Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/TTYLRXBI-8d31fcxOMqwNqqXbto.roa
File: TTYLRXBI-8d31fcxOMqwNqqXbto.roa (raw, json)
Hash identifier: a8u63FdEmtrnNDmHImGNdobnolXy2A/LY7Jzw9GMngk=
Subject key identifier: 4D:36:0B:45:70:48:FB:C7:77:D5:F7:31:38:CA:B0:36:AA:97:6E:DA
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 366034E4
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/TTYLRXBI-8d31fcxOMqwNqqXbto.roa
Signing time: Sat 01 Jan 2022 09:55:02 +0000
ROA not before: Sat 01 Jan 2022 09:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56616
IP address blocks: 185.116.20.0/22 maxlen: 22
31.7.88.0/23 maxlen: 23
31.7.90.0/23 maxlen: 23
2a0a:d340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912274660 (0x366034e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jan 1 09:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d360b457048fbc777d5f73138cab036aa976eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:be:1c:58:6a:79:e8:80:20:cd:16:bb:68:
d3:d2:2a:da:38:93:b1:b5:a8:8a:9b:5a:72:12:c5:
30:a0:00:a1:e9:15:60:09:e9:ec:dd:58:60:ec:ea:
41:84:15:a7:4f:e7:c8:8b:72:d3:a6:71:e4:93:f1:
c4:2c:c5:10:e0:e0:25:4b:83:14:c3:a1:51:30:07:
e0:79:4d:32:5b:3b:1a:0e:6e:a7:b0:f4:fa:7c:19:
91:70:6a:68:08:90:5e:df:44:cf:ad:10:0e:26:31:
ed:3f:06:04:8d:74:78:cb:83:fb:b5:fc:48:02:10:
d3:ef:a0:c1:ba:23:7c:fd:d7:01:03:6f:d8:08:ab:
9c:7b:89:ae:7f:7b:b4:78:cb:9d:7a:78:31:3c:42:
f3:37:59:bb:03:e8:6a:b7:b8:41:29:77:de:31:cb:
d0:00:17:53:52:ff:a0:55:aa:43:e3:98:18:f8:5d:
fd:e1:ec:57:9d:7c:9a:a9:fd:b1:d4:66:d9:c6:f6:
8c:57:28:be:ab:c5:d0:7e:62:e0:f6:53:db:a7:3e:
70:f0:48:97:dd:7a:45:d6:9e:1a:11:c9:01:e0:9a:
fc:83:26:d7:12:34:57:b2:85:53:f9:d0:00:59:4e:
2e:b9:19:6c:5d:a9:6b:ba:f5:26:37:c4:0d:50:0a:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:0B:45:70:48:FB:C7:77:D5:F7:31:38:CA:B0:36:AA:97:6E:DA
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/TTYLRXBI-8d31fcxOMqwNqqXbto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
41:09:1a:98:fa:db:ab:9d:98:db:f9:de:e5:ab:ed:97:2f:4e:
b7:de:c5:ea:fe:7c:28:21:46:24:ce:a6:63:97:7b:45:20:3f:
cb:a3:d9:d9:2f:22:04:4f:c7:28:98:c0:cf:4b:64:91:80:db:
22:59:23:10:2d:8c:07:8f:93:9e:be:bb:cc:a2:00:09:af:64:
9a:77:9c:51:5f:e3:f6:34:d3:f0:7e:56:29:99:ae:c1:50:4f:
41:5a:52:5a:d9:be:48:0a:5e:7b:72:04:86:77:04:b2:8b:f8:
ec:42:18:56:89:1d:b9:cf:ad:09:01:4a:e2:fc:06:79:e1:63:
e9:bb:2d:7f:f7:50:68:e6:d0:0e:f1:9b:0d:b8:3e:a1:7b:22:
1a:6d:c1:55:11:b6:4a:cc:d6:69:1c:57:4d:75:29:ac:af:7d:
53:c5:d2:4a:03:b3:3b:73:84:56:0f:7d:3b:ec:29:18:7b:d4:
5d:21:0d:aa:b8:b8:10:75:02:25:3e:66:2d:c7:cf:ef:be:ee:
3f:6f:92:e5:37:7f:37:64:a2:4d:7f:09:20:98:c2:9f:20:87:
f1:3e:db:80:31:81:6c:71:b2:5f:f2:98:15:cd:3a:dc:34:12:
89:a0:a3:ea:a8:34:60:78:7f:b1:ce:f8:58:6b:87:82:37:c3:
5e:5c:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org