Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/tyaSF-Xn0F8cv2SiURBg49_mpts.roa
File: tyaSF-Xn0F8cv2SiURBg49_mpts.roa (raw, json)
Hash identifier: tBQyezYmB36QIzp7if2yM/yFYgqQG7kN85DkdozkuSE=
Subject key identifier: B7:26:92:17:E5:E7:D0:5F:1C:BF:64:A2:51:10:60:E3:DF:E6:A6:DB
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 07A6BD80
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/tyaSF-Xn0F8cv2SiURBg49_mpts.roa
Signing time: Fri 03 Jun 2022 07:35:20 +0000
ROA not before: Fri 03 Jun 2022 07:35:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 195.177.230.0/24 maxlen: 24
195.177.231.0/24 maxlen: 24
195.178.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128368000 (0x7a6bd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 3 07:35:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7269217e5e7d05f1cbf64a2511060e3dfe6a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:c7:3a:43:53:7b:e8:1a:4b:a6:d9:62:ac:
25:3a:ba:09:04:07:2e:95:ce:44:f7:fd:31:c0:a8:
5d:17:9f:82:a9:17:94:63:df:63:cb:0a:ef:27:cf:
da:1e:70:34:9d:02:8b:54:65:87:23:06:5b:cf:72:
b9:5f:90:28:80:12:a6:f6:0a:8a:cd:16:66:51:22:
f5:0e:88:41:35:ba:6f:df:e0:9e:01:42:ed:83:c8:
78:69:65:5c:00:12:66:dc:f6:df:9a:17:10:70:25:
82:c2:ce:90:38:29:d3:ae:54:f6:da:43:bd:7a:46:
ac:40:d6:87:6d:35:38:78:ea:cb:f9:d8:65:5b:e9:
73:5e:c4:89:d1:bd:5e:17:d8:f2:94:f6:f2:fe:1f:
aa:6d:89:80:9a:c4:be:09:22:9f:bb:4a:33:d0:35:
cf:4c:e3:96:04:22:8e:88:bd:ab:e8:18:30:1f:f7:
5b:8a:f5:12:eb:21:c4:f3:15:7b:1d:f5:6b:a9:7f:
94:f0:f6:aa:9e:1d:ff:fe:05:56:a4:38:ab:65:34:
4c:b7:12:7d:e8:42:5e:9d:b2:6c:70:e1:56:ee:32:
be:c1:48:29:cb:6a:aa:f0:e6:44:42:af:49:36:e6:
21:d5:a7:a3:89:1b:1b:71:c1:42:79:fa:13:3d:cd:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:92:17:E5:E7:D0:5F:1C:BF:64:A2:51:10:60:E3:DF:E6:A6:DB
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/tyaSF-Xn0F8cv2SiURBg49_mpts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/23
195.178.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:91:15:66:e8:ee:cf:d6:ee:84:d5:2c:07:0b:b4:89:53:a7:
37:1c:dd:0a:ca:f3:21:78:95:54:b9:19:2a:ae:61:e1:f4:77:
51:b0:d1:8e:22:7b:3b:2c:c6:83:52:16:4f:0a:5d:fe:af:f0:
74:08:a6:43:4f:51:98:27:18:d2:26:e6:2d:fb:f1:f8:c9:6d:
e8:5b:81:cd:b2:4b:a0:19:9a:0f:f7:e3:a5:3e:87:16:82:d2:
14:b3:63:d4:fd:ff:d1:86:5a:19:62:fb:8a:08:3b:62:c6:5c:
4b:00:60:26:fc:59:c8:96:da:34:fb:88:3f:e1:f5:84:e5:fd:
de:bf:54:22:37:0c:59:b0:8e:96:0f:9b:d2:e7:29:4e:48:c0:
c0:1c:57:48:43:01:e0:0b:cb:45:99:7c:da:d1:78:b9:ac:c9:
e5:ce:03:de:51:c0:0b:c5:b6:65:7f:18:64:a4:b0:a2:9c:ed:
8f:d6:94:1e:78:68:60:2e:70:10:f7:a2:8a:39:7d:0d:22:d7:
ce:47:7b:5b:1e:59:93:1b:2a:17:d4:89:a7:2b:3a:e1:e6:6c:
1e:cc:de:58:55:bd:48:f6:2d:1e:63:f8:a2:04:cb:1f:c6:4b:
3c:68:cd:e8:eb:8b:15:a8:66:02:7f:6b:d3:d2:30:51:26:44:
0a:97:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org