Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/tsIvrUqoBYREl6vioYCjWGsQlxk.roa
File: tsIvrUqoBYREl6vioYCjWGsQlxk.roa (raw, json)
Hash identifier: CgIO9ucjimOoVgQEJTLzMW34vbrjd3dKJYNzopySBZk=
Subject key identifier: B6:C2:2F:AD:4A:A8:05:84:44:97:AB:E2:A1:80:A3:58:6B:10:97:19
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 07F02980
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/tsIvrUqoBYREl6vioYCjWGsQlxk.roa
Signing time: Sat 01 Jan 2022 03:56:38 +0000
ROA not before: Sat 01 Jan 2022 03:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206091
IP address blocks: 185.196.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133179776 (0x7f02980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jan 1 03:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6c22fad4aa805844497abe2a180a3586b109719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:b6:68:84:65:e0:31:db:1b:f9:9e:1b:f4:
51:6d:e8:17:8b:ae:32:0e:48:4e:2f:71:9b:7e:09:
a4:b9:f4:5c:c7:b1:b2:ab:7f:e3:60:6a:43:f2:2b:
77:fe:9d:4d:d9:a4:a4:1f:e7:dc:0e:ec:54:fd:7d:
bc:d2:de:22:52:bb:6f:3b:96:cb:9f:2a:f5:5d:e5:
1e:de:85:71:36:f1:bb:81:bb:0e:d8:ed:1f:0b:d3:
be:04:76:45:43:30:ca:34:ee:12:e6:f3:bf:92:5d:
df:1f:5f:7c:9c:b6:60:a9:14:af:1e:82:16:3e:48:
76:64:8c:13:bf:0d:9c:19:86:ff:89:e4:44:6f:b1:
6a:94:3f:28:74:51:9d:0c:ac:22:f7:c2:c4:46:20:
4c:a5:e5:43:22:65:7c:29:de:f1:cc:f6:99:62:3f:
6c:4a:d7:90:8a:84:d4:39:16:f8:27:32:34:ee:7e:
29:32:35:5f:07:fe:51:a2:7c:6c:d6:44:6a:e2:18:
bb:22:ad:bd:6d:cd:a5:d9:b6:e9:f7:e5:44:2b:c3:
77:fd:70:59:e4:26:d7:43:e5:fe:48:09:9f:b5:a2:
fe:cd:49:18:a8:bb:64:07:79:16:b8:12:72:17:2d:
36:0c:f2:65:a4:46:86:8d:79:8a:fa:ba:44:93:5f:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:2F:AD:4A:A8:05:84:44:97:AB:E2:A1:80:A3:58:6B:10:97:19
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/tsIvrUqoBYREl6vioYCjWGsQlxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.176.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d8:21:ca:f7:c0:6a:73:b2:df:f8:0e:53:b8:9e:d0:39:f6:
06:99:3a:f9:7c:dd:5d:de:e8:54:12:4c:1d:5b:2b:33:58:ef:
94:1a:86:6e:59:90:c5:33:52:a5:56:72:ba:f1:46:02:d5:e2:
55:66:40:df:89:ad:40:cc:49:ea:55:77:a8:43:f5:21:25:b3:
cf:3d:4a:a5:e9:f2:c8:b5:76:71:46:32:84:06:bc:ab:9a:24:
1a:af:f9:3d:bb:7b:a8:ea:77:84:9f:82:f2:ad:bc:0c:85:b9:
86:1c:a0:68:e3:94:32:fa:cd:0e:65:d3:0d:a3:10:34:68:7d:
8d:2f:41:c3:ba:45:6a:92:65:03:75:41:84:4d:ec:40:23:93:
ef:e0:b5:fe:fe:61:9b:93:2c:62:c4:a4:34:8e:ce:7b:23:5d:
ee:19:7f:c7:b1:b0:94:9f:c9:f7:f8:ac:95:4b:6e:67:d9:e0:
b0:32:57:1a:d0:fb:57:91:df:2a:e6:fa:4f:3e:0e:67:86:73:
8e:80:a8:25:d3:22:48:f0:be:0e:7e:68:9f:0b:26:b0:3f:be:
28:6d:5b:04:88:f2:5a:93:f4:b2:e2:d6:c3:70:d8:19:58:91:
96:07:33:65:ec:df:66:e6:64:cc:54:a9:b5:0c:4c:77:14:20:
b1:a5:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:45 2024 by rpki-client on console-ams.rpki-client.org