Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/4tms_VM1rXzJUmkzmhg3vA3tjCs.roa
File: 4tms_VM1rXzJUmkzmhg3vA3tjCs.roa (raw, json)
Hash identifier: DQnyCzhM9TfVRH++RLE9nvv/TfRlXLWsVkxLQAusSRA=
Subject key identifier: E2:D9:AC:FD:53:35:AD:7C:C9:52:69:33:9A:18:37:BC:0D:ED:8C:2B
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0A199BC4
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/4tms_VM1rXzJUmkzmhg3vA3tjCs.roa
Signing time: Sat 01 Jan 2022 11:55:04 +0000
ROA not before: Sat 01 Jan 2022 11:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34019
IP address blocks: 193.106.116.0/22 maxlen: 22
193.164.153.0/24 maxlen: 24
193.17.192.0/24 maxlen: 24
193.200.42.0/23 maxlen: 23
2001:67c:1740::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169450436 (0xa199bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jan 1 11:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2d9acfd5335ad7cc95269339a1837bc0ded8c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:97:1f:0f:0e:7a:c0:9b:f2:e4:fd:25:eb:
27:c0:82:1b:21:39:5c:26:d4:c5:9e:fb:5b:18:9f:
d9:f6:d6:d0:23:d9:f4:f3:16:e4:9a:44:31:3f:e7:
48:9b:c6:b9:3a:b8:51:7a:21:78:40:13:21:ae:5e:
29:83:c2:3a:26:b4:0a:ed:de:33:ac:51:78:db:45:
5b:75:b7:e4:78:03:82:a0:e6:b7:03:fe:bc:36:b2:
6c:a2:7a:ea:89:1c:1b:f0:0a:89:30:02:b4:a2:5b:
f1:78:ac:60:74:4a:4c:35:74:85:39:ae:64:da:b4:
3f:81:d7:03:fd:4d:cd:a5:01:c8:c3:0d:65:a9:d6:
a5:4a:71:ee:c1:02:27:c0:39:b9:92:0e:8f:16:1c:
7a:eb:b5:ef:cb:6b:10:ba:f5:53:82:ff:ac:f9:21:
d9:60:3f:9c:07:a8:70:bd:cb:1a:c1:a9:89:d1:87:
a5:4e:32:ab:24:60:71:cd:31:2e:dd:b2:87:f8:33:
eb:c4:cf:a6:79:4f:70:c3:b0:da:d0:d3:1d:0f:3e:
c1:a2:0c:6c:fe:41:fc:9a:06:38:8e:20:e5:70:b8:
7c:de:51:6e:85:d8:35:9b:cf:14:4b:4a:c3:1f:43:
01:ed:98:93:85:3e:5e:8d:e7:c6:7d:99:54:ce:c1:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D9:AC:FD:53:35:AD:7C:C9:52:69:33:9A:18:37:BC:0D:ED:8C:2B
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/4tms_VM1rXzJUmkzmhg3vA3tjCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.192.0/24
193.106.116.0/22
193.164.153.0/24
193.200.42.0/23
IPv6:
2001:67c:1740::/48
Signature Algorithm: sha256WithRSAEncryption
bb:ac:fe:22:2c:40:b4:aa:fb:59:95:07:2e:cc:7d:15:84:a2:
8e:90:5f:26:8d:5d:5f:f2:8d:ec:66:58:98:98:3c:9e:ad:9a:
5e:cf:2f:e5:4b:c1:dd:d1:ab:df:90:56:b3:6e:f2:f6:b9:17:
02:c8:a0:fe:3c:cf:0f:c1:a8:f6:82:ee:11:2a:e3:8a:78:f4:
79:66:b0:b0:6d:b7:71:19:b3:a5:d9:37:23:a8:07:5d:09:db:
6d:59:6d:de:b3:5a:79:32:4c:dc:71:ee:49:a7:50:98:bc:3a:
d3:12:ec:c2:83:b7:60:25:2e:af:d9:d8:e7:45:df:d9:1a:ae:
2d:57:ca:0c:fc:79:de:35:f9:40:a2:13:68:1e:9b:3d:36:56:
5d:b4:6e:21:d9:87:76:e9:e2:f5:9f:7f:28:14:ba:3b:2f:a6:
77:82:ba:69:74:fe:0c:76:e7:61:d6:16:37:af:76:9c:ca:4f:
2b:fa:2d:de:a8:00:58:e9:0c:3e:fd:6b:86:93:e2:de:95:60:
3d:55:10:5a:4c:9e:e1:50:de:74:88:5b:58:ac:7e:f3:da:f1:
bc:73:38:56:25:c9:a4:8a:0e:8d:0f:47:97:4c:fc:6a:dd:dd:
19:20:a0:e3:3e:52:f0:9c:48:a6:89:2c:a2:67:df:bb:c0:af:
76:fa:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net