Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/tgcV_cuYzKWDjs9GnuXu9O1myjU.roa
File: tgcV_cuYzKWDjs9GnuXu9O1myjU.roa (raw, json)
Hash identifier: 3I5MtyXZjMxqC6nl9TwRRK6vnUjymvBzbaG2e7xKc/Y=
Subject key identifier: B6:07:15:FD:CB:98:CC:A5:83:8E:CF:46:9E:E5:EE:F4:ED:66:CA:35
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0182AB34263159C7AC325F3020B8E7B6D268
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/tgcV_cuYzKWDjs9GnuXu9O1myjU.roa
Signing time: Wed 17 Aug 2022 09:48:17 +0000
ROA not before: Wed 17 Aug 2022 09:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16340
IP address blocks: 95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
217.144.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:34:26:31:59:c7:ac:32:5f:30:20:b8:e7:b6:d2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 17 09:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b60715fdcb98cca5838ecf469ee5eef4ed66ca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:e0:03:80:46:19:d1:09:9d:f1:44:4b:ee:
aa:54:ad:99:75:f2:79:62:1b:47:40:5b:a4:3b:d2:
f9:e1:e9:e2:48:0d:59:e0:24:df:67:a8:ee:f7:c1:
b6:51:89:9a:4f:26:1a:f3:ad:13:4d:6b:8e:eb:ab:
91:30:21:04:02:7a:91:84:15:f5:70:3b:f0:21:8c:
f0:2b:07:ac:d0:4c:a4:f8:b5:2a:cf:8d:30:4b:5c:
6e:52:30:f5:cc:ad:f5:dc:0f:9a:7f:91:b1:00:1a:
44:9b:1b:13:71:ea:16:12:bd:6d:a3:b4:80:2b:14:
d3:ba:f8:c3:c0:94:e0:84:08:1d:8a:f7:5b:c3:48:
04:0f:06:a6:f8:51:e4:97:d2:3a:3e:e6:e9:92:99:
bc:d5:ce:ff:69:00:75:b2:df:8b:1d:29:fa:fc:cb:
55:cb:a6:41:ad:a5:d0:48:be:2c:02:bf:07:1e:d4:
6f:fd:a4:11:7b:e5:83:bf:fc:69:64:67:9f:cd:4c:
94:1b:e9:77:a1:51:9c:34:8a:63:dc:e3:cd:31:65:
64:00:5d:de:e0:ad:eb:c1:0b:1b:cf:58:a9:00:51:
16:de:92:2c:43:23:2a:35:18:8b:57:c9:98:e8:1b:
a1:58:07:d4:8c:09:b8:50:85:97:15:ee:e7:51:d5:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:15:FD:CB:98:CC:A5:83:8E:CF:46:9E:E5:EE:F4:ED:66:CA:35
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/tgcV_cuYzKWDjs9GnuXu9O1myjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.64.0/19
95.174.32.0/19
217.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:78:1d:e2:90:6a:da:56:35:98:8f:8c:63:80:25:5a:b9:c6:
17:62:9d:cf:15:04:d7:79:6c:14:d6:f8:75:f4:49:2e:56:f1:
74:0e:0a:64:9e:b0:59:05:b8:62:00:f8:c8:f6:ce:9b:c7:bb:
a4:bc:26:9e:be:a6:53:bd:50:1a:28:2e:74:26:fd:3b:5f:c5:
90:5a:a8:6f:1b:83:99:09:15:c2:8d:8a:b7:10:74:60:54:b1:
62:76:e5:a0:c6:2d:05:bf:e5:f5:41:a6:67:13:15:03:3f:40:
9c:2c:7d:72:d1:ae:7f:60:52:55:6c:ba:61:09:2f:8f:91:e9:
85:81:09:e4:cf:84:24:2b:c0:b9:45:64:af:63:99:ff:46:6a:
1c:a6:46:4e:65:e8:01:1e:d4:57:6d:4f:4e:eb:d3:c8:93:4f:
b3:2f:08:22:64:76:21:5c:34:8c:91:29:3a:a2:2b:6e:3f:82:
a6:da:14:cf:a5:83:d4:65:06:7f:da:69:dd:aa:38:0f:94:c8:
53:9b:a4:87:8b:00:b7:f9:44:87:be:4e:c3:75:51:07:cd:98:
67:23:c1:f7:50:b4:4a:2c:f4:12:b2:e3:f7:58:c6:b0:61:fb:
70:45:47:c8:26:7e:e4:95:f4:15:16:b1:eb:26:c4:8a:e9:79:
55:40:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org