Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/T4yuAfaFfQjdvyeag_8p6Osh2XQ.roa
File: T4yuAfaFfQjdvyeag_8p6Osh2XQ.roa (raw, json)
Hash identifier: yitvxzldbjjxwRfmgBMJhO9MleMSxSUT8TVdr4Hwo/Q=
Subject key identifier: 4F:8C:AE:01:F6:85:7D:08:DD:BF:27:9A:83:FF:29:E8:EB:21:D9:74
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019A14
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/T4yuAfaFfQjdvyeag_8p6Osh2XQ.roa
Signing time: Thu 17 Feb 2022 12:58:09 +0000
ROA not before: Thu 17 Feb 2022 12:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35393
IP address blocks: 193.200.171.0/24 maxlen: 24
91.209.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104980 (0x19a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Feb 17 12:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f8cae01f6857d08ddbf279a83ff29e8eb21d974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:2b:39:7b:9a:be:72:6e:70:15:90:14:ca:
2d:b0:9a:db:ab:2f:d6:af:ff:4d:32:08:ba:7a:d5:
20:36:f6:74:ea:c8:96:eb:45:9f:f7:4e:a9:5f:30:
e4:dc:03:80:a3:c5:b6:c1:df:bc:ac:ac:bb:94:8b:
18:b5:8d:09:c3:1d:d1:42:e6:8e:5d:88:81:87:3e:
24:79:85:aa:10:fa:a3:28:86:45:a5:6c:03:30:86:
fe:f6:76:e2:c7:7a:3a:02:2e:6d:3b:30:e3:55:5f:
36:70:5b:e3:27:af:4a:71:3a:66:da:fa:ab:4c:cd:
58:80:02:be:bc:e5:ac:f7:ec:49:8e:97:25:4b:92:
b1:26:dc:e9:b0:ee:1d:be:64:a2:04:85:57:a3:c9:
fd:88:53:4d:cb:4e:49:42:e4:ab:ef:17:6e:2d:a5:
a6:26:21:60:31:3c:02:31:61:04:cf:75:68:59:0b:
f5:38:5e:bc:7d:d0:84:08:74:85:11:51:22:af:bb:
80:27:d0:35:21:d2:0b:7c:5c:f5:a7:7f:6c:36:6a:
3a:08:53:c6:54:7d:5b:65:80:bc:82:fc:43:1d:2c:
72:ef:5e:52:fc:16:6a:7e:5f:53:07:a1:89:ff:90:
f6:9c:78:8f:07:74:c0:0b:7e:8b:79:db:99:4f:18:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:AE:01:F6:85:7D:08:DD:BF:27:9A:83:FF:29:E8:EB:21:D9:74
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/T4yuAfaFfQjdvyeag_8p6Osh2XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.245.0/24
193.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5b:52:cb:87:cb:eb:f1:6c:92:e0:bf:d0:ad:df:12:26:ab:
2a:e9:ca:39:80:6e:47:85:cb:85:91:dd:d4:e3:bb:8f:b9:32:
5e:60:f0:72:a2:f7:73:5f:fb:e2:b2:eb:3a:ef:5e:ef:35:51:
72:67:bc:6c:97:d8:66:32:85:24:97:58:f6:92:df:95:e4:08:
f7:1c:2c:30:50:f8:7a:5a:2d:17:e7:95:bc:92:90:1d:5f:87:
39:c4:27:c9:17:5e:63:12:37:73:6f:bc:85:f0:b6:c7:75:8e:
20:91:e1:89:68:d1:ec:44:81:c6:f0:aa:52:93:30:fb:45:fb:
96:65:37:ae:a6:ad:8a:c0:05:33:2c:76:15:3b:db:d0:5e:42:
71:e1:77:0f:c6:c3:ef:b7:0a:10:e0:79:c7:b9:1a:d2:ed:ef:
6a:dd:4a:74:77:25:50:e0:2c:0b:b8:a7:33:62:5f:d8:be:d6:
d6:dc:4a:31:91:03:6c:58:d6:72:6b:b1:0f:77:6a:ad:bc:cf:
7e:9b:6f:7c:ef:2c:64:af:a9:ae:15:13:1e:a3:6b:e9:9e:96:
41:ab:0d:c1:2a:b9:e9:96:e4:c7:53:a9:a1:ff:6b:22:69:54:
04:3d:c4:79:41:b9:c3:d1:06:b3:f8:2b:ca:8d:b9:2b:6d:0b:
48:fb:e6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:01 2023 by rpki-client on console-ams.rpki-client.org