Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/TcJJnO3eDpp6HiSP2I_i38FMyXY.roa
File: TcJJnO3eDpp6HiSP2I_i38FMyXY.roa (raw, json)
Hash identifier: t3VRAgxn3M+NY4pcKE7IzXIapngZuBITfe7atxOC86k=
Subject key identifier: 4D:C2:49:9C:ED:DE:0E:9A:7A:1E:24:8F:D8:8F:E2:DF:C1:4C:C9:76
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 0183EB1606E00E911F8361205BC127C24782
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/TcJJnO3eDpp6HiSP2I_i38FMyXY.roa
Signing time: Tue 18 Oct 2022 12:33:52 +0000
ROA not before: Tue 18 Oct 2022 12:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208666
IP address blocks: 83.229.2.0/24 maxlen: 24
31.193.185.0/24 maxlen: 24
2a09:b300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:16:06:e0:0e:91:1f:83:61:20:5b:c1:27:c2:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Oct 18 12:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dc2499cedde0e9a7a1e248fd88fe2dfc14cc976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:7a:1a:16:6f:02:a2:d3:92:ea:67:ba:85:
d0:14:49:92:67:cc:8b:7f:d9:76:bf:05:ea:8b:45:
af:c1:e8:d7:de:49:38:e7:5a:31:99:62:2a:b5:72:
0e:1e:91:77:ea:a1:68:e5:e4:82:07:cb:e0:e1:55:
6f:3f:a2:2d:7d:72:a3:95:ad:36:66:81:75:62:10:
69:74:e1:8a:f1:7c:a8:22:07:ff:3f:c8:6c:71:21:
cb:48:88:98:2d:52:b4:47:6c:ef:c8:0b:5c:47:45:
fb:a6:eb:11:8c:ce:96:30:cb:66:0b:76:ac:e8:6a:
1c:e5:e4:0d:0d:8b:26:bb:99:1b:92:b3:87:89:7c:
ba:db:76:da:00:c9:0e:85:30:4d:21:68:33:18:28:
88:47:37:8b:fa:72:6f:16:73:3d:32:86:3d:c9:3f:
00:19:14:18:53:2f:31:e9:9f:d6:21:a7:db:c1:38:
54:56:6b:25:82:c4:9a:13:f2:de:e7:c9:b6:eb:70:
9e:ed:70:1d:64:aa:47:da:a7:cf:92:4f:86:43:6f:
38:d5:01:9d:6d:ba:47:e8:b4:75:c1:b4:8d:9a:31:
56:0c:06:38:0c:e7:05:1b:af:1e:30:74:e6:1b:6c:
45:6a:b3:e6:fd:0e:b7:b6:ef:48:1a:36:1e:9a:45:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:49:9C:ED:DE:0E:9A:7A:1E:24:8F:D8:8F:E2:DF:C1:4C:C9:76
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/TcJJnO3eDpp6HiSP2I_i38FMyXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.185.0/24
83.229.2.0/24
IPv6:
2a09:b300::/29
Signature Algorithm: sha256WithRSAEncryption
89:c9:a5:1a:c1:e7:18:80:30:38:1a:8b:0b:3a:69:81:09:77:
c8:2a:c2:3a:4e:f7:a7:83:9b:04:ed:b6:08:b6:bb:7c:29:2c:
d2:55:45:9b:36:dd:23:18:75:b1:e9:a4:f4:7c:6e:4a:95:de:
df:61:99:ae:27:41:1e:0d:e2:46:42:ff:13:a1:51:59:6e:bb:
fe:d8:d2:4b:84:43:c1:1c:9e:4d:43:d5:d4:cb:47:86:1f:4e:
73:a4:2f:fc:97:8e:d7:17:c0:77:96:69:db:99:11:5e:31:56:
9a:d3:55:dd:6a:ac:dd:d1:6d:5c:84:4c:07:75:ae:55:a2:a9:
f6:3d:01:e5:7b:ed:fb:87:b6:f5:7d:6b:f2:8b:b8:27:a7:6d:
90:39:1a:f5:39:ec:9e:c6:ec:f7:01:55:f9:0d:71:eb:16:0e:
6b:3b:ae:90:55:ea:54:77:08:61:d4:1b:e0:c2:38:12:87:66:
d0:c4:0b:6d:2f:a9:f0:39:35:00:6a:5d:12:f1:f8:96:4e:04:
58:2c:8a:df:ab:18:66:86:7a:3a:f1:a6:e8:65:7c:b3:f3:31:
2e:74:d7:2c:65:26:73:be:98:ac:fd:4a:0c:2f:e6:1c:29:3e:
f8:d7:f1:36:cb:42:1e:75:e2:0c:98:42:18:a3:78:84:a9:13:
da:ee:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net