Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TOB19O65pahyBqfnVhXJO7oKM2g.roa
File: TOB19O65pahyBqfnVhXJO7oKM2g.roa (raw, json)
Hash identifier: 5dk9ZKozSy6h8d2RincIleKlfACtNPgSPs86npnenaI=
Subject key identifier: 4C:E0:75:F4:EE:B9:A5:A8:72:06:A7:E7:56:15:C9:3B:BA:0A:33:68
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08C72814
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TOB19O65pahyBqfnVhXJO7oKM2g.roa
Signing time: Tue 22 Mar 2022 20:40:52 +0000
ROA not before: Tue 22 Mar 2022 20:40:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147269652 (0x8c72814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 22 20:40:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce075f4eeb9a5a87206a7e75615c93bba0a3368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:81:e6:7e:c5:70:16:d7:c3:87:a1:93:d3:
aa:60:5f:1f:b0:2c:7e:d2:9c:d2:9d:3b:73:b9:19:
9b:73:d8:8f:0b:18:7f:78:39:f3:3e:74:75:60:0a:
54:36:a5:ee:a2:e0:2d:1d:10:51:0d:0e:51:2d:17:
db:7f:13:fd:94:73:4c:b5:20:01:0c:d7:22:f3:aa:
94:63:5d:7e:92:81:f5:0a:44:82:a6:08:00:cf:67:
8b:98:d6:4b:db:37:16:65:26:70:ba:a7:a0:6d:b5:
a9:85:a9:f9:26:39:63:32:5e:3f:45:c3:bb:60:af:
eb:dd:54:d3:ee:7d:36:7c:a5:bc:8f:d5:b8:8c:a6:
55:64:d0:83:30:cd:73:28:8b:a0:34:4f:89:ec:80:
59:a3:c9:c0:c3:ca:6c:67:99:42:e3:14:60:71:49:
91:6c:df:7a:50:39:44:6e:f9:87:59:74:09:7d:00:
61:9c:c9:50:54:1a:ba:19:21:1c:4a:a1:15:b0:a7:
40:91:48:e5:28:e9:a2:9a:4e:11:57:b9:e3:2d:68:
3e:aa:4b:20:31:1d:66:50:25:b9:8b:09:4d:b0:26:
be:d3:70:d4:55:7e:67:50:96:5f:7e:41:ff:a5:6b:
64:af:44:20:89:91:5f:8e:aa:d3:0f:7d:b8:1e:26:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:75:F4:EE:B9:A5:A8:72:06:A7:E7:56:15:C9:3B:BA:0A:33:68
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TOB19O65pahyBqfnVhXJO7oKM2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
91.186.216.0/21
94.241.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:da:b8:64:52:a6:19:8b:50:90:8e:f5:e7:64:b9:79:35:90:
46:df:fa:cc:f8:f5:c2:11:b6:4f:07:c7:54:21:d4:95:42:ea:
7c:2e:ab:81:ec:00:b6:ab:ca:a7:cf:3e:8b:b1:aa:69:0b:8a:
28:6a:92:f3:4e:c6:5e:c0:c4:28:03:36:a6:11:f9:5b:c2:6b:
59:60:ff:1f:1c:92:1c:ff:c2:c5:55:f9:83:24:13:bd:ef:e4:
54:be:66:52:95:16:73:8b:36:ac:60:fc:89:ea:cf:d9:5b:4e:
bb:25:78:42:96:a8:14:1b:b8:2c:3d:94:d2:15:1d:38:53:31:
92:cc:88:b2:2f:25:4a:d5:e2:8f:af:ab:f1:45:87:1f:7f:59:
a8:d2:98:6c:fd:9d:a5:6b:61:4a:e3:3c:e9:8f:15:0d:77:59:
5d:77:1f:d8:4d:90:2e:2b:2b:07:3e:23:e2:83:da:c4:8a:13:
b3:b5:8b:c4:3f:95:c3:d9:f2:a5:3c:3a:3f:d0:08:46:0b:54:
e1:34:89:9a:56:d4:51:eb:48:19:af:e9:9f:a2:a5:bd:56:4e:
be:a4:80:4c:e2:17:c5:c8:73:b6:22:52:60:0d:ac:f0:a9:8c:
3c:86:9d:d3:57:be:17:85:18:64:ec:52:39:68:97:a1:d1:17:
b0:6f:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org