Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TN0TJkghegMs1xN9_DW6L0sUS7U.roa
File: TN0TJkghegMs1xN9_DW6L0sUS7U.roa (raw, json)
Hash identifier: 1sJomJMomJIXahbkr/2kxFJNr71X/pUozh+N3WKt0sc=
Subject key identifier: 4C:DD:13:26:48:21:7A:03:2C:D7:13:7D:FC:35:BA:2F:4B:14:4B:B5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0693473C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TN0TJkghegMs1xN9_DW6L0sUS7U.roa
Signing time: Thu 20 Jan 2022 20:26:02 +0000
ROA not before: Thu 20 Jan 2022 20:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.194.28.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110315324 (0x693473c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 20 20:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cdd132648217a032cd7137dfc35ba2f4b144bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:04:aa:9f:cd:08:9a:ee:8a:b0:e3:bf:72:
63:9c:58:f3:9b:81:e9:00:ae:db:28:8f:fb:3d:17:
31:d7:5c:43:b4:d9:b6:d6:81:35:d5:82:18:59:8c:
85:90:1d:a9:4e:4a:87:92:4d:16:8e:02:ef:58:93:
4a:4c:4f:63:c9:b2:6d:b4:0d:57:15:2f:1f:95:86:
e8:55:8c:40:5b:18:37:eb:89:74:6c:f3:a9:c2:51:
6a:2e:be:8a:57:26:88:bd:36:f9:01:7f:bb:0a:1b:
0c:ef:df:f7:25:c9:6c:ed:b8:10:85:f9:ee:06:6a:
9c:03:55:d5:ed:c1:6d:20:29:40:65:a5:e9:f9:07:
ff:cb:1d:1a:d4:5a:07:98:f5:5c:db:fc:92:32:da:
58:0f:5a:3d:f4:ea:df:04:07:ad:cd:27:43:ea:e5:
e1:f1:d7:ec:90:a0:da:eb:26:f8:ed:a4:72:8d:87:
bd:56:12:4b:09:fc:31:f1:4f:17:d9:f2:5c:00:89:
b9:83:71:a0:76:c2:cc:cc:89:44:ea:20:41:6e:31:
31:4c:5e:ab:b3:9d:64:11:de:24:03:b2:34:59:fb:
18:82:12:38:1a:f0:5f:b0:6d:ec:65:76:f4:ed:42:
14:8a:eb:f1:6d:e8:f4:78:62:78:11:87:0a:01:a7:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:13:26:48:21:7A:03:2C:D7:13:7D:FC:35:BA:2F:4B:14:4B:B5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TN0TJkghegMs1xN9_DW6L0sUS7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.28.0/24
185.223.76.0/24
185.225.3.0/24
Signature Algorithm: sha256WithRSAEncryption
70:44:18:19:83:d7:66:c0:0c:24:c8:15:01:48:46:1b:07:b0:
73:31:a8:d5:af:93:63:2d:f6:5b:89:85:30:f6:e2:b7:c0:ca:
7d:6a:2e:21:24:7f:11:97:ed:14:59:cc:7f:4c:3a:9b:19:7f:
89:68:b3:1d:7e:25:12:e5:22:f3:3b:80:36:41:b0:cf:60:c5:
c1:a7:ad:7a:69:2d:f5:ca:53:05:a4:bb:dc:e4:8d:cf:be:4d:
23:2d:dd:c7:3c:ca:c0:92:53:b5:00:32:24:75:6e:78:95:c3:
5d:40:ae:b3:d1:5b:61:ef:a7:69:87:41:82:6f:ac:53:38:96:
89:bf:5d:4c:e5:81:5e:42:1f:7f:53:85:f9:b3:e0:72:c0:86:
12:d6:0b:8f:39:6e:4d:44:38:11:4b:de:ba:8a:75:e7:08:04:
b4:be:24:4a:bc:ee:17:3a:4e:d8:7b:5e:f7:e2:b4:35:29:a6:
de:e2:b7:6d:06:01:a1:83:3d:94:e5:a2:bb:b1:20:a2:4c:17:
ea:72:38:74:f8:c9:84:d8:b1:ef:25:1f:5e:80:d4:b0:97:0f:
3c:b6:0b:4f:28:5c:58:75:2f:5e:18:dd:cd:3b:54:0f:ad:13:
be:32:37:c0:93:b5:38:34:90:a2:4a:7f:f6:b9:25:42:43:fc:
5b:3c:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org