Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa
File: TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa (raw, json)
Hash identifier: IjBURtRRSaIwARVahOH7+oKb2AByeiDx8hTK7xjN+Ic=
Subject key identifier: 4C:F2:4A:17:2A:2C:67:84:17:89:7E:FE:70:06:0E:32:E1:19:85:40
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0185718C1FEAE2DEA0AA5DED18B343B84667
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa
Signing time: Mon 02 Jan 2023 08:14:46 +0000
ROA not before: Mon 02 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60164
IP address blocks: 185.54.148.0/22 maxlen: 24
2a04:d280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1f:ea:e2:de:a0:aa:5d:ed:18:b3:43:b8:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jan 2 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf24a172a2c678417897efe70060e32e1198540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:e8:99:58:04:7e:0d:7a:3c:64:b2:0a:a8:
78:f2:cd:07:4d:ed:98:5a:16:06:9b:3a:7d:a3:2c:
59:9e:e4:6e:b1:b5:b2:d8:3b:d7:0f:e6:21:5a:92:
61:56:cb:d0:32:e3:11:1c:a5:bf:94:66:9c:ca:a4:
c9:6e:1c:15:1d:b8:61:1d:19:62:9c:19:05:a2:dc:
47:a6:8d:cf:01:3c:92:2b:00:33:b0:82:17:6a:a7:
5d:cd:ed:af:eb:4f:f4:f3:2b:91:91:d5:aa:95:23:
bc:09:3c:65:d7:39:cd:25:24:1e:d6:47:c0:dc:cd:
52:7b:2c:0f:b9:c7:92:6d:7b:a7:a4:a3:9b:50:63:
ce:c6:97:cd:b6:12:3c:11:2c:cb:59:87:39:62:dc:
70:0c:81:9f:32:f0:d7:fc:84:92:38:d1:bf:d7:d2:
6a:76:d0:e1:b8:14:ae:16:ac:46:20:48:69:ca:55:
f3:58:a6:06:81:5c:3c:63:9a:c6:14:af:5c:5a:1d:
7a:19:bb:de:f9:d7:12:8f:ce:57:c5:05:ac:dd:e5:
c6:13:41:8e:1c:f1:28:aa:b9:65:a2:70:43:6a:c5:
ab:0d:b1:99:ff:39:0c:d5:f4:b0:2e:cc:67:d5:07:
4e:ee:aa:5d:f2:d7:cc:9c:d9:7b:31:c8:6c:41:2d:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:4A:17:2A:2C:67:84:17:89:7E:FE:70:06:0E:32:E1:19:85:40
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.148.0/22
IPv6:
2a04:d280::/29
Signature Algorithm: sha256WithRSAEncryption
af:3b:01:b3:4c:a2:95:70:1a:45:76:77:8e:0f:e2:40:8f:45:
ec:92:47:e0:a1:8f:76:7e:0c:7c:0b:20:3b:6e:38:0b:a2:7d:
70:36:28:59:bd:0d:f6:b5:c5:a6:6e:14:1c:de:3b:87:9b:e5:
93:21:4f:a9:ee:60:a2:5a:32:ab:12:51:ce:b7:d7:93:bc:8d:
fb:1b:6a:47:ef:b3:fd:51:fb:8f:77:1c:d8:80:94:fd:d1:35:
4c:dc:ae:9d:37:0b:3d:a3:8b:63:6b:4b:d2:31:ff:70:63:0c:
cb:05:34:50:fe:33:4f:98:8b:9a:7c:62:a4:88:a9:65:53:60:
29:d5:02:74:41:8d:59:0c:57:92:47:e7:1f:29:2e:86:00:e2:
88:53:49:33:2a:3f:3c:7a:cb:1c:25:cd:e8:a3:1c:dd:50:87:
2e:6b:b0:75:98:b7:9f:47:e2:2e:24:ca:04:fe:5c:d1:4e:d3:
fc:94:54:fe:f1:0b:a4:86:6f:bc:27:14:ab:29:f4:63:58:5c:
a5:3d:6c:b2:e4:cd:3f:51:50:09:ae:54:8f:f3:d0:30:42:2a:
08:83:86:d0:aa:67:5a:b2:cc:dc:7d:b6:b6:d8:67:1e:bd:fe:
d4:17:d9:4c:80:0e:f6:a8:a5:75:08:c9:d3:a0:ad:c4:68:94:
e9:35:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:19 2025 by rpki-client