Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/tGzYcdYh39Pi_Gzc2yckZSkiSLU.roa
File: tGzYcdYh39Pi_Gzc2yckZSkiSLU.roa (raw, json)
Hash identifier: BjLeguI86wX+rKD4E8ImbLIHqDrYEk11/AXmnphZXnE=
Subject key identifier: B4:6C:D8:71:D6:21:DF:D3:E2:FC:6C:DC:DB:27:24:65:29:22:48:B5
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 11267802
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/tGzYcdYh39Pi_Gzc2yckZSkiSLU.roa
Signing time: Wed 29 Jun 2022 07:27:04 +0000
ROA not before: Wed 29 Jun 2022 07:27:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204006
IP address blocks: 185.117.134.0/24 maxlen: 24
185.117.133.0/24 maxlen: 24
185.117.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287733762 (0x11267802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jun 29 07:27:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b46cd871d621dfd3e2fc6cdcdb272465292248b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:03:df:1b:38:dd:6a:d7:0c:e1:b4:6f:a9:
23:79:95:3b:9e:e0:e1:aa:38:48:04:f2:ed:ba:c8:
10:df:cd:3f:29:5e:ae:a9:4a:b1:cd:40:02:9b:12:
b8:62:36:15:42:d5:a1:c9:4e:70:01:32:b7:44:f3:
53:e3:06:9a:49:9f:a0:91:a1:23:fa:d4:b6:1a:e4:
bf:75:5b:63:94:69:8d:d5:77:43:da:aa:aa:f0:62:
95:55:35:75:d3:19:ee:49:80:da:db:41:bb:a5:e7:
04:04:7a:dd:c8:e0:56:ae:ec:c7:34:01:5e:e9:1a:
bb:2d:2b:69:f4:38:eb:8a:37:02:81:66:a2:39:fb:
f5:19:96:e0:f7:2d:3c:87:1c:97:64:f0:11:74:79:
d7:c9:28:8f:f5:7c:a5:61:de:46:b3:7d:d9:6e:dc:
df:7b:27:3c:b1:04:89:24:b9:08:f8:c5:70:ab:e4:
32:0f:9c:2d:12:4d:57:14:93:4d:08:ef:3b:39:5d:
e0:50:9a:fb:e9:bb:e5:68:42:7e:1e:ad:55:ae:a8:
81:e4:86:1d:d0:22:4a:a2:59:0c:da:18:c3:b2:6b:
13:09:5c:37:37:e2:49:82:e7:ce:e8:36:8c:f7:53:
a3:4b:2d:24:b1:ba:ff:f1:8e:36:14:44:54:24:c6:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:D8:71:D6:21:DF:D3:E2:FC:6C:DC:DB:27:24:65:29:22:48:B5
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/tGzYcdYh39Pi_Gzc2yckZSkiSLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.133.0-185.117.135.255
Signature Algorithm: sha256WithRSAEncryption
7a:96:71:c9:9d:d0:20:29:13:0b:92:b8:cc:df:a2:73:b4:dd:
ba:38:a5:99:28:59:b9:8e:ca:7b:2e:23:80:4b:f0:29:cc:16:
e4:79:49:25:e0:71:fd:4b:1e:ef:ba:39:f8:81:7f:d1:29:1f:
04:5d:ce:f9:a0:cf:47:62:69:81:ad:e4:83:f9:a3:d1:7f:04:
6e:c9:56:11:de:df:78:b9:e3:c4:e3:8f:24:8a:d1:60:ac:99:
b9:91:2e:2b:89:1a:d8:17:d5:05:dd:1b:6b:93:3f:55:78:5d:
06:70:49:94:be:40:56:e1:d0:34:b0:19:6b:bc:e9:c8:d0:da:
1d:d7:47:53:36:bf:77:70:ee:6b:1e:69:9f:79:d4:29:3a:7a:
cb:b3:db:87:4b:ff:5f:c1:4d:58:ba:f9:45:08:ac:0a:46:38:
d7:41:3b:ef:ae:fe:cd:f5:41:58:76:25:20:bb:ce:10:a2:fe:
e6:08:a2:1a:25:f7:9b:f3:ed:2f:d3:ca:e2:cc:6a:48:2b:4c:
31:3e:30:ed:5d:c9:d6:d6:e4:55:52:4d:8c:88:7d:2f:d2:7e:
79:98:fa:f6:43:58:1b:c4:38:e6:f9:3b:21:08:aa:1c:d9:4b:
9f:7c:e9:57:59:c5:b6:8f:e4:e1:10:aa:1a:cb:d7:99:4b:cd:
90:80:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:46 2025 by rpki-client