Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/TJTDq7FOwPpH1ouzConvc1r4nnA.roa
File: TJTDq7FOwPpH1ouzConvc1r4nnA.roa (raw, json)
Hash identifier: 4ve6LrBNqMAfRew95MIxPC2eU4euCXH21/pfdL65lRs=
Subject key identifier: 4C:94:C3:AB:B1:4E:C0:FA:47:D6:8B:B3:0A:89:EF:73:5A:F8:9E:70
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 018570829BF402E3FB2FFF3B084C2C27EF72
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/TJTDq7FOwPpH1ouzConvc1r4nnA.roa
Signing time: Mon 02 Jan 2023 03:24:45 +0000
ROA not before: Mon 02 Jan 2023 03:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34326
IP address blocks: 193.138.190.0/24 maxlen: 24
193.138.189.0/24 maxlen: 24
193.138.188.0/24 maxlen: 24
77.240.244.0/22 maxlen: 22
178.236.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:9b:f4:02:e3:fb:2f:ff:3b:08:4c:2c:27:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Jan 2 03:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c94c3abb14ec0fa47d68bb30a89ef735af89e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:79:42:37:85:15:95:6f:6a:73:d9:18:4b:
d6:6b:5a:08:ee:66:e2:95:c3:ec:58:8b:e8:49:78:
24:76:c0:df:35:ad:83:ac:39:78:d0:b6:0f:70:a5:
b2:12:d6:ce:ac:14:9e:c1:d7:c9:c9:d3:88:3f:d2:
e2:53:af:96:04:c5:6c:d2:70:02:d1:04:80:11:b4:
02:07:b0:20:57:b7:4e:43:1c:10:82:cc:00:8b:1e:
10:af:e1:3d:55:13:e9:53:18:7a:cd:7f:6a:ca:7a:
d8:24:ca:f8:a1:71:59:6c:b2:11:da:e2:ff:b6:b9:
16:0d:12:9f:a2:71:f9:47:4c:a9:7e:f1:00:1f:86:
2b:a8:4f:af:12:01:6d:23:f3:06:ba:88:15:15:ec:
08:a8:dd:b9:12:74:7a:1f:17:fd:d6:5c:6f:40:4e:
c8:22:18:81:b7:c5:b0:63:01:9d:5a:d0:bb:41:78:
32:1f:88:4a:60:7b:52:e2:45:3c:85:dc:23:15:7b:
f8:09:c1:ec:85:94:09:c5:7a:d8:23:79:bd:73:08:
c3:1a:19:4e:ed:2e:dc:45:5b:f2:82:59:f5:4e:9e:
cd:fa:a4:38:65:91:1c:af:09:3a:30:a9:f3:f4:00:
b1:71:31:7d:96:dc:6d:17:3b:5b:18:79:24:2f:a2:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:C3:AB:B1:4E:C0:FA:47:D6:8B:B3:0A:89:EF:73:5A:F8:9E:70
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/TJTDq7FOwPpH1ouzConvc1r4nnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.244.0/22
178.236.192.0/22
193.138.188.0-193.138.190.255
Signature Algorithm: sha256WithRSAEncryption
45:19:e8:3d:6b:8d:0b:eb:bf:f5:29:16:ca:ae:ec:1c:f5:9d:
6a:58:42:8a:20:0c:d7:3e:ef:5b:d7:04:80:5c:54:e4:c0:07:
d5:e6:a9:29:3f:75:13:e4:89:08:19:04:24:15:0e:22:7f:39:
55:9b:91:b6:03:c0:13:e1:b8:2f:06:e0:53:ed:17:01:16:65:
0c:8c:64:c7:bf:70:b4:19:75:f4:b8:e7:02:ce:e5:41:05:9e:
6f:ae:3e:eb:11:c5:11:f8:b8:59:da:28:fd:af:dc:82:71:a6:
50:20:fc:f0:1b:1a:d4:fc:69:2b:13:6c:72:cd:93:27:b9:e6:
68:40:57:eb:fa:c7:ba:f2:14:77:27:43:bb:fe:0d:13:2a:84:
39:4e:a8:43:e7:e7:69:3f:88:c7:4c:0b:33:3b:81:dd:08:ac:
10:17:ed:30:ea:be:c7:ba:a1:41:98:16:8d:ad:a3:91:d3:68:
1a:c3:e6:4d:58:a3:15:7b:85:82:20:56:4b:d5:15:41:e6:c5:
82:d6:dd:15:52:7d:32:3d:1d:a7:d4:ab:b1:21:b9:4c:46:33:
f3:77:96:af:92:72:05:f2:8b:eb:55:2d:f0:fa:21:46:44:c6:
31:88:28:f2:60:c3:55:b0:2d:0d:82:0e:ab:91:92:c0:cb:ad:
4a:c1:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:33 2025 by rpki-client