71:6c:cf:ae:52:3d:c3:fb:
43:b4:15:09:78:1e:47:8f:c9:35:37:6d:cc:84:76:
b4:6b:37:58:65:89:71:e9:c1:fe:c7:36:75:1c:f6:
98:32:cf:28:0b:43:80:8b:2f:db:13:a6:a3:01:f2:
a0:d3:3d:e7:28:12:a0:e1:1a:98:29:8d:2d:b2:eb:
d7:fd:2b:2a:32:e3:ad:fc:32:04:e5:ae:ac:1b:50:
98:69:d8:83:5c:91:c0:c1:7c:e1:20:a9:7d:fa:51:
58:f7:65:01:34:76:8a:15:85:2f:0e:09:b0:85:38:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:FA:39:59:2A:AC:1E:B7:55:F0:A7:A1:D5:66:60:C3:81:CB:03
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/TVP6OVkqrB63VfCnodVmYMOBywM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.104.0/23
194.11.223.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4d:05:61:fc:6d:34:a1:e7:1e:76:15:93:d7:74:7a:e3:70:
27:ae:ab:ed:d0:ee:94:e0:ff:ce:9c:ea:d3:f1:45:30:2c:0f:
4c:06:6e:f9:d6:af:9d:bb:0d:55:f8:c0:5b:6c:8a:56:23:6d:
b1:34:c1:38:7f:4a:9d:17:67:e0:31:28:12:e7:42:8a:43:76:
35:7f:c6:d7:dc:35:f4:04:42:7d:ee:f4:45:70:07:0a:15:67:
fb:d4:f7:71:db:a8:25:df:ce:4b:7f:7b:55:a6:72:ad:ec:36:
4c:44:d3:8c:82:53:f9:49:02:c9:ce:34:1c:58:fa:23:2f:b7:
7a:c5:81:ca:8e:87:07:ba:16:cb:b2:14:fb:76:f7:1e:73:4e:
35:71:70:8e:c4:34:a0:6d:b2:a9:1f:99:9a:0f:e7:95:8d:6a:
cb:8a:86:4a:59:fc:c4:7a:0f:20:75:74:bb:fe:ab:74:e7:76:
e7:dc:c1:90:b6:10:74:3d:7d:18:fe:49:5c:f5:ce:88:82:97:
73:28:ee:48:98:f4:9c:d4:6a:d4:4e:25:e6:6d:db:a9:b3:df:
67:c0:d3:7b:93:19:7a:d6:ab:ba:71:1e:cf:9a:ef:d9:cf:23:
2b:89:44:8c:20:ec:78:fc:2b:6b:5c:47:00:d2:3a:ae:4a:65:
cf:9d:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org