Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/tyc9EPBnxZ36KRIM1UyvVuyk-q0.roa
File: tyc9EPBnxZ36KRIM1UyvVuyk-q0.roa (raw, json)
Hash identifier: aNzxWw8Sn1bu/wV6Xga1ENHA5JCpn+0iqrPsNhAG22E=
Subject key identifier: B7:27:3D:10:F0:67:C5:9D:FA:29:12:0C:D5:4C:AF:56:EC:A4:FA:AD
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 05276CA7
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/tyc9EPBnxZ36KRIM1UyvVuyk-q0.roa
Signing time: Thu 09 Jun 2022 19:06:02 +0000
ROA not before: Thu 09 Jun 2022 19:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 185.255.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86469799 (0x5276ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jun 9 19:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7273d10f067c59dfa29120cd54caf56eca4faad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:7a:61:37:d2:cf:c2:12:de:d0:34:17:e9:
4a:7a:00:70:be:fc:aa:b3:05:e6:18:6b:35:f6:72:
3f:f7:c1:53:d6:b9:3e:38:16:d2:07:a8:91:b6:71:
99:7b:c4:5b:f0:7a:6e:c0:a6:d5:b3:be:88:c6:b9:
3c:09:8a:fd:ec:f6:be:c7:54:68:e7:03:78:26:fc:
5a:30:8d:3a:97:26:80:20:16:7d:fd:22:62:ee:cc:
65:ac:89:5b:1c:54:aa:76:50:41:5d:78:0d:b4:70:
6e:86:55:ee:41:af:fc:3e:ca:38:db:2c:60:24:0f:
dd:f7:0b:19:04:41:17:a3:45:90:41:9b:a0:01:73:
20:22:fd:64:c8:8d:ee:89:a2:b2:6b:47:16:3d:98:
07:e6:12:59:32:8f:54:cb:63:ab:43:fa:80:db:f0:
cf:87:1a:f7:c7:0e:e8:69:56:de:71:24:6c:05:02:
c5:a8:ef:e3:41:24:93:12:0f:5b:a3:26:37:99:1c:
99:08:95:71:8e:d9:33:81:6d:31:3e:dd:05:b8:41:
f3:e0:a7:98:2b:7b:5d:3f:8b:36:3d:b5:ec:7c:bf:
dc:c0:9c:64:1f:ce:b3:f4:1a:60:a4:1f:e2:08:04:
f6:65:e8:e1:47:66:bf:30:05:af:dd:89:99:d8:44:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:3D:10:F0:67:C5:9D:FA:29:12:0C:D5:4C:AF:56:EC:A4:FA:AD
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/tyc9EPBnxZ36KRIM1UyvVuyk-q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f8:a7:fc:b2:37:0b:ae:b3:a3:61:d4:33:59:87:b9:3a:dc:
15:b9:fd:85:33:b3:c2:c7:eb:1f:75:21:bb:1b:72:d5:22:66:
74:a0:78:24:95:c8:a0:0c:01:8a:39:e3:53:a6:63:81:55:9e:
6c:b9:f8:0f:b3:74:5d:ec:65:e2:e0:b3:83:6a:21:c0:cc:40:
17:a5:a1:af:3e:dd:ea:89:b5:34:f8:20:96:f4:fa:41:7b:ae:
7d:ce:39:4f:77:04:1e:05:b4:61:64:51:0f:9c:a9:c1:b9:9c:
be:f2:04:cf:e3:ef:ab:5a:da:ea:82:c2:a0:88:84:55:89:14:
ef:ed:6c:59:db:d2:6c:9a:51:dc:99:da:37:e6:d1:39:98:08:
b6:04:39:bf:bf:4b:8d:b9:73:9b:d4:67:5d:f2:6c:01:9c:43:
01:41:57:fb:6e:bd:8d:b5:7a:74:c1:f4:e9:34:79:d8:88:97:
b4:f2:04:61:5d:7b:17:a5:5a:6c:80:58:b7:04:c0:4c:79:20:
3e:ed:10:2f:8f:af:5a:28:9c:8d:be:da:f0:9a:18:ce:f7:3b:
fd:4a:e2:46:b0:ad:c4:9c:90:ae:3a:eb:48:09:6b:38:fb:86:
ed:d6:cf:1a:4f:98:20:2c:2b:b5:95:8c:1c:58:c2:18:1d:00:
d9:95:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org