Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/TCLNOG9677lSP1vhY1G5sZsNDyo.roa
File: TCLNOG9677lSP1vhY1G5sZsNDyo.roa (raw, json)
Hash identifier: ity6YeW6l5QB6SleIJC4CgRdnq2mx52I2HyzddqGSG8=
Subject key identifier: 4C:22:CD:38:6F:7A:EF:B9:52:3F:5B:E1:63:51:B9:B1:9B:0D:0F:2A
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 01856F5DB3FA44057608271AFF7727F524F8
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/TCLNOG9677lSP1vhY1G5sZsNDyo.roa
Signing time: Sun 01 Jan 2023 22:04:49 +0000
ROA not before: Sun 01 Jan 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209965
IP address blocks: 212.81.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b3:fa:44:05:76:08:27:1a:ff:77:27:f5:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Jan 1 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c22cd386f7aefb9523f5be16351b9b19b0d0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:2a:b1:ed:77:e4:b7:ad:55:8f:3c:43:66:
4f:9d:5b:bf:2e:97:fa:8a:74:16:a2:b7:bf:39:a8:
34:98:ee:70:d4:8b:f9:e8:59:52:2d:90:c3:fe:f9:
29:e7:3f:5f:ea:0a:28:41:37:b5:f7:7c:d3:3c:fe:
20:22:35:b7:9f:8f:ba:72:09:4d:cb:2c:cb:42:7c:
6e:bc:38:74:41:22:cc:e2:d4:65:9b:5d:98:23:0d:
cc:04:7d:64:22:f0:b7:7f:0d:5f:0f:0a:c0:32:dd:
05:aa:fd:8c:22:ad:d0:e9:6b:1f:b2:55:03:cc:07:
b4:5a:a4:51:a8:61:9a:30:e9:a3:1b:f4:3b:68:fe:
5c:3a:32:19:93:58:00:e1:72:46:9e:bf:d8:2a:17:
90:3a:4e:61:e1:dc:76:8b:0b:ea:35:0e:47:d2:2a:
e6:4c:8b:80:bd:3d:88:9c:cd:7f:68:14:7c:cd:01:
97:d9:77:33:e8:e7:7e:2c:77:21:d3:4b:2e:df:b9:
63:75:7a:83:b7:c1:b3:76:40:c9:06:27:8d:85:34:
5d:f0:78:d7:ee:2a:a1:0d:37:78:b2:4c:58:38:1f:
6c:d3:30:73:8a:f5:82:e6:f1:a6:8c:fd:fc:d1:44:
cb:10:e3:84:0c:ab:8c:2d:ee:53:ee:65:68:02:5b:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:CD:38:6F:7A:EF:B9:52:3F:5B:E1:63:51:B9:B1:9B:0D:0F:2A
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/TCLNOG9677lSP1vhY1G5sZsNDyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:a2:36:75:db:ef:01:23:b3:a9:32:1e:fe:bc:90:4c:58:75:
15:5f:d7:f9:b0:d7:86:86:9c:17:96:2d:b2:d5:2e:8a:01:fc:
49:73:df:13:4e:e8:db:97:9a:a2:16:1d:93:48:30:e9:98:37:
61:3f:4e:32:1c:6e:99:78:71:64:2f:b7:5d:86:9a:4f:6e:b5:
a2:b8:66:1e:a4:4d:04:d3:cb:f7:90:20:f0:3f:94:c5:42:ba:
f0:c0:c2:24:5b:b6:5c:bf:2e:3c:40:59:1a:63:62:96:2a:35:
e3:05:0d:8d:22:8c:70:c9:0c:ec:c2:e8:32:44:bf:56:1b:be:
29:e1:60:bd:a1:8e:90:9d:43:00:c4:28:db:f9:3a:56:a7:9d:
fd:3b:e6:9b:3e:c4:d3:71:7d:1a:87:2f:fd:dc:ba:43:31:1e:
93:df:2e:a2:77:19:df:a8:e4:80:40:88:c4:89:bf:99:52:f5:
6c:87:41:07:5c:10:7b:08:24:4c:51:b0:fb:25:ce:39:cf:94:
d5:66:66:a8:90:75:c6:70:60:54:1f:c3:06:09:cc:ad:42:6e:
0f:12:0e:26:94:35:2d:c2:a0:5a:5b:71:38:64:8a:60:60:5e:
24:07:7e:96:6c:a9:4e:fd:20:1d:f5:2a:1c:e3:a1:87:f2:42:
8f:e1:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:35 2025 by rpki-client