Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TRrEeKeSeX9FeSspErsM-UnrN3E.roa
File: TRrEeKeSeX9FeSspErsM-UnrN3E.roa (raw, json)
Hash identifier: 6DzjINK6lRbF3WAq1HfPfem34+qSXy250v3SEWj/R/I=
Subject key identifier: 4D:1A:C4:78:A7:92:79:7F:45:79:2B:29:12:BB:0C:F9:49:EB:37:71
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 02C1E31E
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TRrEeKeSeX9FeSspErsM-UnrN3E.roa
Signing time: Mon 14 Mar 2022 09:24:36 +0000
ROA not before: Mon 14 Mar 2022 09:24:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 217.67.161.0/24 maxlen: 24
217.67.162.0/23 maxlen: 24
217.67.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46261022 (0x2c1e31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Mar 14 09:24:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d1ac478a792797f45792b2912bb0cf949eb3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:56:87:f2:36:a9:d6:43:4d:6e:06:e5:e1:
1e:3e:70:61:c0:fe:73:36:73:a8:01:e2:73:eb:49:
4f:dd:d4:ab:79:03:ac:58:fa:95:5a:cf:c7:95:bd:
69:37:45:28:56:91:9e:10:5c:93:7b:64:82:10:4c:
65:da:e5:d1:f0:5c:38:93:45:0b:a6:26:ae:af:fe:
1d:39:f4:b7:66:c5:d0:70:2c:b9:a4:71:ef:e3:80:
7c:4e:e7:50:22:b4:64:2c:47:af:46:a5:f1:3b:a2:
7e:b2:15:ce:99:d4:98:49:36:4a:d0:24:e3:ec:7e:
3b:6a:12:8a:c2:34:ab:04:54:31:79:4b:0e:c8:7b:
95:87:35:46:8b:7b:1a:8a:ec:9b:91:7a:dd:c3:8b:
35:0b:98:49:a6:b2:46:9d:3c:08:37:50:fd:1a:45:
ac:43:de:8a:bf:a2:df:7f:f2:8d:b4:d1:3e:e0:dc:
9a:3c:d1:5e:77:19:d4:11:c5:00:9e:38:2a:e7:1e:
82:c1:55:f0:3d:aa:5a:72:6c:8b:30:bd:3f:22:b7:
39:c1:00:13:0e:81:a3:41:f5:1b:78:b6:7e:af:1a:
4f:18:5e:3e:58:85:7e:b8:07:ec:69:da:ee:de:8c:
f4:ff:96:e7:a3:8f:da:01:63:ac:d9:34:42:96:49:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1A:C4:78:A7:92:79:7F:45:79:2B:29:12:BB:0C:F9:49:EB:37:71
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/TRrEeKeSeX9FeSspErsM-UnrN3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.161.0-217.67.163.255
217.67.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:de:64:50:e0:88:81:9c:2c:e1:08:36:58:b6:b8:a4:91:3e:
aa:55:3b:35:df:f8:f9:91:e9:a0:9a:fd:69:49:3d:31:27:69:
f8:2e:8d:51:f0:39:cc:ad:df:fb:40:30:f0:48:78:6d:b0:ab:
b7:c0:d2:ca:a0:18:38:b9:5a:28:42:df:cd:42:19:7c:d9:97:
97:55:11:36:3f:30:8b:32:f9:e3:31:3c:1b:63:6e:bb:80:28:
8a:7d:74:d4:17:3b:d8:d7:0a:27:c7:f9:42:de:6b:bf:c1:81:
5c:93:21:a5:73:62:4e:28:67:44:c5:1e:c5:0a:93:8c:16:92:
a2:7c:b4:e2:80:14:41:8c:16:e7:95:07:ab:1d:ea:2a:73:9e:
ea:1c:19:4e:0f:bd:86:8a:ff:dc:6a:e0:b4:ed:02:65:07:1e:
4d:b1:18:1d:21:77:b4:d8:3c:37:ba:2a:ef:ac:fe:de:ae:17:
a2:4b:51:ae:ee:a1:3e:d7:cc:22:80:d2:82:54:36:a3:99:93:
bd:02:4f:b0:2d:0d:5e:35:47:a9:07:10:b7:30:04:98:a9:37:
55:7b:1e:2f:04:36:cf:7a:75:74:96:56:0c:f9:ce:8a:40:11:
88:97:d8:a1:7e:20:b0:6c:1c:b1:46:4f:20:42:bd:d7:23:87:
ab:d2:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:47 2023 by rpki-client on console.sobornost.net