Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/ttebsFZbOGCRBv8Xq98pxys-je8.roa
File: ttebsFZbOGCRBv8Xq98pxys-je8.roa (raw, json)
Hash identifier: 2UjXRSgpw67iyUYIt1IDjYkmT+qvyNCONhUQ2Y+1lsg=
Subject key identifier: B6:D7:9B:B0:56:5B:38:60:91:06:FF:17:AB:DF:29:C7:2B:3E:8D:EF
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 012A3F
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/ttebsFZbOGCRBv8Xq98pxys-je8.roa
Signing time: Thu 20 Jan 2022 14:19:13 +0000
ROA not before: Thu 20 Jan 2022 14:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51749
IP address blocks: 194.110.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76351 (0x12a3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Jan 20 14:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6d79bb0565b38609106ff17abdf29c72b3e8def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:46:cb:07:14:dc:f7:2f:cd:4f:05:47:08:
aa:94:1c:90:b5:0f:f2:61:21:17:23:d4:0e:42:d4:
90:70:33:43:be:9e:eb:05:85:59:33:84:95:d7:11:
7d:09:d9:df:b3:57:13:cb:64:13:f7:26:b3:a9:88:
73:ba:59:58:54:a1:aa:ee:38:b4:67:5b:7c:aa:8c:
1a:fc:de:cd:1d:8d:19:25:90:24:b6:9e:d1:25:86:
61:9f:1c:7d:88:2e:73:f7:1a:73:eb:98:dc:f0:da:
18:46:35:e2:7c:08:7c:d2:bf:00:04:c9:6a:35:8a:
82:aa:ab:0e:62:e5:95:e9:cd:42:a2:ce:9c:5f:a6:
02:ef:96:3f:0c:6c:ef:d2:9e:57:b4:e2:c3:52:d5:
14:fe:a5:af:a6:da:4b:64:f5:28:7c:f8:83:89:ad:
dd:a2:f5:89:2d:fb:04:3b:22:79:cc:85:b6:0f:04:
4b:eb:fa:18:93:7c:52:92:1a:8d:77:1c:cc:b8:95:
66:8c:dd:2a:0e:a0:2b:de:7d:07:f2:ea:bf:b5:5b:
8f:60:fa:1a:ed:6a:11:c5:5a:b2:f1:af:2f:11:df:
a4:bf:a8:7f:2a:b7:18:5d:ee:26:91:ff:f3:5e:9b:
0f:83:1c:e9:04:02:ea:5b:2f:07:c3:93:89:75:27:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:9B:B0:56:5B:38:60:91:06:FF:17:AB:DF:29:C7:2B:3E:8D:EF
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/ttebsFZbOGCRBv8Xq98pxys-je8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.221.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5a:6f:be:c6:86:0d:95:e4:b6:36:24:da:d0:bd:21:12:2d:
77:9f:ad:bd:db:8c:8f:9a:b4:d6:54:11:18:66:d4:2f:c8:ef:
93:06:f4:dd:7d:4d:68:39:35:fa:dc:16:c2:58:b4:8e:e7:89:
2e:cc:09:94:f4:22:63:d4:78:d7:a6:17:72:5d:3d:92:5e:13:
50:1e:62:2f:52:86:6c:e5:6f:2e:08:46:3f:c2:16:c4:ee:46:
b6:90:99:a0:57:55:ba:49:4a:36:b3:5f:92:ef:f8:53:f5:67:
0a:0c:55:18:a1:45:cf:1e:0b:67:05:3c:09:62:d2:59:03:e6:
b8:b3:bb:39:b5:cc:5c:be:0f:b2:96:a4:62:a7:e2:91:64:4d:
51:74:c2:de:93:45:f7:46:02:d5:cb:7c:4b:fa:cd:eb:d1:70:
3a:2a:4d:32:51:99:d8:28:1d:d4:5d:01:3d:f4:43:bc:93:65:
7d:9f:8e:20:4d:6c:2e:28:91:2e:57:75:54:e6:cd:e7:b6:c8:
24:b7:a3:b8:43:22:7e:75:d3:c1:54:bc:52:88:39:04:3a:1c:
10:c8:5d:0c:33:d3:ea:61:d5:d1:51:c2:20:c6:02:14:cb:f6:
4c:35:74:ef:de:4e:bb:f5:d2:7c:93:9e:c8:c3:27:04:29:cc:
67:19:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:19 2024 by rpki-client on console-ams.rpki-client.org