Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/TLT2zncwTs4uiVSS7vb1F-XYqAQ.roa
File: TLT2zncwTs4uiVSS7vb1F-XYqAQ.roa (raw, json)
Hash identifier: la0/DwLfcN1d2dQAYmp2HCNTEI9tBuI7EwBQMJkymcI=
Subject key identifier: 4C:B4:F6:CE:77:30:4E:CE:2E:89:54:92:EE:F6:F5:17:E5:D8:A8:04
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: 5E31
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/TLT2zncwTs4uiVSS7vb1F-XYqAQ.roa
Signing time: Tue 25 Jan 2022 18:23:28 +0000
ROA not before: Tue 25 Jan 2022 18:23:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.187.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24113 (0x5e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: Jan 25 18:23:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cb4f6ce77304ece2e895492eef6f517e5d8a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:7f:48:c9:9f:21:f2:11:c9:47:36:bc:d1:
3f:28:10:1e:8f:ec:37:04:18:4d:8e:3f:15:ce:cc:
e2:8d:4a:6a:cd:73:21:fc:d0:33:b4:35:ce:84:a8:
c2:9c:4d:69:2e:81:98:60:f0:4e:02:45:f9:22:4c:
21:b3:a1:23:59:88:07:75:47:58:fd:50:1b:82:32:
82:de:7f:51:83:9d:4d:83:b0:11:60:2f:26:47:a9:
be:8b:95:1e:b6:9b:27:cb:ae:c0:18:4e:da:ff:b2:
99:3f:aa:7a:da:77:44:03:54:70:6d:37:c3:9a:7e:
dd:2c:7b:56:9f:32:c8:5a:f3:08:22:fc:42:b2:aa:
0c:a2:c1:da:75:fc:63:c1:9e:e3:27:36:ec:73:dd:
1b:eb:f7:32:f1:29:b4:0b:5e:ce:dd:4c:73:de:d6:
9b:be:ab:85:fe:44:fa:65:84:33:35:6d:40:48:13:
05:5f:5a:98:b8:1c:09:bd:31:f6:f3:88:9a:6a:1b:
ba:71:5f:da:c2:13:63:79:91:79:e9:7b:ad:78:3e:
cd:6e:20:0c:b2:a3:92:ae:ba:6f:95:e8:38:02:70:
40:9a:18:05:bb:b5:dc:1e:76:56:11:a4:91:5e:f2:
72:a2:5d:1a:1c:65:8e:3e:40:d0:05:0e:98:b8:e7:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:F6:CE:77:30:4E:CE:2E:89:54:92:EE:F6:F5:17:E5:D8:A8:04
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/TLT2zncwTs4uiVSS7vb1F-XYqAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.18.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:43:90:ce:82:07:27:0d:77:d5:10:27:bd:21:51:d2:19:
a9:37:73:22:db:54:68:41:07:cf:23:ec:7c:0c:1d:4d:a8:fd:
b4:89:4d:9b:7e:00:e2:a2:fc:f7:d9:3e:4c:40:43:ba:04:6e:
ef:de:07:0a:61:c3:b7:2f:e1:f1:22:53:14:6b:64:8e:07:fc:
20:cb:7a:3b:02:45:8f:18:ef:c6:5b:d6:d1:17:dc:95:2c:3b:
28:1a:55:a0:61:f6:d8:78:90:37:f7:19:f8:f0:06:30:c2:5f:
88:60:99:f3:e9:5b:e3:a2:5b:3e:ee:e6:3d:78:ea:34:6a:ba:
0e:3f:65:c8:d2:f9:55:27:70:7d:32:e9:eb:a3:d6:7d:92:c5:
b9:95:ff:cf:bb:0c:47:72:ea:14:a9:43:b1:02:88:1a:c0:bc:
a5:33:bd:e8:c5:f2:c6:18:80:11:dc:60:62:ad:87:f9:72:08:
13:50:4b:7f:07:70:2c:b1:81:59:56:af:0d:d0:1b:4d:7c:a4:
59:92:10:ef:57:6d:f9:03:61:fe:59:77:63:20:bd:75:68:03:
6d:ba:7f:37:f9:ee:f2:a0:0e:d3:ee:73:12:9f:f7:61:90:cc:
3d:47:2a:b8:ca:ef:c8:b3:8a:94:f7:59:ff:d3:29:e0:95:c5:
f8:f6:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:48 2023 by rpki-client on console-ams.rpki-client.org