Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TIAgsSLgdkXROWJ0uLqNS-XeOWg.roa
File: TIAgsSLgdkXROWJ0uLqNS-XeOWg.roa (raw, json)
Hash identifier: Q7gEIAwvb+xtJcFX+DHPl53N7xuq6nfHJJrO+p1ZgHA=
Subject key identifier: 4C:80:20:B1:22:E0:76:45:D1:39:62:74:B8:BA:8D:4B:E5:DE:39:68
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 349109B6
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TIAgsSLgdkXROWJ0uLqNS-XeOWg.roa
Signing time: Sat 01 Jan 2022 09:57:35 +0000
ROA not before: Sat 01 Jan 2022 09:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45012
IP address blocks: 83.246.61.0/24 maxlen: 24
83.246.107.0/24 maxlen: 24
83.246.108.0/24 maxlen: 24
83.246.112.0/24 maxlen: 24
83.246.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881920438 (0x349109b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jan 1 09:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c8020b122e07645d1396274b8ba8d4be5de3968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:8a:76:9c:13:3b:fa:1e:f5:3c:f3:0d:fe:
51:19:ef:1b:c2:09:a4:06:93:e5:ab:83:49:65:df:
83:10:5d:ad:89:de:4c:62:ed:11:f3:59:a6:9a:d2:
3b:4c:3f:bf:7c:40:77:fe:40:e4:93:ce:b7:49:c6:
19:02:09:dd:27:fb:a1:1a:98:ef:e5:25:d8:0f:1c:
16:6d:45:6a:18:6f:c1:ed:b5:e2:00:a4:77:59:31:
3e:ca:dd:69:1f:63:de:dc:51:56:99:c7:51:a6:97:
00:93:4f:83:c3:1d:d3:36:62:47:9e:c4:b3:c8:3e:
d1:a6:3e:67:2e:86:4c:22:51:1c:1c:5a:f5:61:b3:
b1:c3:0e:b4:1d:bf:60:37:dc:b4:18:4c:ef:a3:79:
c7:ee:34:d1:11:ae:28:f9:14:aa:d8:a0:19:50:f7:
ea:01:25:a6:eb:20:ba:e9:6f:af:59:2c:53:ba:44:
6f:22:40:15:7f:d3:ca:0a:bf:3d:1b:8e:2a:ba:e5:
29:a9:d3:1e:03:4e:23:af:fc:7e:2f:c7:2a:9d:51:
b9:a0:0e:19:0a:68:f6:45:b0:9d:21:8a:4e:c7:e4:
24:49:06:58:b3:3f:c2:c0:f0:7f:07:e4:9a:d5:7e:
c1:7e:d8:42:85:c0:7e:4e:98:0d:7c:74:bc:52:a0:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:20:B1:22:E0:76:45:D1:39:62:74:B8:BA:8D:4B:E5:DE:39:68
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TIAgsSLgdkXROWJ0uLqNS-XeOWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.246.61.0/24
83.246.107.0-83.246.108.255
83.246.112.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ec:34:85:67:b1:71:70:14:b3:5f:92:f1:12:e4:63:8a:e1:
f2:ee:72:40:55:b7:01:ab:89:fd:87:55:e5:0a:12:5f:53:58:
c3:1a:af:cc:35:d4:68:f9:ea:0b:ec:b3:62:b8:33:71:88:83:
91:9e:69:20:f2:09:fd:85:48:17:58:d0:ea:8b:89:f1:f8:f0:
20:71:40:e7:d4:e2:78:6c:98:5a:2b:78:2b:27:8f:88:d1:03:
4e:e4:d9:21:3f:97:5b:18:c9:94:41:65:bc:3b:2a:96:c5:5e:
64:66:7c:e4:35:77:3c:b5:f7:3a:1e:1c:ea:cb:56:3c:0d:ca:
8e:68:96:24:13:51:e7:55:b4:e5:59:59:ea:c0:80:32:0e:29:
b7:c1:76:4e:36:91:1b:e8:07:43:5a:75:9c:83:86:ad:72:68:
61:22:a2:91:5a:db:a6:29:56:78:7b:5e:00:e6:97:1d:6e:6b:
8a:d1:08:98:0c:37:98:9d:2b:7b:a4:83:d3:e6:cb:5a:19:78:
9e:c8:60:96:ec:ea:54:e6:5b:6e:6c:a7:d3:6c:fe:48:2c:a4:
72:ff:a1:c8:28:53:17:59:5d:8f:49:bd:bf:b9:5a:c1:62:59:
5a:7c:25:6c:32:c2:17:a3:67:ec:71:99:79:cd:b5:cb:97:42:
80:1c:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:39 2025 by rpki-client