Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TZlciA3DtOSF3d149MkNwk9wAs0.roa
File: TZlciA3DtOSF3d149MkNwk9wAs0.roa (raw, json)
Hash identifier: D+eZ8q0Kl1fD+9MnNKX4wbMszxVWzrxMKCKp1Mj/i8A=
Subject key identifier: 4D:99:5C:88:0D:C3:B4:E4:85:DD:DD:78:F4:C9:0D:C2:4F:70:02:CD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 032EFD8C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TZlciA3DtOSF3d149MkNwk9wAs0.roa
Signing time: Sat 01 Jan 2022 09:57:13 +0000
ROA not before: Sat 01 Jan 2022 09:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34119
IP address blocks: 91.205.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53411212 (0x32efd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 09:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d995c880dc3b4e485dddd78f4c90dc24f7002cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:47:7a:fb:d3:ee:1b:5c:08:6d:a8:b9:03:
ad:10:b3:10:68:33:83:e4:b0:e0:fb:29:cb:b0:ee:
28:18:38:4f:cb:0b:57:93:b6:b2:84:8e:00:56:40:
a0:f7:06:89:63:95:93:0d:6e:fc:a6:a3:6c:d9:b9:
36:91:2a:55:5f:79:1b:bc:b8:41:cc:4d:72:8d:1e:
27:a6:cc:43:fc:70:5e:08:99:09:b1:8a:3b:87:dd:
12:63:df:45:00:0c:f2:2f:5b:ba:80:90:98:0c:11:
d2:f0:be:1c:72:d5:7e:b7:3d:84:9a:f2:e8:35:75:
95:83:c3:72:8d:0a:22:d7:f9:09:96:49:f3:52:89:
6d:a0:21:e3:1e:a2:b4:37:a4:4a:18:8e:6f:dd:ef:
61:e5:6c:14:ae:de:c0:40:2b:61:b3:d9:35:28:f0:
49:83:61:25:73:23:fa:fa:0d:f7:8a:d8:74:04:d2:
ad:b4:fb:39:24:55:ba:b3:6e:d8:c5:10:3d:b9:44:
ab:0e:80:4a:83:08:90:c2:ce:77:ae:dc:59:6b:cf:
05:f6:2b:66:08:84:c7:30:d7:e8:39:3a:56:72:4d:
b4:49:e5:d2:a2:12:7b:cb:ea:3f:42:b1:24:c7:5e:
0b:0c:3b:ae:6c:bd:e1:e2:52:d8:7a:eb:45:66:41:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:5C:88:0D:C3:B4:E4:85:DD:DD:78:F4:C9:0D:C2:4F:70:02:CD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TZlciA3DtOSF3d149MkNwk9wAs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fc:47:43:9b:e8:1c:92:b0:e1:8a:35:49:52:ea:75:d3:c0:
4d:db:d9:6c:4d:56:ef:0d:a7:69:42:fb:19:4e:02:11:05:a3:
b0:1e:81:ee:34:87:e6:92:fe:ce:3f:0e:af:e2:a1:69:c1:5c:
5f:f0:ff:7c:3a:5a:b7:1c:07:5b:cd:ec:47:c8:50:a2:41:ad:
50:3c:dc:21:a9:e0:87:48:4d:ba:bd:01:51:fd:03:37:ad:ff:
92:1e:d1:12:fc:72:41:98:c1:6c:05:47:21:a7:d4:b6:31:8b:
69:c3:bb:54:26:08:61:51:9b:07:f5:8d:49:73:1f:82:e5:52:
84:f0:15:36:da:b5:60:31:31:96:c0:00:ca:d8:bf:b6:d1:91:
f2:3f:4a:bd:0e:76:16:18:27:4f:32:49:88:2a:dc:a1:70:fe:
1e:bd:95:8d:be:b4:cc:a5:77:d0:3b:e3:62:43:36:5c:b8:eb:
b6:1e:59:d7:28:59:aa:2f:f2:6d:be:45:91:e9:10:d9:03:40:
b2:79:bc:7c:80:eb:cf:08:0a:ff:b3:e2:89:ec:b6:5c:04:be:
0c:c7:61:de:1b:31:f2:15:ff:90:b1:93:13:29:70:06:e7:86:
7b:95:e9:8f:68:22:6d:52:3c:7d:d6:37:9f:32:56:05:45:28:
3a:ea:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org