Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/tcvia15khs4inLL-BXvdX8RuHGY.roa
File: tcvia15khs4inLL-BXvdX8RuHGY.roa (raw, json)
Hash identifier: irdIEfEP4uYJEomJdluzUuBxOqLSQL/Zzhv6gW6dtZk=
Subject key identifier: B5:CB:E2:6B:5E:64:86:CE:22:9C:B2:FE:05:7B:DD:5F:C4:6E:1C:66
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: BFB1A3
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/tcvia15khs4inLL-BXvdX8RuHGY.roa
Signing time: Sat 01 Jan 2022 04:59:54 +0000
ROA not before: Sat 01 Jan 2022 04:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199132
IP address blocks: 195.234.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12562851 (0xbfb1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jan 1 04:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5cbe26b5e6486ce229cb2fe057bdd5fc46e1c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:03:e6:ba:ba:5b:b9:5a:ed:85:89:78:95:
40:37:45:52:32:12:ff:a7:19:e3:a4:de:11:d3:be:
4d:48:8e:0e:9f:07:bf:95:87:66:7c:b2:af:cd:2f:
22:93:18:ff:40:e3:72:f6:7c:fc:57:d5:d0:9c:5a:
39:02:db:6c:69:00:69:67:dc:eb:8c:bf:e7:ff:46:
d8:55:0d:81:cd:8b:dd:c6:73:f6:5c:b3:84:67:9d:
03:ec:8e:1e:14:61:34:c1:33:ec:cb:dd:4a:4f:0f:
f9:ca:d6:92:27:e3:27:69:c7:79:46:db:0e:8b:a6:
f0:06:26:ac:db:0d:96:64:ea:90:fa:22:ac:53:a8:
5f:fb:93:fe:63:a0:a8:0f:96:f8:0d:7d:58:8c:aa:
e6:2b:76:4f:42:12:67:87:89:af:f6:35:5d:32:05:
a4:36:73:5f:c5:8c:e6:61:45:c9:b5:93:d0:11:f2:
06:00:23:d0:ea:76:cf:d1:10:11:90:ac:9c:c4:16:
a0:b9:39:19:64:eb:f4:86:20:c5:c9:ec:c0:2d:76:
76:f4:ff:1f:57:21:d3:da:11:34:39:81:c2:cc:cf:
5c:44:b5:c7:66:3c:0c:62:39:cb:42:56:e7:94:dc:
60:ad:d1:3f:ff:0b:2c:1e:2c:eb:11:20:27:8c:14:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:E2:6B:5E:64:86:CE:22:9C:B2:FE:05:7B:DD:5F:C4:6E:1C:66
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/tcvia15khs4inLL-BXvdX8RuHGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.138.0/24
Signature Algorithm: sha256WithRSAEncryption
96:da:10:0f:8c:76:2c:66:57:90:0a:9a:89:38:c1:46:66:51:
a1:69:bf:f7:47:e5:40:53:f0:a2:32:d2:9f:90:81:44:75:bc:
e3:0a:ec:a1:42:29:29:46:a0:2f:43:57:7f:a2:c7:c9:79:73:
8d:47:e7:54:f9:f0:a0:50:67:2d:f5:1d:8a:3f:8b:60:ff:62:
e2:1a:4a:f5:5c:ee:50:94:58:b8:a3:98:08:c4:d0:f1:88:b7:
25:06:86:fa:c8:b5:b8:ef:0b:01:72:da:eb:e6:cc:62:61:eb:
3f:64:68:f9:08:9e:b8:ba:1e:0a:8b:d6:5f:39:b8:26:70:84:
5e:59:da:e8:c0:bb:88:01:ac:e2:0d:0f:4c:77:25:d0:6d:a6:
76:2a:4e:fc:21:f2:a9:05:52:56:48:49:dd:8a:fc:ef:f9:af:
52:d7:ec:eb:3c:e6:ba:64:42:62:7e:34:0a:f8:e2:2d:2d:89:
00:c9:0b:3f:96:35:9a:51:0d:a3:4b:16:2d:7f:d1:bf:91:3f:
6f:96:b3:a2:e3:59:c1:94:67:bd:bd:31:d7:22:7d:5e:b7:4a:
d2:a2:49:a1:ee:03:de:6c:2c:bd:7f:8d:73:36:de:fe:b1:0a:
df:2e:72:a0:3c:5b:db:1b:67:de:c7:29:94:a8:f6:7c:8c:f5:
b3:9d:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org