Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/TgfD1CNCTMGDpAfz17qlBBlyYyI.roa
File: TgfD1CNCTMGDpAfz17qlBBlyYyI.roa (raw, json)
Hash identifier: vGiHRTlsjhC4fuMAqYqVZTGBeCMgckavdLaYzt9fzH8=
Subject key identifier: 4E:07:C3:D4:23:42:4C:C1:83:A4:07:F3:D7:BA:A5:04:19:72:63:22
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01B28D1D
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/TgfD1CNCTMGDpAfz17qlBBlyYyI.roa
Signing time: Sat 01 Jan 2022 02:59:09 +0000
ROA not before: Sat 01 Jan 2022 02:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203836
IP address blocks: 185.164.228.0/24 maxlen: 24
185.164.229.0/24 maxlen: 24
185.164.230.0/24 maxlen: 24
185.164.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28478749 (0x1b28d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Jan 1 02:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e07c3d423424cc183a407f3d7baa50419726322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:2a:5d:23:7c:22:a3:28:ca:5e:4b:8a:bc:
28:31:78:3a:f7:6e:f4:d1:b0:2b:19:a2:60:5b:e9:
83:72:e0:98:e9:75:dc:8b:30:ea:12:ff:e2:d8:53:
6e:26:c6:3b:fa:9e:e3:f6:85:49:2c:6c:f7:4c:76:
a0:2c:af:c4:f3:4a:dd:4c:8b:3f:aa:1f:b9:e7:99:
a0:04:73:f8:5e:3d:99:02:ae:ac:a3:85:4b:7d:5d:
5b:3c:be:10:be:29:3b:49:b9:78:56:99:6a:a7:ff:
c1:04:29:9e:47:d5:7a:99:59:14:b8:d9:67:8d:31:
3b:3c:32:a9:ec:ae:20:51:5d:b3:84:d0:86:a8:d8:
84:a3:b2:e8:67:01:c8:06:d6:d4:b6:36:b8:e8:04:
ec:b6:ea:aa:02:05:fa:c3:d9:72:6f:b4:b3:7a:bb:
e5:f3:d6:f0:6d:f3:43:79:b5:de:a9:49:8a:a4:eb:
3a:b5:ec:0e:51:0f:6b:94:b8:62:a5:32:09:ab:48:
6c:77:34:2f:b5:24:a7:31:9a:4a:eb:89:ce:92:35:
ae:4d:df:1d:fa:b9:fd:cc:8d:09:37:da:44:8b:6a:
e2:47:8f:c1:5c:af:78:d2:9c:92:42:eb:76:30:4f:
de:89:5e:b8:c8:e0:25:63:51:19:97:bc:15:5a:ec:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:C3:D4:23:42:4C:C1:83:A4:07:F3:D7:BA:A5:04:19:72:63:22
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/TgfD1CNCTMGDpAfz17qlBBlyYyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.228.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:89:79:eb:e8:65:ec:20:a9:45:72:a3:6e:36:7f:60:e6:17:
08:b0:9a:61:b7:fb:4e:54:53:79:77:8f:d6:55:da:e8:c2:29:
c7:cb:9e:50:a2:c9:7a:6c:4f:23:48:a0:ac:fe:4d:11:c9:01:
be:32:1c:df:29:71:6f:ad:f7:b5:21:9c:58:24:db:eb:70:98:
4d:84:c1:73:cc:64:16:ee:11:0b:e6:33:8f:8d:5a:e5:96:96:
3c:d3:c3:3a:52:79:31:46:a9:ca:9a:03:69:cd:04:c5:6c:75:
e1:0c:14:66:4e:d0:19:73:5a:98:c1:1c:ee:3e:9d:29:12:91:
73:3d:46:6a:67:5d:09:81:78:17:ba:be:aa:5c:11:f1:e1:5a:
37:d8:6d:58:a9:d2:5a:07:49:7c:64:39:77:50:bd:9a:4c:93:
6a:c0:d3:a8:87:21:c2:8a:70:cd:80:3f:9e:38:e0:81:db:02:
11:3f:85:ed:73:99:ab:61:5e:fc:f3:0b:e7:4b:b4:68:0a:90:
12:92:e3:4b:62:d7:8a:7b:de:13:88:d9:7b:7d:15:e4:2e:42:
26:70:64:dc:e7:01:0c:06:11:ba:0b:94:2d:7b:f0:4f:56:15:
cf:34:9b:ab:46:a6:e4:e0:3e:df:4b:06:e0:74:37:a1:f1:f2:
72:01:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org