Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TiWmRgR4chdcqpENh9jxgq1FNnU.roa
File: TiWmRgR4chdcqpENh9jxgq1FNnU.roa (raw, json)
Hash identifier: lDOPwjvYLSzgNwETaVWI7xRd0A3dg1pjaGZxXkREWlg=
Subject key identifier: 4E:25:A6:46:04:78:72:17:5C:AA:91:0D:87:D8:F1:82:AD:45:36:75
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01837D8064C494EA15D71A62B992866499D9
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TiWmRgR4chdcqpENh9jxgq1FNnU.roa
Signing time: Tue 27 Sep 2022 05:51:49 +0000
ROA not before: Tue 27 Sep 2022 05:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 149.126.92.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:80:64:c4:94:ea:15:d7:1a:62:b9:92:86:64:99:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 27 05:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e25a646047872175caa910d87d8f182ad453675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:95:56:b4:1d:1a:cf:b4:9f:d9:0d:32:b0:
fb:e2:d0:fb:0c:d8:45:11:80:ae:55:2d:76:50:a0:
29:90:f6:91:64:c1:f6:f6:23:fa:21:4e:15:64:4e:
f1:c1:32:04:6f:71:52:4c:eb:be:85:e4:a5:23:c6:
6e:60:ab:63:18:ed:0a:00:de:97:17:2d:fc:36:8f:
e6:de:5f:66:46:79:ba:cd:8e:7c:92:55:cc:48:17:
80:b5:56:a2:75:65:b5:80:01:e2:ec:38:46:52:07:
5b:21:19:59:d9:3b:43:a0:b7:25:5a:90:fd:47:50:
9b:a1:0a:e8:92:8c:25:df:83:5c:f2:c7:4f:22:0d:
50:d1:19:1e:af:6d:7b:49:4b:c6:1f:e9:d9:54:6c:
0d:f6:29:82:e2:fa:f9:ca:93:38:27:36:4e:f0:c2:
1a:6c:64:9c:d5:35:3e:19:36:d1:75:87:dc:9e:5d:
b5:d0:f4:b0:c3:67:0c:83:9e:93:34:90:37:0a:b8:
7a:53:77:57:84:8a:ab:cb:c1:f1:83:bb:9d:32:a0:
e8:0a:f5:08:43:d9:b6:52:01:ed:ae:8a:84:a0:47:
e0:3a:1b:94:8c:ee:88:a2:32:6e:13:4f:62:c6:72:
03:86:8e:d6:4a:58:97:c4:a7:31:31:a8:b6:34:8a:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:A6:46:04:78:72:17:5C:AA:91:0D:87:D8:F1:82:AD:45:36:75
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TiWmRgR4chdcqpENh9jxgq1FNnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:de:57:f1:2c:15:af:ae:b8:5f:09:29:c2:35:74:34:db:14:
58:51:d8:db:a6:f2:84:4b:f5:e0:9c:c1:b5:60:91:0e:13:eb:
59:ad:7a:27:cc:1a:11:f3:72:aa:2f:ce:1b:b7:e7:42:2d:67:
8f:aa:46:cc:8a:44:d7:52:c1:89:ce:56:e9:0a:77:a1:33:38:
c0:2e:83:da:a7:91:d2:5c:be:f9:c7:6c:f0:f8:36:0b:53:13:
3a:21:11:c8:13:f7:f5:35:8d:07:a2:9d:96:63:75:d2:7f:c7:
ce:e7:19:a2:64:50:7f:ef:f6:d0:9a:72:b3:d1:ed:14:5c:f5:
8a:98:18:7a:6e:e6:5c:94:30:64:53:6b:12:2a:8c:29:ca:4a:
38:87:83:2d:fc:31:6d:85:0a:32:2e:47:ad:6b:33:54:2d:f5:
28:63:7d:9e:0c:19:d8:44:8e:6f:b5:c9:57:7c:62:12:99:f4:
e5:79:18:2f:e5:9d:15:86:b0:3f:a8:1d:af:a2:76:4d:a8:a5:
e7:a2:64:a1:bc:3f:1a:5e:61:f8:43:3a:ec:c9:ad:54:ad:25:
0f:7b:0d:1d:5e:4c:7b:bd:bb:6b:d0:03:a9:60:4b:75:fe:cb:
d7:dd:05:4b:75:63:b8:d9:d9:a7:6a:9c:61:0b:77:5d:8c:7b:
c1:d0:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org