Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/tyVt_adXD64CPI08QMrgYHsEd0w.roa
File: tyVt_adXD64CPI08QMrgYHsEd0w.roa (raw, json)
Hash identifier: 10yMOCFr+Ml+yXIarvNr5zmzYncifUwV2aU/2wpUhE4=
Subject key identifier: B7:25:6D:FD:A7:57:0F:AE:02:3C:8D:3C:40:CA:E0:60:7B:04:77:4C
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 13AAA782
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/tyVt_adXD64CPI08QMrgYHsEd0w.roa
Signing time: Sat 22 Jan 2022 21:37:23 +0000
ROA not before: Sat 22 Jan 2022 21:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210973
IP address blocks: 212.236.10.0/24 maxlen: 24
212.236.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329951106 (0x13aaa782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 22 21:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7256dfda7570fae023c8d3c40cae0607b04774c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:41:c3:96:3e:15:fe:ac:21:d2:88:c0:75:
a6:02:90:d6:10:4e:15:40:9c:ce:06:86:34:fb:e5:
79:6b:59:91:10:25:1e:7c:ac:a1:f8:be:47:06:45:
9b:81:8f:25:64:c7:fc:d6:8d:11:0a:db:1c:5d:c3:
7e:e5:af:2f:69:e3:9d:87:0e:ba:05:28:00:d0:e7:
82:92:ed:7f:c6:ce:76:70:b8:69:44:6e:8e:7c:25:
ee:d0:65:29:12:6f:a4:cd:f0:2d:37:36:2a:8c:67:
e5:9a:89:7b:cd:3f:6c:25:69:5e:ff:50:c8:d1:0e:
1c:d5:28:db:b9:63:7b:fa:55:b7:bc:45:de:1c:44:
06:30:c4:71:1c:30:77:10:4b:f0:1a:c2:a4:0b:c8:
87:ab:36:d0:7d:33:d4:1b:9b:58:cb:96:f9:58:61:
db:b8:19:c0:79:35:74:c3:cd:69:9d:a7:db:6e:91:
3f:f1:5e:7b:34:32:7f:e9:85:5b:a7:89:9c:24:48:
21:83:37:06:d0:fc:e1:2c:ba:89:5d:05:7b:0e:fc:
da:d0:e6:24:4e:43:ef:3b:99:cb:d5:72:80:86:9a:
a7:4f:b5:af:cd:88:e6:6f:f4:dc:9e:a7:dd:47:e5:
e4:cc:ee:09:57:eb:c5:79:ad:32:b0:6b:e1:e9:66:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:6D:FD:A7:57:0F:AE:02:3C:8D:3C:40:CA:E0:60:7B:04:77:4C
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/tyVt_adXD64CPI08QMrgYHsEd0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.236.9.0-212.236.10.255
Signature Algorithm: sha256WithRSAEncryption
53:df:73:43:28:7f:b6:57:f8:5b:1d:ef:fd:3b:c0:ec:e2:d6:
11:2d:22:d5:b5:37:0a:5c:6c:1e:06:35:03:26:4f:c1:c3:42:
b3:c5:c2:81:9f:b5:22:4c:79:4e:ca:dc:fd:25:e6:b0:e4:e3:
0b:e0:ee:0c:a9:e0:e0:f4:d7:03:a5:dd:1e:f3:21:80:17:d3:
79:92:1c:16:6f:e8:63:de:9d:76:f9:38:0c:d9:9c:b3:8d:cb:
75:9c:53:cb:73:c3:17:19:4c:d8:21:f6:c0:85:5a:ee:b1:fe:
78:2e:b3:17:8f:af:a6:fb:a3:ee:5c:90:84:a8:78:1a:76:b6:
6a:75:d6:70:d2:a2:11:26:26:1e:cb:a2:f5:21:6d:63:65:7f:
bf:74:de:ab:2b:e6:f3:80:f0:91:5c:f8:27:6f:a4:04:73:6e:
de:69:72:c0:c0:d8:3b:bd:ec:30:c1:e1:59:12:6a:58:7e:a8:
22:c1:5c:4e:10:76:88:05:6e:a2:85:03:3d:69:30:83:5f:cd:
7d:f2:17:cd:5a:e7:88:92:e8:b8:06:ea:be:85:22:00:6f:62:
c1:f8:5a:74:9f:8a:ab:37:a3:3d:6f:3f:fc:73:bc:85:02:ec:
e6:53:8c:53:cb:1f:3c:04:c4:69:12:ff:fb:70:df:74:bc:8a:
23:d1:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:49 2025 by rpki-client