Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/_TykGtpQDXsXEqsgVOsIivbtnGM.roa
File: _TykGtpQDXsXEqsgVOsIivbtnGM.roa (raw, json)
Hash identifier: hX9d6M6keJSe6ra2VBxnDv/+qJzPyKruJYjI60NSq/I=
Subject key identifier: FD:3C:A4:1A:DA:50:0D:7B:17:12:AB:20:54:EB:08:8A:F6:ED:9C:63
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 37416825
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/_TykGtpQDXsXEqsgVOsIivbtnGM.roa
Signing time: Sat 01 Jan 2022 08:57:53 +0000
ROA not before: Sat 01 Jan 2022 08:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25367
IP address blocks: 212.63.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927033381 (0x37416825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Jan 1 08:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd3ca41ada500d7b1712ab2054eb088af6ed9c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:e9:4e:c9:a0:f8:a7:c4:8a:09:95:b6:ec:
47:d5:b9:18:56:49:1d:cd:27:41:18:ef:fc:62:8d:
16:56:20:c2:86:74:c4:2a:10:81:59:99:76:ab:41:
76:f5:b3:a9:12:e9:9c:18:14:bf:0e:b1:10:58:55:
a3:ab:8c:53:7d:bc:6b:c3:8d:7f:2d:06:c5:22:5d:
18:8d:bd:24:f7:82:99:a2:77:c4:97:fa:ed:7b:d3:
2e:26:58:fc:ba:a5:43:ac:59:39:14:17:6d:5a:a7:
ac:c2:7a:1e:62:0f:07:3b:5b:19:a0:b4:2e:15:fc:
c1:7b:86:8e:b2:36:4d:cd:bc:58:98:42:38:21:cb:
e1:4d:b2:8d:a3:a8:0f:5d:4d:b5:d7:9f:0a:4c:51:
a5:52:4e:d1:7b:56:19:8d:09:88:73:b3:40:cc:1e:
b0:06:96:a1:f3:09:d1:7f:63:cd:4a:6d:0a:20:db:
0a:23:57:a9:27:d5:4a:70:17:66:47:ce:30:02:92:
65:4b:4e:b0:a5:17:79:67:7c:51:42:32:7d:15:b5:
d6:b6:5d:ff:79:18:be:78:24:ac:c4:58:e8:49:02:
c2:fc:00:b0:8d:03:93:30:4c:3d:00:a3:f8:42:56:
c5:24:f3:7e:49:9b:a7:f7:11:ea:27:01:cd:04:f7:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3C:A4:1A:DA:50:0D:7B:17:12:AB:20:54:EB:08:8A:F6:ED:9C:63
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/_TykGtpQDXsXEqsgVOsIivbtnGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.63.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:16:0e:7b:03:26:3e:58:2a:47:df:de:94:99:bc:17:a4:e3:
4d:62:16:17:19:83:f3:ef:a5:20:e5:8a:6b:9e:eb:c0:9f:90:
75:52:7a:aa:3c:9e:e5:fa:c6:08:f3:e6:e6:ea:f8:df:b0:71:
2e:24:33:5a:2a:22:1b:5f:b5:5d:72:4a:ad:ae:87:51:cf:c3:
6c:a8:27:53:1b:60:9b:42:aa:46:33:80:08:6f:17:6b:b6:47:
b7:5e:fb:a1:98:d8:b4:a2:25:fb:3c:f9:b2:c1:c6:88:b6:a5:
f6:11:8e:c9:40:74:e1:c2:44:d3:d7:16:c8:bf:c1:9f:f5:41:
0f:10:55:4a:5b:9f:aa:9f:69:28:16:81:65:4a:a3:b4:14:ab:
60:38:49:32:65:5a:26:94:c4:f6:70:17:a3:9c:6a:ea:d4:2f:
8c:86:b9:c8:2f:d1:0d:33:75:60:b3:50:a4:39:ce:29:99:a8:
f0:36:68:30:c5:3a:c6:59:a1:5e:48:11:c8:13:b0:cf:38:d6:
5b:f4:95:0c:b7:5d:2d:fd:80:57:ca:37:20:76:67:7a:83:72:
0d:c8:5d:8e:3d:d1:0a:da:7f:04:2b:51:25:33:04:3a:84:d2:
ce:b2:ea:12:0e:14:28:60:72:a1:c5:d1:2b:ac:f5:81:b4:5a:
d3:f1:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:54 2024 by rpki-client on console-fra.rpki-client.org