Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Tk73Z01uNlzcrjMqjwTkg1ANjWA.roa
File: Tk73Z01uNlzcrjMqjwTkg1ANjWA.roa (raw, json)
Hash identifier: Sih93B+WwxK+wPp1qWKwTRUH4EE89ithE2PQK/9WOJE=
Subject key identifier: 4E:4E:F7:67:4D:6E:36:5C:DC:AE:33:2A:8F:04:E4:83:50:0D:8D:60
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 032A040C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Tk73Z01uNlzcrjMqjwTkg1ANjWA.roa
Signing time: Sat 01 Jan 2022 16:04:23 +0000
ROA not before: Sat 01 Jan 2022 16:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 85.209.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53085196 (0x32a040c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e4ef7674d6e365cdcae332a8f04e483500d8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:0d:7a:7e:79:c9:48:05:73:f7:b1:03:ce:
79:f1:60:4d:49:db:67:09:fa:4c:7d:59:b8:3e:ae:
88:25:a2:18:bf:2e:19:fb:f5:4d:47:22:75:f9:36:
f9:68:f8:45:40:0c:8c:43:31:0f:53:da:d3:23:61:
ec:82:24:41:76:24:6a:89:20:c2:8c:fc:5d:9e:84:
35:29:09:7c:da:42:b7:71:70:68:7b:fd:a9:d5:f1:
0e:eb:dc:29:ce:80:64:70:35:17:f2:9c:03:2f:7e:
ad:da:44:b1:fa:82:60:98:b0:66:76:06:6e:c3:ca:
59:10:af:9c:bf:79:73:46:84:47:c7:4c:7f:22:9a:
b6:1c:1b:3c:66:ea:0c:d0:2c:59:2d:80:f1:88:fd:
ff:ce:11:e0:9c:09:38:b1:69:27:6a:54:fd:f9:be:
71:0d:d1:18:cc:b5:07:59:d4:d5:5d:41:5c:71:dd:
9d:45:4b:40:91:ec:89:5a:50:9a:c6:d6:e9:bd:4d:
79:94:33:42:16:6e:f2:90:b2:bd:6b:79:15:a7:64:
9b:0b:e6:28:21:cd:42:6e:13:8f:c5:76:ee:14:95:
f0:6b:9b:ef:94:7f:d4:88:83:39:cb:f6:0c:7f:1a:
57:9e:1c:68:31:f6:e0:f0:13:34:ba:37:85:cb:3b:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:F7:67:4D:6E:36:5C:DC:AE:33:2A:8F:04:E4:83:50:0D:8D:60
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Tk73Z01uNlzcrjMqjwTkg1ANjWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
51:86:92:32:06:14:59:16:6b:bd:bc:88:f2:b0:4b:e6:29:6a:
c6:4d:90:c6:18:bd:71:ed:8d:e6:21:62:cf:04:a9:ea:6e:6b:
60:0e:89:f1:72:f6:9f:d9:ad:ff:e1:5c:02:e5:26:f5:c5:bc:
0b:c6:db:30:7b:7b:5a:59:e5:fc:47:6e:e9:7d:16:7a:04:db:
37:a1:b0:fc:ff:3c:55:d8:2e:dc:16:bb:15:d1:44:8e:17:84:
2a:f2:e3:c4:d0:70:1a:38:b8:75:9c:47:1c:80:91:0c:b0:31:
08:66:b8:3d:a8:48:37:42:5c:3a:bd:a4:b0:24:40:02:a8:58:
55:86:03:e5:92:61:a4:e5:23:80:03:a9:d3:2a:12:54:f6:e2:
ff:ea:79:b4:c4:32:f6:55:c1:5e:dd:f9:c8:e4:40:60:43:06:
ba:25:b8:91:06:d6:b6:07:5c:39:dc:d5:5e:f2:fa:eb:a9:1a:
e0:8e:e0:ea:bc:3d:7e:9d:54:69:01:3a:17:af:6b:24:81:16:
be:e3:3a:93:58:f3:56:2d:e2:db:47:a0:f3:1b:b6:9b:1f:fb:
86:2b:30:96:60:c8:58:0d:46:07:e1:6a:fd:8e:84:c9:8d:99:
d2:10:d6:1b:48:14:9a:8a:5c:e7:0a:28:26:92:7b:c6:ad:28:
c7:ae:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org