Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/TDl74XvRALi2Q91KcENADtA61cQ.roa
File: TDl74XvRALi2Q91KcENADtA61cQ.roa (raw, json)
Hash identifier: D17/i97DuPsV5NioYTCfIyKhp2wMqvUuc7+F58QN74U=
Subject key identifier: 4C:39:7B:E1:7B:D1:00:B8:B6:43:DD:4A:70:43:40:0E:D0:3A:D5:C4
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: CA60
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/TDl74XvRALi2Q91KcENADtA61cQ.roa
Signing time: Tue 11 Jan 2022 11:10:27 +0000
ROA not before: Tue 11 Jan 2022 11:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29480
IP address blocks: 195.149.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51808 (0xca60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jan 11 11:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c397be17bd100b8b643dd4a7043400ed03ad5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:9b:e6:a7:9b:f4:c4:df:c3:1e:d3:01:a2:
26:60:e9:ca:3c:25:05:c5:59:29:ce:a7:59:de:a0:
c9:7a:c5:59:a1:63:4d:76:82:47:08:83:17:59:83:
06:64:9b:9f:ed:35:f4:33:67:11:ff:5e:a0:2b:26:
c0:54:9a:9a:b7:47:e1:87:0f:99:b9:b9:43:33:f3:
f7:d4:44:31:86:8e:80:cd:14:66:ec:1b:b3:75:8d:
ca:f4:e5:47:fd:21:5d:a6:0e:e4:1d:96:a1:62:9e:
1e:39:fc:90:2a:ce:e8:e8:57:39:b0:d7:d0:74:5e:
16:b5:57:ac:a7:93:77:fd:32:e3:16:ed:a4:33:96:
f3:69:a6:51:0e:18:5f:a6:b9:52:7e:3e:9c:c6:ad:
2b:7f:98:b3:39:86:64:6d:82:63:42:a1:80:e3:70:
6d:1b:28:93:17:6f:66:d4:d8:0f:06:f3:a3:4a:4c:
5c:08:9d:d6:e6:9c:a8:c2:3f:c0:a3:08:9c:da:fc:
c5:c3:af:64:1b:65:27:40:b6:eb:7d:1e:d8:28:7d:
70:8c:15:4b:2f:21:48:c7:92:2c:dc:d9:09:36:0f:
3d:64:e9:d8:18:60:38:b5:cb:d2:62:c2:66:1e:d9:
22:cb:8e:df:fa:f1:e5:bc:aa:3e:14:23:ed:a7:65:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:7B:E1:7B:D1:00:B8:B6:43:DD:4A:70:43:40:0E:D0:3A:D5:C4
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/TDl74XvRALi2Q91KcENADtA61cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:43:9f:62:91:a9:84:23:1d:26:6b:34:fd:12:d7:33:db:33:
6a:5f:f8:5e:11:e3:c2:08:89:0a:99:5a:d0:f6:22:d9:d7:5a:
be:ae:48:b4:c8:8e:5b:e1:cd:70:8a:32:04:b1:ad:07:67:c9:
64:9c:d8:26:92:f3:84:55:d6:0d:00:55:ea:d0:f9:ae:36:ac:
a8:91:8e:5a:4a:83:ad:12:b8:0c:18:26:64:3b:61:4d:c1:5a:
31:d8:b3:4b:e0:ac:b2:9a:7b:b5:57:8c:7b:e0:e2:24:55:e4:
f0:1a:d1:95:10:6e:2d:28:84:e5:1e:cd:b7:f4:e2:da:7a:a4:
ec:08:1c:e2:f3:38:de:de:68:17:b5:69:96:34:41:df:a1:96:
c4:d0:be:38:58:bb:a7:96:b5:9d:77:09:de:ae:ec:a5:84:3d:
08:b7:b0:3e:9e:8d:22:bd:39:a1:94:16:8a:15:56:c0:68:b5:
4d:69:4f:77:ce:49:1f:4f:b3:7f:8d:77:96:4e:5d:66:90:50:
8c:f7:9c:3e:cf:3c:2f:2a:2e:5f:f2:a3:b8:31:e3:c9:4d:09:
e4:c9:26:58:c4:18:eb:cb:5d:f7:92:9e:f4:f4:79:8a:a3:6d:
9a:5f:72:73:a3:d8:7a:62:6e:4f:15:32:06:0c:cf:09:88:0c:
80:4f:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:58 2023 by rpki-client on console-ams.rpki-client.org