Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TJs3fkmdvpzpWe9peiQMBA9PDys.roa
File: TJs3fkmdvpzpWe9peiQMBA9PDys.roa (raw, json)
Hash identifier: DRcVJmmQE0zb38u8rRFkYTOlfv6EPhNnsRMTNdWMuds=
Subject key identifier: 4C:9B:37:7E:49:9D:BE:9C:E9:59:EF:69:7A:24:0C:04:0F:4F:0F:2B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 18C4C758
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TJs3fkmdvpzpWe9peiQMBA9PDys.roa
Signing time: Tue 28 Jun 2022 14:47:04 +0000
ROA not before: Tue 28 Jun 2022 14:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60005
IP address blocks: 141.101.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415549272 (0x18c4c758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 28 14:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c9b377e499dbe9ce959ef697a240c040f4f0f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:16:d5:56:6c:e8:22:b4:eb:b9:d1:0e:9d:
aa:50:a6:05:9b:82:2f:0c:8f:d6:ea:79:10:f1:05:
e6:6b:95:76:a4:d8:81:a5:8c:f8:6a:da:d3:bf:88:
b2:ea:c9:48:01:1d:53:aa:3d:65:f4:50:4d:e7:5e:
32:2d:03:ba:0a:bb:48:26:26:62:4d:68:1b:fc:22:
90:9d:c7:a5:7f:b9:65:9d:56:3b:99:d4:6a:59:8b:
ef:f3:af:34:f1:60:23:89:e4:ec:13:b0:51:0b:a7:
97:73:8f:95:80:1a:d4:c2:f3:eb:b8:50:26:c3:c8:
ac:db:b8:e2:54:d8:d1:93:fe:d8:7d:2a:fd:76:5a:
51:84:09:b3:c7:75:e7:2b:d2:7e:71:b2:18:21:9c:
1a:3c:93:a5:7b:2d:51:a9:98:67:f1:93:51:85:d4:
4d:a9:1b:9b:95:3c:e0:da:cc:c3:27:74:78:0c:af:
69:50:3e:2f:01:2c:08:d7:12:fd:5f:22:34:c8:a7:
32:82:cb:f9:cd:3d:a0:6e:a0:77:de:22:e9:6e:1a:
ce:92:0d:19:82:47:bd:c8:5e:9d:4e:e7:be:43:f6:
a3:cd:5f:82:db:f2:97:c9:39:79:fd:2b:22:c3:61:
da:eb:f8:a9:66:15:b4:28:53:41:01:14:2c:b1:a9:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:37:7E:49:9D:BE:9C:E9:59:EF:69:7A:24:0C:04:0F:4F:0F:2B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/TJs3fkmdvpzpWe9peiQMBA9PDys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fa:cf:ea:e3:bf:d6:12:d8:03:41:70:49:74:cc:53:8e:ce:
a5:fe:b9:07:cb:34:a2:3f:4e:e6:d7:69:53:7d:4e:73:c8:c5:
34:a6:5a:e5:b0:da:d0:8f:06:c8:2a:16:d1:ea:b0:72:68:e0:
e3:c9:96:c7:cc:65:7b:86:04:d5:94:4b:d8:c3:5d:34:5b:1a:
0d:d8:8f:3c:80:f2:78:46:c3:ec:1a:f5:86:22:5f:46:23:46:
6e:76:31:96:19:57:e9:f4:18:9a:d4:18:3f:ed:c9:41:f9:36:
25:95:ae:33:1e:05:60:7e:a3:46:6f:56:fe:00:1c:54:0f:ba:
1e:ba:3a:2a:84:9e:3c:7d:10:ac:6a:fd:d9:17:96:41:2a:3f:
69:13:88:34:70:ad:40:78:18:33:ac:4d:9a:9b:9f:38:06:f0:
0a:68:32:39:1d:26:c4:ca:0f:ee:7c:6b:92:a9:d0:0b:aa:8c:
83:90:b6:bc:b9:0f:ca:3a:4a:dc:68:43:5f:76:2f:ad:d7:64:
a6:a2:9f:0c:a4:3c:0d:2b:73:75:eb:08:3b:f5:30:e3:a4:75:
71:14:47:20:f7:c3:eb:51:b1:d4:02:8a:de:66:b4:53:a8:d3:
1e:21:ef:8a:4b:0c:90:d7:12:c7:b2:c2:09:5e:16:3f:7c:e2:
e1:c5:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org