Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/TKPh2mqz3-n3shbUjHX6XmHUWBc.roa
File: TKPh2mqz3-n3shbUjHX6XmHUWBc.roa (raw, json)
Hash identifier: KzPceIy2nixIkngTycILrCwWiXg1bO1/J/s3agdtb/A=
Subject key identifier: 4C:A3:E1:DA:6A:B3:DF:E9:F7:B2:16:D4:8C:75:FA:5E:61:D4:58:17
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 08C90561
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/TKPh2mqz3-n3shbUjHX6XmHUWBc.roa
Signing time: Sat 01 Jan 2022 12:56:09 +0000
ROA not before: Sat 01 Jan 2022 12:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210805
IP address blocks: 46.252.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147391841 (0x8c90561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 1 12:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ca3e1da6ab3dfe9f7b216d48c75fa5e61d45817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:f9:55:ee:cb:c7:50:26:30:df:b9:72:0a:
1d:03:ed:9b:1f:e8:52:eb:a0:29:58:57:06:d7:2f:
16:e6:12:c0:fa:a7:fd:a3:7e:58:af:a4:c2:b5:69:
ca:e0:31:1e:83:34:e8:13:15:5c:47:dd:4c:53:50:
c6:d2:20:73:dd:3c:6a:5a:7d:13:67:98:82:14:75:
e1:54:03:e0:7f:5f:9f:be:bb:a4:13:6a:60:eb:eb:
82:c8:cf:f5:24:11:db:e9:8c:1f:2b:b3:ea:3e:0d:
af:cb:e0:3a:79:f3:c1:b0:b7:d4:3d:d8:1b:a7:5d:
c1:a8:0d:e4:94:0e:34:7e:46:a1:0c:84:33:01:1b:
2a:7f:e6:e1:e3:3a:4c:89:aa:83:16:90:35:46:bc:
f0:00:8b:84:6e:a2:b5:be:d1:b1:e2:84:ec:f2:83:
8d:f8:fc:42:4a:2f:94:cf:dc:ff:3a:ba:ef:e9:51:
4a:fb:cc:65:52:d4:49:80:47:29:62:d6:55:fd:1b:
ef:ba:66:59:f7:18:36:34:3c:b7:53:05:2c:81:9a:
c2:75:7b:c6:a4:7c:d0:03:c2:24:47:49:8e:d4:84:
19:32:1f:4f:d6:e8:4f:a7:87:dc:29:ff:54:a3:25:
4a:f5:97:7c:a1:19:6b:64:50:37:0d:7e:d4:1d:88:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:E1:DA:6A:B3:DF:E9:F7:B2:16:D4:8C:75:FA:5E:61:D4:58:17
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/TKPh2mqz3-n3shbUjHX6XmHUWBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:94:e3:cb:48:49:66:e2:f7:4d:db:a5:3a:bd:9c:1a:f8:b1:
f6:0e:69:1f:3d:a3:d3:af:33:16:82:7a:bf:c8:11:33:27:a7:
22:6d:ad:45:7e:08:e8:1b:57:2a:f7:37:13:93:dc:fe:f0:92:
d3:8d:be:09:f1:be:2f:1e:47:2b:c2:d8:2d:65:40:99:54:9a:
56:20:f6:9a:61:9b:1e:6a:7f:ed:ad:a4:f0:7f:1e:96:3b:46:
10:b2:6c:a4:76:66:42:1c:8d:be:bc:9e:5b:1b:92:62:6e:c4:
f9:49:34:db:79:e7:91:7c:1f:1c:b6:cb:4e:3a:33:c7:a2:59:
c1:6a:fd:cd:72:86:28:48:8a:49:bd:45:93:91:f7:43:23:35:
56:06:e5:7b:88:00:de:84:15:89:76:9e:c5:0e:b2:09:27:cb:
4a:aa:4d:37:34:d0:25:43:06:a5:cf:d7:e5:a1:ab:77:2c:90:
7d:52:cc:30:f3:12:1a:80:21:3b:b7:ad:a7:7e:fd:e5:e6:27:
1f:2b:0e:55:8d:1f:eb:94:77:61:59:0f:0f:f9:11:e7:c0:fe:
01:05:1b:6a:f8:26:3d:d0:cd:99:c6:c5:16:d5:8a:e3:14:fb:
9e:5d:c2:f0:6b:b8:e7:0b:bb:6d:a9:2e:0a:ec:c7:5c:15:8a:
af:e8:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:50 2025 by rpki-client