Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/TSR4GLNOG_bXqx9kZZ1-TPGEHAE.roa
File: TSR4GLNOG_bXqx9kZZ1-TPGEHAE.roa (raw, json)
Hash identifier: qiTO5IH47SUtedk32d+mPZmlqoxusEGKL4lxyhoK80I=
Subject key identifier: 4D:24:78:18:B3:4E:1B:F6:D7:AB:1F:64:65:9D:7E:4C:F1:84:1C:01
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 03EA5B01
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/TSR4GLNOG_bXqx9kZZ1-TPGEHAE.roa
Signing time: Sat 01 Jan 2022 08:02:12 +0000
ROA not before: Sat 01 Jan 2022 08:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208349
IP address blocks: 31.10.7.0/24 maxlen: 24
185.31.133.0/24 maxlen: 24
45.134.124.0/22 maxlen: 22
45.134.124.0/24 maxlen: 24
2a0e:7e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65690369 (0x3ea5b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Jan 1 08:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d247818b34e1bf6d7ab1f64659d7e4cf1841c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:0a:d4:63:8d:6b:fd:64:44:bc:0c:8f:7c:
3e:f2:93:62:0f:4b:46:73:c6:c5:68:c3:fe:e2:a3:
15:6b:ea:92:d1:a7:87:2a:9d:2f:c3:db:cb:12:de:
e7:19:44:67:73:97:99:34:11:e1:7b:f5:e2:e3:8a:
14:c0:79:c3:c5:08:ed:cc:f0:53:9f:56:3f:c6:62:
6a:bd:01:17:14:43:18:97:e8:a4:fb:a4:2c:fd:c8:
f1:ed:1f:2b:25:4f:16:43:e3:c3:e0:2a:d1:8b:10:
6e:f5:88:6e:60:5e:04:ad:b3:0b:21:b2:fb:d4:00:
e5:14:3b:27:15:44:1c:72:94:bd:76:18:1f:96:02:
17:46:1f:6d:8e:af:57:d0:db:a0:c1:cc:24:6a:73:
49:64:87:f8:8e:b8:78:a9:1a:0a:12:36:a0:63:e6:
6f:eb:80:c4:7a:35:2e:9d:40:13:6c:5a:f0:85:c6:
22:af:51:7c:33:81:11:35:90:13:25:14:d4:fe:d4:
a5:10:29:b1:56:07:40:6b:58:ae:7a:23:ac:94:df:
9c:6d:d4:6f:d2:ab:0e:4a:55:08:cd:1a:c4:5c:e0:
30:22:29:c2:0e:87:60:50:5d:c4:06:77:0f:c1:30:
ea:fa:17:41:48:3a:84:89:8e:e4:ba:76:98:e4:63:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:78:18:B3:4E:1B:F6:D7:AB:1F:64:65:9D:7E:4C:F1:84:1C:01
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/TSR4GLNOG_bXqx9kZZ1-TPGEHAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.7.0/24
45.134.124.0/22
185.31.133.0/24
IPv6:
2a0e:7e40::/29
Signature Algorithm: sha256WithRSAEncryption
17:8c:b4:c0:5d:1d:7d:c1:7a:9a:06:8e:9d:69:f0:a4:37:a9:
a1:71:54:ea:5f:19:29:8d:69:08:aa:0a:75:48:99:9a:35:dc:
5e:cd:57:0c:0a:65:6c:cc:13:ad:7d:68:ac:30:70:3b:a7:1f:
ba:52:23:50:eb:1b:80:a4:d4:5f:a6:bc:dd:22:bf:30:92:58:
90:80:3a:cf:24:fd:d3:79:e9:64:09:6f:ee:64:a0:50:c9:8e:
6d:d3:8f:e2:05:46:b6:7d:02:ce:a4:5e:76:4d:d0:51:0e:f2:
f0:f2:27:8a:db:e4:2c:fb:5e:9b:b9:82:e5:8e:73:08:2e:53:
0f:34:ca:03:3b:c8:62:c1:c6:4b:45:91:73:60:f7:ad:39:b1:
ca:88:ce:8f:9c:66:ab:18:d1:fc:ac:7b:dc:e1:71:51:8e:03:
b1:8f:7b:df:90:57:7b:31:fa:0e:84:4e:59:71:04:41:60:8e:
e0:91:4b:e2:af:db:72:be:33:62:c8:e4:4c:02:7b:e6:00:ff:
00:66:86:3e:f2:73:98:65:95:ab:03:42:24:49:90:41:fd:88:
94:3c:19:c5:5f:48:6d:75:cd:d5:e0:16:2c:7e:b5:6a:1b:42:
3d:ef:53:33:fb:1f:e5:c6:8f:12:43:9b:30:a0:d6:b7:d6:a1:
8d:d2:c2:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:18:50 2025 by rpki-client