Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/tfguu3IuZ-x12jNAKThb9sK5mKw.roa
File: tfguu3IuZ-x12jNAKThb9sK5mKw.roa (raw, json)
Hash identifier: aqFrKv5eK7wLEVk+tM7+3yaVnGYmS4g1Q7X+B8ASLzo=
Subject key identifier: B5:F8:2E:BB:72:2E:67:EC:75:DA:33:40:29:38:5B:F6:C2:B9:98:AC
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 07949BCE
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/tfguu3IuZ-x12jNAKThb9sK5mKw.roa
Signing time: Sat 01 Jan 2022 07:56:30 +0000
ROA not before: Sat 01 Jan 2022 07:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60015
IP address blocks: 193.57.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127179726 (0x7949bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Jan 1 07:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f82ebb722e67ec75da334029385bf6c2b998ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:9d:c1:2f:27:78:68:24:2a:14:76:ce:a6:
4a:bf:42:e0:69:ae:05:22:8c:2b:9c:f9:10:91:f2:
7c:3b:31:cc:4c:54:d3:c3:9e:01:af:8d:4e:0c:fe:
a5:e4:ec:25:21:c9:0d:35:64:7e:c1:b4:8d:26:d8:
e0:18:aa:76:7b:7f:c4:d3:5d:88:75:96:2b:41:6a:
7b:b3:d0:b1:b9:26:e6:c4:c4:eb:e9:ae:90:5b:1f:
80:09:03:5b:6a:eb:08:59:44:62:4b:39:9d:63:f0:
57:4c:b4:7a:27:82:5e:c2:87:32:73:e5:43:11:4f:
ff:3c:8f:72:46:7a:5f:50:7d:e2:03:b4:24:e6:60:
b7:ef:d7:71:2c:7a:7b:c7:16:ec:9b:dd:3f:05:2e:
30:44:23:87:f3:a9:ef:ca:85:4a:68:e6:35:60:9d:
c1:eb:0d:64:14:e7:d4:f6:43:6c:7c:5b:03:f7:57:
45:8f:2e:eb:87:74:64:6c:f0:c0:3b:31:2a:a2:17:
a9:41:f1:a3:c1:1a:e0:52:cd:a8:73:70:16:e6:ad:
b5:18:92:7b:e6:6a:28:a2:8f:73:66:8d:a7:3c:4d:
9d:b7:8f:97:fa:31:23:01:04:69:70:57:78:57:6a:
d3:49:5c:2d:da:d2:de:ca:a9:b2:dd:67:10:b2:68:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:2E:BB:72:2E:67:EC:75:DA:33:40:29:38:5B:F6:C2:B9:98:AC
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/tfguu3IuZ-x12jNAKThb9sK5mKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:59:71:cb:56:64:93:30:31:cf:ac:1e:dc:38:0a:8e:c3:c1:
cb:b3:8d:0a:0c:89:f8:a7:02:e5:13:c3:c8:3f:a3:70:51:92:
6c:4c:83:89:bb:1c:72:ba:4f:83:64:0e:19:74:d9:d4:c7:ae:
a6:7d:81:22:70:9b:da:2a:e2:51:16:20:e2:a5:7a:0f:59:75:
d9:66:c7:f2:6d:e7:e1:0c:ec:4c:3d:20:c9:d3:d2:a1:85:e8:
5d:23:ac:ef:90:f0:1b:16:89:3d:ae:5d:a0:78:61:c9:cf:f1:
c8:ad:a3:2a:56:b5:84:97:30:d3:d8:33:23:10:b5:67:b8:b0:
37:33:76:3f:31:52:0c:ef:e0:9e:4f:fb:39:44:5f:7f:38:60:
5a:cb:48:af:4c:3f:c0:5b:33:52:f5:fd:af:41:1b:b0:34:75:
47:10:2d:8a:75:b7:0c:98:47:5c:73:59:b2:a6:2e:77:96:3d:
1d:eb:11:5c:b4:09:b2:b0:a3:83:1e:b1:0c:a7:eb:63:36:3c:
64:4f:92:1c:d6:b1:10:63:7c:d0:d6:34:f5:f4:96:f4:bf:fb:
4d:ce:83:a7:54:da:a7:c4:e6:cf:fb:af:42:1b:f0:f6:3d:5a:
a8:0e:4a:49:1c:5d:13:f0:c7:0c:ac:9b:01:8c:5d:0e:eb:4e:
88:bf:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:24 2024 by rpki-client on console-ams.rpki-client.org