Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/TCAMO-1rk-V1yzmARCD8R7sY-18.roa
File: TCAMO-1rk-V1yzmARCD8R7sY-18.roa (raw, json)
Hash identifier: NoONlygu4AjONxTsWMuUV/uOHdZinU8+Os7f2d+nJig=
Subject key identifier: 4C:20:0C:3B:ED:6B:93:E5:75:CB:39:80:44:20:FC:47:BB:18:FB:5F
Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial: 0182D63674D96C0C9436C677E6BC040D8751
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/TCAMO-1rk-V1yzmARCD8R7sY-18.roa
Signing time: Thu 25 Aug 2022 18:14:29 +0000
ROA not before: Thu 25 Aug 2022 18:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 193.34.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:36:74:d9:6c:0c:94:36:c6:77:e6:bc:04:0d:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Validity
Not Before: Aug 25 18:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c200c3bed6b93e575cb39804420fc47bb18fb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0f:2a:40:9d:74:5f:5b:f0:b0:04:2d:f2:d3:
0d:11:71:9a:2b:28:2c:b5:ae:78:0d:85:a9:54:3b:
0d:b3:7b:25:27:f1:5b:57:e6:e8:45:cc:d8:a8:fe:
50:2c:e6:e3:69:72:3c:b6:a0:67:bd:bd:62:82:9b:
fb:9f:72:70:10:ff:a1:ea:fb:46:29:92:35:d9:38:
dc:a9:b1:08:91:9d:a3:f7:d3:66:0a:c0:54:58:59:
72:b7:b4:77:a5:85:ac:6f:6c:3c:59:3d:3b:c1:fb:
93:29:ce:30:cd:4b:c1:da:04:08:48:46:f3:2e:c8:
b3:9a:bd:73:b5:24:c4:02:9b:fd:fc:ac:f6:b9:ec:
d0:6d:9c:fa:db:f9:ad:c1:13:04:99:ea:d2:72:a6:
61:bf:a4:82:35:bc:09:d1:c6:2d:f4:dc:f4:0a:93:
28:67:c2:74:5f:9e:a5:21:28:d0:4f:3c:a4:18:da:
fd:22:6b:d1:64:e8:a1:b6:7d:3f:7e:20:74:6b:ea:
3f:68:11:f9:b8:ff:7b:93:55:6b:f4:cc:7d:42:37:
d3:c3:9e:af:4d:52:3d:4e:e0:24:8d:0c:98:9e:35:
b4:50:ad:33:fc:87:79:e1:d3:db:b7:db:88:51:0c:
b2:3a:8e:2e:3b:37:c9:6c:ff:c4:5b:62:73:5b:f7:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:20:0C:3B:ED:6B:93:E5:75:CB:39:80:44:20:FC:47:BB:18:FB:5F
X509v3 Authority Key Identifier:
keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/TCAMO-1rk-V1yzmARCD8R7sY-18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b8:71:bc:12:1d:78:40:18:58:cf:b3:14:c4:a3:99:13:7e:
30:2f:83:06:73:f6:86:7a:3d:7c:7c:7e:70:43:12:83:e0:45:
20:ef:59:ec:ff:58:bf:a4:0f:cd:a2:f7:b1:83:18:97:d1:f5:
80:85:23:d9:0b:e8:64:d0:cc:28:03:20:50:d8:e1:2b:a7:49:
bd:ba:d1:f7:69:f5:14:66:ea:e1:b1:a6:f6:19:ed:9e:da:8b:
e5:c5:0b:a9:2b:8b:aa:83:25:9f:f7:e7:e8:91:d5:cd:09:5b:
04:02:23:27:7d:29:3f:bc:2b:60:3f:55:60:f5:cd:89:e7:28:
01:9b:67:e4:46:2a:91:ba:01:18:48:88:89:85:dd:d4:69:ea:
1d:9c:86:40:9f:10:70:f8:ea:05:75:01:00:51:87:fe:86:26:
08:24:41:eb:8e:f2:82:03:67:e3:62:a4:c3:e5:0c:27:4b:e9:
35:5e:9d:df:0b:c3:54:eb:1b:41:b3:70:e8:2d:0a:f0:0a:b7:
69:86:86:55:cd:6e:34:ac:50:63:0d:82:af:25:ea:ee:ee:c7:
0a:f1:76:fa:d4:f9:ef:2d:cf:2f:bd:2d:f6:98:56:d3:3a:dc:
87:26:cb:3d:b3:dd:99:0e:03:92:db:62:6d:4d:8d:eb:cb:9d:
a1:06:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:04 2024 by rpki-client on console-ams.rpki-client.org