Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/TiA8gcmMRV5Fm3Z8C-40-fKturI.roa
File: TiA8gcmMRV5Fm3Z8C-40-fKturI.roa (raw, json)
Hash identifier: 1mEY8NyoRnvPlr32syGCp36qmQk/5V/2eb/U9KcHuug=
Subject key identifier: 4E:20:3C:81:C9:8C:45:5E:45:9B:76:7C:0B:EE:34:F9:F2:AD:BA:B2
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 378F18E9
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/TiA8gcmMRV5Fm3Z8C-40-fKturI.roa
Signing time: Sat 01 Jan 2022 10:00:55 +0000
ROA not before: Sat 01 Jan 2022 10:00:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207995
IP address blocks: 217.198.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932124905 (0x378f18e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 10:00:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e203c81c98c455e459b767c0bee34f9f2adbab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:d0:88:fd:73:b7:df:69:d9:18:cd:38:d2:
7d:72:9f:1e:9e:3f:b8:ad:de:54:4d:69:55:77:e4:
88:04:5a:e5:c7:39:c8:7c:08:48:d4:c4:2a:06:88:
dd:56:a4:bc:e6:b8:1c:77:1a:7a:6b:09:a6:ad:8a:
59:f2:33:a3:79:3a:18:6d:48:ca:0b:08:ed:0e:7d:
53:87:bb:59:f8:bc:a5:5f:20:a9:bc:76:be:11:e0:
ab:ce:3f:9a:42:e7:9a:8f:63:34:88:0a:8c:23:3d:
fa:1b:e2:3c:07:fd:bf:51:cd:ce:9d:15:48:ba:0f:
8a:43:73:10:6f:7f:b1:e7:68:16:7c:e8:72:c2:ab:
4a:80:24:c8:43:27:c8:45:c2:64:c1:dd:cf:00:cf:
78:50:d6:71:8e:ca:70:81:23:b5:d0:1e:a4:d5:4b:
6f:7b:58:1e:b1:de:27:b1:40:89:61:b3:be:d3:72:
00:43:30:ae:c3:f5:3c:f5:03:ee:79:74:5e:0c:08:
c9:0a:c6:2e:41:13:75:26:73:8b:94:63:1e:f8:d9:
04:79:d9:20:0c:84:d2:94:c7:bc:46:ff:f2:42:33:
a6:04:b7:92:45:46:d1:25:6f:38:96:05:b2:45:24:
32:0c:61:70:22:cf:4a:32:3a:e1:82:2d:81:cf:ff:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:3C:81:C9:8C:45:5E:45:9B:76:7C:0B:EE:34:F9:F2:AD:BA:B2
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/TiA8gcmMRV5Fm3Z8C-40-fKturI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:51:d9:60:69:7f:9c:98:06:2b:d5:f3:9d:a0:ba:62:16:ad:
20:05:b0:1a:71:4c:7d:4a:b1:4e:0c:20:1e:06:82:0d:dd:79:
c8:a7:a6:bd:9e:6e:36:b7:6a:4d:ca:aa:ea:ff:11:6d:bd:a6:
bc:6d:78:af:65:52:f9:07:08:f4:ac:dd:2a:b1:c1:84:84:2f:
a7:46:2b:c4:15:8d:e0:f1:30:b3:c4:97:f2:19:9a:84:64:33:
ef:47:78:1d:d6:37:0a:fb:8e:47:c7:34:2a:22:8c:25:63:ed:
80:98:63:b0:77:a9:cd:7b:b0:96:ee:b6:60:f2:3a:0b:ea:bd:
e3:2c:f6:75:fb:26:76:a9:89:ae:0a:ba:cc:92:fb:d8:e4:d6:
70:79:35:3e:c6:5b:41:ef:05:b1:06:05:1e:db:53:78:63:d2:
f7:b3:8f:80:f1:4a:f3:da:72:a7:c9:c1:4e:93:64:1b:91:e2:
ac:ca:dd:09:e7:08:13:6a:d1:78:02:ea:16:72:ad:e7:4f:d3:
17:53:fe:75:5a:f2:61:ca:1f:1e:70:ae:90:e3:2c:75:1f:0f:
28:30:66:f4:8b:3d:fd:ef:90:7d:01:74:27:25:36:83:89:36:
ca:0f:33:ed:6f:35:45:d4:1f:64:5e:88:bd:b0:2b:4f:4d:39:
fb:ce:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:12 2024 by rpki-client on console-ams.rpki-client.org