Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/TOgmGZS13eJAWk8WQKil37VGAIo.roa
File: TOgmGZS13eJAWk8WQKil37VGAIo.roa (raw, json)
Hash identifier: 26T8MSis4PfvBWXnf1gtbPLPNyf+6JLCsMFpIoja5Po=
Subject key identifier: 4C:E8:26:19:94:B5:DD:E2:40:5A:4F:16:40:A8:A5:DF:B5:46:00:8A
Certificate issuer: /CN=4c47d6791c0ee8bd9a3beb0cf05de56fbb5543b9
Certificate serial: 02121574
Authority key identifier: 4C:47:D6:79:1C:0E:E8:BD:9A:3B:EB:0C:F0:5D:E5:6F:BB:55:43:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/TOgmGZS13eJAWk8WQKil37VGAIo.roa
Signing time: Sat 01 Jan 2022 12:54:17 +0000
ROA not before: Sat 01 Jan 2022 12:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 193.84.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34739572 (0x2121574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c47d6791c0ee8bd9a3beb0cf05de56fbb5543b9
Validity
Not Before: Jan 1 12:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce8261994b5dde2405a4f1640a8a5dfb546008a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:60:db:5f:45:06:c9:78:70:1d:ff:6f:d2:
5b:f9:17:f4:71:d3:bd:10:99:70:3a:1f:5f:05:72:
a1:c8:d9:b5:b4:a9:53:a2:1d:c0:52:5d:b6:f8:24:
3e:a9:56:1d:76:01:e3:38:8c:8d:7d:a2:b3:9c:f9:
16:45:02:7d:65:d6:75:12:29:b4:c1:93:61:bb:e5:
a2:97:64:97:1d:44:40:ab:01:78:d9:8c:2c:a7:09:
64:fa:71:86:36:10:96:85:41:47:11:f3:60:bc:d3:
21:56:ba:d3:c7:13:75:d6:a8:2e:1a:be:74:ae:9a:
3f:97:48:81:36:10:ad:d7:0f:02:fa:48:ec:84:6b:
58:a7:d2:90:bd:e0:09:31:60:79:bf:34:f9:4a:84:
9d:64:83:eb:8d:5d:79:9d:86:32:30:17:40:a8:5b:
e6:2b:72:86:09:41:b9:f0:8f:15:30:4b:2f:24:c6:
a4:b2:f8:0c:d3:4c:97:01:83:f0:8d:67:b5:22:ad:
47:86:2b:2a:12:73:74:7a:3c:79:8f:1c:4a:3c:d2:
29:db:c9:a2:57:6b:02:03:57:00:9b:73:ed:87:1f:
cd:1a:86:3e:51:b4:e5:b2:1c:cc:47:34:88:0f:87:
a2:1a:27:15:01:1a:fb:8b:fc:e9:f1:33:c5:7a:a8:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:26:19:94:B5:DD:E2:40:5A:4F:16:40:A8:A5:DF:B5:46:00:8A
X509v3 Authority Key Identifier:
keyid:4C:47:D6:79:1C:0E:E8:BD:9A:3B:EB:0C:F0:5D:E5:6F:BB:55:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/TOgmGZS13eJAWk8WQKil37VGAIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/abe772-b9fd-43b4-970a-60fc56497282/1/TEfWeRwO6L2aO-sM8F3lb7tVQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.109.0/24
Signature Algorithm: sha256WithRSAEncryption
66:45:c5:cf:d3:46:5c:7e:a2:df:3e:82:8a:f2:4c:82:24:86:
a1:cb:ac:b3:d8:39:94:6f:d3:0f:7d:7d:92:23:22:b1:f3:34:
5a:61:96:39:61:f6:e0:84:30:08:a7:e8:90:07:3b:c8:95:9a:
b7:2f:52:e2:30:11:40:c9:9c:ba:16:eb:f3:96:a4:e3:31:34:
0e:b6:e2:8a:de:e1:32:e2:7a:ba:27:9d:72:d8:59:61:10:f5:
a3:a1:18:22:43:b2:d3:92:18:2f:cc:29:3d:e4:d1:66:cd:19:
55:82:ae:58:f9:30:7a:82:26:eb:cc:90:73:ce:81:6a:6e:79:
5a:30:10:28:a2:ba:80:7e:bf:99:9d:2a:e6:00:95:38:78:93:
50:44:39:19:05:d5:90:20:1f:20:50:55:5f:ce:9a:6c:9b:a5:
30:26:3a:ca:56:7a:1f:fe:e4:8b:b7:a3:15:b6:24:50:c6:ab:
14:35:7c:c7:82:75:57:ce:48:d8:5e:9c:d4:52:22:38:94:57:
fa:4e:76:a8:15:49:d2:7f:7e:b2:0a:df:f9:00:89:c4:e8:75:
51:c2:8c:36:08:79:76:69:cd:ab:da:3b:66:5f:3b:61:92:b1:
d5:a2:c0:10:23:f5:db:27:bc:7f:08:55:a2:31:81:95:ab:c3:
60:b9:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org