Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TKno5uTl9IwYYJa0FtsR3oIk8pU.roa
File: TKno5uTl9IwYYJa0FtsR3oIk8pU.roa (raw, json)
Hash identifier: MuGYN9y9pfbnk1eWQXlVn+duaqOwMr5HyQiVe2bggM4=
Subject key identifier: 4C:A9:E8:E6:E4:E5:F4:8C:18:60:96:B4:16:DB:11:DE:82:24:F2:95
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 02FB0FEC
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TKno5uTl9IwYYJa0FtsR3oIk8pU.roa
Signing time: Thu 24 Feb 2022 15:15:21 +0000
ROA not before: Thu 24 Feb 2022 15:15:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 2.57.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50008044 (0x2fb0fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Feb 24 15:15:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ca9e8e6e4e5f48c186096b416db11de8224f295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:b3:70:ab:64:a7:9e:bc:46:89:3b:4a:ee:
9a:93:38:26:0d:03:02:51:fb:e2:cc:d5:93:fb:90:
be:1e:c8:3f:20:5c:bd:24:42:a3:af:ba:65:58:35:
23:41:d2:6c:20:e9:9f:8a:ee:f6:5b:78:a8:ac:2c:
ce:01:01:a2:2e:05:5d:68:2e:67:f3:35:a0:a8:ce:
52:18:94:dc:02:43:04:16:8b:d7:b8:c6:8b:f0:19:
92:f9:ea:fa:79:c5:9d:9b:57:54:a7:68:88:fc:0c:
7f:dd:38:09:ab:3e:95:52:23:e9:7a:4d:61:91:31:
da:32:df:90:dc:b3:fc:a4:13:d3:97:21:4d:e2:76:
97:f3:f4:4e:6d:bc:cd:1c:2e:cc:b2:a3:76:e0:4c:
40:fc:67:68:0b:68:97:77:82:9d:4a:d4:92:25:9b:
19:e1:b5:9d:17:3c:be:77:a0:5a:0a:b5:8f:48:2f:
b2:f2:86:56:1e:7c:b8:12:8e:53:e1:eb:68:2d:2b:
a1:a8:14:a8:66:48:1b:7b:1e:b5:2d:06:ad:82:aa:
ac:f3:43:d4:9a:e3:3b:3a:4a:e7:e3:d4:f3:9a:5c:
78:23:a0:2c:94:f2:d9:fd:30:58:c3:49:68:31:6c:
4a:a2:b4:38:76:e1:a8:89:c7:65:21:2b:de:8f:a2:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A9:E8:E6:E4:E5:F4:8C:18:60:96:B4:16:DB:11:DE:82:24:F2:95
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TKno5uTl9IwYYJa0FtsR3oIk8pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.170.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c4:46:63:46:bf:ed:b1:0d:d5:f0:44:9d:00:c1:32:96:8c:
47:87:f0:2d:bd:40:85:6f:32:1f:3c:c0:ab:f8:1b:dc:1e:e2:
e9:65:b0:3f:67:98:c9:b4:04:2a:00:aa:dd:58:cf:32:ec:01:
66:62:a5:44:a1:8e:4d:0a:12:3a:86:e2:a5:1d:01:07:d7:37:
e2:b7:a1:bb:1a:05:aa:5a:0a:5b:6b:b0:38:aa:68:cd:74:f9:
0c:a3:3e:1b:1b:44:b0:e6:3e:d8:f8:f8:36:bd:28:bb:2b:fb:
6d:56:5f:4c:b5:ff:8e:e5:21:99:d3:ba:b2:79:99:63:cf:31:
a0:fd:6f:6c:05:6e:e9:08:8d:c2:66:3b:6e:4f:27:fa:79:59:
fb:f4:8e:e1:20:10:42:ff:0d:ac:2c:75:3d:2e:f5:de:ba:3b:
bc:0e:b6:9c:20:43:72:52:d7:79:ef:03:72:39:c5:71:d1:a1:
26:c3:22:32:79:94:a1:59:e8:c5:d8:76:e7:71:8d:13:89:98:
52:88:8a:13:e1:fc:b2:3e:a3:7c:02:a0:84:fb:1a:2f:0e:28:
fb:48:48:3c:90:f1:e2:32:82:dd:30:42:56:e4:3d:ee:95:a5:
f0:4e:16:47:d9:27:02:ab:89:46:d6:cc:8e:0b:0b:8e:2f:e9:
cd:f7:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org