Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TJ14Clt1p_CcpvtNmjcbzVMWdOQ.roa
File: TJ14Clt1p_CcpvtNmjcbzVMWdOQ.roa (raw, json)
Hash identifier: Kke873iaG0mpWd81qMhhR1PE/2P25dB2MI9WLSBDz6E=
Subject key identifier: 4C:9D:78:0A:5B:75:A7:F0:9C:A6:FB:4D:9A:37:1B:CD:53:16:74:E4
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0B757CA0
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TJ14Clt1p_CcpvtNmjcbzVMWdOQ.roa
Signing time: Tue 15 Mar 2022 05:25:35 +0000
ROA not before: Tue 15 Mar 2022 05:25:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.240.132.0/23 maxlen: 24
185.240.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192248992 (0xb757ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 15 05:25:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c9d780a5b75a7f09ca6fb4d9a371bcd531674e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:f4:3f:be:3a:94:fb:d1:e5:74:c0:12:70:
48:a8:36:8e:c9:fe:df:2f:e5:cc:5b:8d:98:07:4b:
75:89:1e:8d:2f:a5:c8:92:bd:0d:01:04:a8:1e:94:
f4:72:b8:3f:19:d1:ca:bc:20:85:76:a0:da:aa:50:
4a:f5:4a:cb:a7:f8:3d:49:7d:d0:39:cc:8b:80:be:
59:d6:bc:0f:9e:e6:1a:a1:0c:59:d4:fc:d8:60:fd:
33:fc:da:fe:96:f4:5a:7a:11:fd:ca:8f:13:13:3a:
6d:07:8d:70:ff:f4:4a:8a:36:aa:2a:05:ab:3e:39:
25:a7:39:64:d3:f0:5b:b3:6f:91:3e:0b:5f:f8:9e:
f1:04:fb:43:0e:8a:a7:38:f1:49:af:e5:97:fe:a2:
03:d8:ea:ab:fc:8a:e0:97:5a:a5:f3:97:05:e2:9f:
b7:85:d2:ae:80:1f:e3:bc:d7:c6:16:1c:23:65:95:
52:8b:72:16:89:fd:98:a5:79:bc:dc:87:c4:09:ca:
31:60:56:33:ea:4c:0c:5e:28:0e:e5:32:9f:95:4a:
6e:78:c6:0c:14:64:f2:df:c6:46:07:87:0d:fa:f4:
b6:ed:57:1c:00:0c:6d:e2:bd:cc:c2:3e:be:b3:d5:
35:77:7b:d7:19:0a:e6:83:29:e1:0e:ea:c5:7b:bf:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:78:0A:5B:75:A7:F0:9C:A6:FB:4D:9A:37:1B:CD:53:16:74:E4
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/TJ14Clt1p_CcpvtNmjcbzVMWdOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.132.0/22
Signature Algorithm: sha256WithRSAEncryption
88:cc:83:93:27:96:f0:e4:dc:eb:03:c4:13:47:05:e4:e1:c5:
01:45:5f:51:ed:34:51:f9:ec:0e:ac:9b:c6:91:27:74:7b:e7:
cf:50:96:3e:f7:19:76:c8:b9:07:fd:1b:f1:c2:0b:4c:4e:9d:
05:39:58:26:10:48:55:ca:ee:db:b5:7b:7e:16:11:66:18:62:
99:c6:0f:66:29:a0:72:db:ee:a2:f6:52:ec:7b:e6:2b:a6:97:
f2:84:31:33:46:21:d2:9a:8a:5f:d0:f7:a0:2a:69:a4:5a:59:
6d:20:19:fd:1d:56:62:5b:d4:00:be:a8:e8:43:a3:fd:e4:13:
85:17:4a:51:e2:b1:9f:15:85:32:fb:c5:82:56:c0:d3:b6:70:
50:31:f6:ec:ce:29:8a:ce:97:12:03:66:7b:09:43:79:9c:c2:
61:92:f6:3a:a2:8c:a1:f6:85:3a:48:49:8a:c3:35:bb:b2:bd:
af:39:0a:81:58:f4:4b:5f:12:da:58:43:4d:0b:98:c4:00:1a:
f1:7a:80:09:cf:e0:09:69:e9:d8:b2:e7:40:c7:e8:17:e1:d6:
13:73:ec:a7:45:91:18:ba:66:6c:b9:6c:cb:14:2a:a3:ff:45:
78:f6:59:ba:39:c1:89:7f:2c:dc:c8:05:e8:6b:3f:20:0b:9e:
4d:2c:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org