Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TAl-o8zUce5-3etSI8KzM1wS4Tk.roa
File: TAl-o8zUce5-3etSI8KzM1wS4Tk.roa (raw, json)
Hash identifier: IrDWjhAxbkHkZNTMC+Ba/WgirjL86NzZelTAN3nbtME=
Subject key identifier: 4C:09:7E:A3:CC:D4:71:EE:7E:DD:EB:52:23:C2:B3:33:5C:12:E1:39
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19D12699
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TAl-o8zUce5-3etSI8KzM1wS4Tk.roa
Signing time: Sat 01 Jan 2022 15:56:39 +0000
ROA not before: Sat 01 Jan 2022 15:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 136.144.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433137305 (0x19d12699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c097ea3ccd471ee7eddeb5223c2b3335c12e139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:f5:f2:fa:10:68:c3:22:bd:f1:b1:72:b0:
7a:d0:97:6a:1d:38:c0:bb:a2:8f:07:7f:3d:8e:b5:
e4:c7:ab:91:c4:eb:af:75:4e:56:d2:e9:fc:b9:81:
79:03:26:2b:4a:3e:97:84:a2:0e:27:d2:1e:b5:35:
c1:56:6c:e7:ea:ba:5a:7b:e7:db:43:a3:02:a9:b1:
be:2e:6e:04:2a:4a:cd:45:6d:68:00:a0:f5:a5:61:
f1:cb:36:62:e2:78:e0:c7:47:09:19:4a:64:74:74:
cc:6d:2f:ac:fd:06:4b:4f:bf:08:d8:0e:33:9e:17:
48:a6:e9:86:e7:fa:68:e6:d5:94:ff:b3:13:16:3e:
04:28:f6:8b:f1:af:a0:e5:14:98:97:57:05:d7:80:
b1:16:20:e8:3e:8c:ca:f7:d7:02:9d:18:0c:ca:43:
8c:82:3c:29:26:8c:46:de:89:fe:ce:51:a6:e0:1a:
19:bd:53:05:f3:e5:5f:7e:85:3f:ff:de:41:4f:a3:
a5:10:0b:ad:ea:93:c6:3f:72:db:b9:8d:42:7c:20:
b1:ba:96:37:d9:b7:42:ff:c1:f6:75:e3:d4:17:bb:
98:99:fe:49:36:5d:7e:e0:be:73:2d:55:5b:56:8a:
d8:5d:67:d9:b4:f4:51:10:4f:a6:3b:49:f2:18:7d:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:7E:A3:CC:D4:71:EE:7E:DD:EB:52:23:C2:B3:33:5C:12:E1:39
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TAl-o8zUce5-3etSI8KzM1wS4Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.40.0/24
Signature Algorithm: sha256WithRSAEncryption
93:52:85:55:b2:7b:40:2c:b3:ff:60:7e:2b:51:b9:20:6d:b6:
76:f9:24:98:31:d2:bb:55:7c:25:ac:1b:b5:43:d9:58:0f:5e:
79:c2:d9:6c:98:b8:ac:06:d5:b0:33:00:a9:31:6d:0a:ca:b3:
86:31:9e:de:9b:17:26:30:d6:5c:ac:7f:68:34:b9:90:08:83:
1b:c4:8c:12:8c:ff:49:51:a0:50:1e:b0:ba:05:bf:81:2f:f3:
17:72:0a:1f:5d:16:0d:da:6f:b7:a3:b1:b3:6f:9a:bc:e6:cf:
02:f1:f6:4e:01:e7:16:27:2c:21:98:30:2e:ec:52:8f:20:dd:
f0:33:da:01:58:4c:bd:50:f0:b9:c8:ea:10:b1:c8:66:10:2a:
16:65:7b:19:c8:86:c0:88:4e:b9:f6:fb:2f:ad:49:81:3a:c1:
d1:ec:6c:bf:9b:47:8c:61:66:16:9b:da:96:60:f3:85:aa:8d:
d0:d4:ff:df:dc:21:49:4d:36:f5:76:b8:b5:1a:fb:79:bf:fb:
87:49:23:72:6e:bb:26:33:93:4a:af:10:fe:b8:47:ee:86:09:
4e:b7:58:57:29:0e:9a:6f:ed:eb:93:4e:8d:3f:ca:3e:8b:21:
78:db:b4:34:e2:05:2e:cb:18:f0:23:f7:e8:f1:a4:a0:25:fc:
19:a8:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org