Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/TGiZUD_WGlbOAuOSuJDlKzAJ_4Y.roa
File: TGiZUD_WGlbOAuOSuJDlKzAJ_4Y.roa (raw, json)
Hash identifier: CADPyPmjqUjZgbf7QIvoqRX4SECZdvddbZ4m9/CeeLI=
Subject key identifier: 4C:68:99:50:3F:D6:1A:56:CE:02:E3:92:B8:90:E5:2B:30:09:FF:86
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19A8ADFD
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/TGiZUD_WGlbOAuOSuJDlKzAJ_4Y.roa
Signing time: Sat 01 Jan 2022 05:52:39 +0000
ROA not before: Sat 01 Jan 2022 05:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206647
IP address blocks: 89.223.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430484989 (0x19a8adfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c6899503fd61a56ce02e392b890e52b3009ff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:3f:3c:e5:59:f1:8c:86:e1:67:85:2c:fc:
36:ec:c1:f8:00:75:55:2f:87:ef:ac:43:ae:c6:4e:
00:aa:68:60:8c:c2:03:5d:5f:34:82:40:4e:fd:aa:
97:37:21:ea:a9:8e:54:9a:26:dc:db:89:d0:4c:47:
2a:bc:01:27:29:9a:27:7e:90:19:4a:a6:e5:ee:b5:
b1:4c:ab:d1:2a:ff:9e:6b:c1:b4:22:26:35:c8:8e:
1c:6c:dd:f4:81:a0:14:84:71:42:8e:36:f2:d9:7e:
a8:f4:61:9b:a3:75:f6:16:a9:0d:af:16:1f:7a:07:
f3:62:2e:8c:32:de:75:fd:06:f1:10:b8:a1:6d:ca:
91:c2:4a:7d:6c:f2:df:42:99:ff:96:df:5b:94:92:
5a:3d:f4:d9:d3:39:e5:5b:2e:91:ca:13:9b:e8:b2:
7b:b6:bd:6f:6c:14:d2:c1:83:71:e4:af:60:1f:a3:
89:e8:ae:23:51:06:32:28:b9:ac:c3:7a:c7:b4:9b:
ef:98:20:f5:48:96:9e:52:42:98:1d:c0:40:1e:5b:
80:8d:a1:21:37:28:f2:a1:04:32:a1:db:4f:12:79:
c1:12:27:9b:b5:86:02:af:23:bf:79:a3:f7:d5:5e:
c9:36:52:c9:c6:ea:3a:8d:9d:58:c4:dd:0f:c8:a6:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:99:50:3F:D6:1A:56:CE:02:E3:92:B8:90:E5:2B:30:09:FF:86
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/TGiZUD_WGlbOAuOSuJDlKzAJ_4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2b:6f:67:90:7d:a3:63:94:dd:33:34:38:50:96:dd:ca:1e:
75:73:54:3b:1c:0d:34:02:eb:ce:b7:15:29:e6:c8:27:4b:18:
54:a3:3e:72:9f:a3:66:a1:0e:43:0e:88:0b:e0:33:4c:7a:45:
a0:52:8d:5e:c3:47:51:18:b2:14:f6:5d:05:2f:36:32:2a:b3:
85:cd:6c:f2:a9:61:69:7c:e4:de:c8:be:7c:0f:05:ad:40:bd:
f7:bd:14:92:c3:f8:95:3f:4b:ac:4d:21:c9:77:9e:87:7f:34:
45:3e:1a:68:ed:cb:45:19:ef:68:52:6d:22:b4:42:40:b7:18:
79:3d:8c:3e:f3:f5:43:89:fd:ca:3a:4c:24:12:98:54:4d:9f:
d9:87:a8:f3:00:86:2d:91:a5:9a:f4:8f:ed:c4:6d:96:54:cb:
05:4f:88:8b:cb:ae:fc:2f:00:c1:a6:cb:3e:2e:50:31:5c:7b:
7c:ba:19:b1:20:a5:b1:db:f0:91:b4:60:66:d3:4a:8d:83:85:
55:a4:4b:31:ab:83:25:ab:2d:bd:15:d5:bc:c7:2b:f5:2b:ad:
58:35:e6:68:34:e0:0e:46:63:c9:01:d2:73:24:65:69:4d:aa:
cd:33:6a:a9:35:dc:73:f4:a4:0a:47:2d:7c:9b:b9:9a:4d:16:
f1:a4:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:33 2024 by rpki-client on console-ams.rpki-client.org