Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/TymGAlAKQCEFdGWUZlle79CGVIU.roa
File: TymGAlAKQCEFdGWUZlle79CGVIU.roa (raw, json)
Hash identifier: Vd9cAwhA92HiJM4Z4kSUiZy9tBxblAc8WYHtRMWbkbo=
Subject key identifier: 4F:29:86:02:50:0A:40:21:05:74:65:94:66:59:5E:EF:D0:86:54:85
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 01856CB829ED772B43DDB3E8A86CA1AE09E1
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/TymGAlAKQCEFdGWUZlle79CGVIU.roa
Signing time: Sun 01 Jan 2023 09:44:46 +0000
ROA not before: Sun 01 Jan 2023 09:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.95.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:29:ed:77:2b:43:dd:b3:e8:a8:6c:a1:ae:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Jan 1 09:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f298602500a40210574659466595eefd0865485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:96:1a:9c:51:6f:b4:0d:f4:fa:74:9a:a7:
b5:9c:07:ec:17:b3:2a:d4:7e:72:2f:3f:1b:94:ad:
00:97:f4:d4:bd:c3:e1:eb:86:45:19:b9:91:ac:5a:
45:f7:f6:f9:d3:8a:c8:5d:50:e0:53:da:61:5e:32:
2e:13:c2:17:bc:b1:cc:e2:a9:44:93:25:7d:9f:e0:
db:6a:9f:fb:10:99:c5:e0:48:cc:57:54:67:1c:92:
19:35:58:ff:19:de:07:38:46:78:31:b1:fb:a5:da:
dd:f2:03:4e:02:11:22:cc:bf:0a:df:18:a6:6d:79:
20:62:2c:69:1f:a3:18:fa:36:30:eb:58:63:a1:b3:
5f:fb:44:a0:7f:52:21:87:85:ae:97:2b:ad:42:33:
80:0c:87:9d:12:69:56:83:bb:60:95:53:fb:32:d0:
0e:7a:65:ce:e6:6b:e8:e8:d4:bf:e9:de:82:f3:ed:
d0:a1:4d:17:00:af:78:ca:c6:f3:bf:d5:56:90:ee:
7a:cc:ea:ff:c9:f1:11:b7:b0:a9:df:2c:f6:a2:e9:
10:b2:95:47:a8:77:e8:1b:5b:3a:0b:7f:6a:5b:8d:
41:d6:d8:ae:76:59:cf:43:be:51:25:69:ed:04:ba:
9a:94:dc:50:dd:d5:3b:02:05:06:95:78:c6:65:57:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:86:02:50:0A:40:21:05:74:65:94:66:59:5E:EF:D0:86:54:85
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/TymGAlAKQCEFdGWUZlle79CGVIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b1:8d:a0:1b:12:89:2b:7b:0d:85:32:f2:28:18:d9:ae:7d:
78:44:02:ee:89:31:ab:76:9d:14:47:32:68:b4:4f:73:f4:01:
17:1d:fd:bb:96:0e:e3:27:1e:96:03:3a:6c:81:44:28:cd:37:
54:a1:bd:d4:62:97:c1:2e:96:5b:3c:be:32:f6:15:a3:ca:8c:
33:25:83:9a:12:67:77:c0:25:e9:21:59:61:51:55:34:c1:f6:
0e:a5:85:c6:4e:70:ee:57:48:e4:3f:be:84:17:92:96:20:66:
97:7f:03:19:51:94:f9:f8:96:6b:72:72:53:36:a9:ce:9e:5c:
dc:4d:24:d8:93:3b:39:26:7c:3e:46:f2:a6:88:41:a9:67:dc:
62:5b:96:6e:ba:6a:fe:f7:94:34:f7:70:37:58:01:fd:be:75:
33:f5:9d:3b:13:b4:b5:8b:23:56:f8:2e:c3:90:8e:7d:39:e9:
0b:00:65:fe:e4:c3:5d:8c:61:1b:d6:c7:ed:00:96:07:2f:6a:
d6:ea:2b:f0:b6:f9:88:b0:6a:95:d7:de:29:bf:ea:c8:2e:08:
a4:c9:8e:84:1b:2e:d7:19:d9:b7:92:3a:f3:71:45:52:5e:ab:
0b:1a:4e:e8:6f:a8:59:54:87:d9:64:c9:36:43:fb:64:05:93:
95:58:9c:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuCntdytD3bPoqGyhrgnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Mjc0NTVlYTdmY2UxN2NmZDA0MzE5ODUyNThkMTNlMDZi
ZmE3MzUwHhcNMjMwMTAxMDk0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjI5ODYwMjUwMGE0MDIxMDU3NDY1OTQ2NjU5NWVlZmQwODY1NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uWWGpxRb7QN9Pp0mqe1nAfsF7Mq
1H5yLz8blK0Al/TUvcPh64ZFGbmRrFpF9/b504rIXVDgU9phXjIuE8IXvLHM4qlE
kyV9n+Dbap/7EJnF4EjMV1RnHJIZNVj/Gd4HOEZ4MbH7pdrd8gNOAhEizL8K3xim
bXkgYixpH6MY+jYw61hjobNf+0Sgf1Ihh4WulyutQjOADIedEmlWg7tglVP7MtAO
emXO5mvo6NS/6d6C8+3QoU0XAK94ysbzv9VWkO56zOr/yfERt7Cp3yz2oukQspVH
qHfoG1s6C39qW41B1tiudlnPQ75RJWntBLqalNxQ3dU7AgUGlXjGZVej2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8phgJQCkAhBXRllGZZXu/QhlSFMB8GA1UdIwQY
MBaAFBUnRV6n/OF8/QQxmFJY0T4Gv6c1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUt
OThmOGNjZDVkYjhkLzEvVHltR0FsQUtRQ0VGZEdXVVpsbGU3OUNHVklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUtOThmOGNjZDVkYjhk
LzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV+uMA0G
CSqGSIb3DQEBCwUAA4IBAQC7sY2gGxKJK3sNhTLyKBjZrn14RALuiTGrdp0URzJo
tE9z9AEXHf27lg7jJx6WAzpsgUQozTdUob3UYpfBLpZbPL4y9hWjyowzJYOaEmd3
wCXpIVlhUVU0wfYOpYXGTnDuV0jkP76EF5KWIGaXfwMZUZT5+JZrcnJTNqnOnlzc
TSTYkzs5Jnw+RvKmiEGpZ9xiW5Zuumr+95Q093A3WAH9vnUz9Z07E7S1iyNW+C7D
kI59OekLAGX+5MNdjGEb1sftAJYHL2rW6ivwtvmIsGqV194pv+rILgikyY6EGy7X
Gdm3kjrzcUVSXqsLGk7ob6hZVIfZZMk2Q/tkBZOVWJw6
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:58 2025 by rpki-client