Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/TTUoYAQXENCInBaSCTTjQNMcm8Q.roa
File: TTUoYAQXENCInBaSCTTjQNMcm8Q.roa (raw, json)
Hash identifier: giTrtAjPVw7AGUEUZPrLGgMKDdeUPMcSX0ZX/6fy8DI=
Subject key identifier: 4D:35:28:60:04:17:10:D0:88:9C:16:92:09:34:E3:40:D3:1C:9B:C4
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 01A042B1
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/TTUoYAQXENCInBaSCTTjQNMcm8Q.roa
Signing time: Thu 03 Feb 2022 12:37:52 +0000
ROA not before: Thu 03 Feb 2022 12:37:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5542
IP address blocks: 185.123.211.0/24 maxlen: 24
185.123.208.0/24 maxlen: 24
185.123.210.0/24 maxlen: 24
185.123.209.0/24 maxlen: 24
185.123.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27280049 (0x1a042b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Feb 3 12:37:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d352860041710d0889c16920934e340d31c9bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:f4:25:0b:2d:6b:c2:d7:67:53:9b:3e:9e:
4c:42:ea:ea:7d:d9:af:e2:43:b4:9f:17:88:dd:09:
1f:8d:10:2d:6a:2a:33:dc:2a:81:7f:70:d5:64:8e:
3d:14:28:18:5d:f2:e2:97:be:12:87:29:f6:2f:ee:
ff:ff:09:0e:e3:bb:b5:bd:4b:f1:d1:31:b7:fe:02:
3a:22:4a:76:39:d0:9b:79:1f:50:de:61:49:dd:ac:
fb:c7:ad:db:51:a3:e6:1a:2e:4a:7d:8b:8c:54:b6:
d7:f2:46:42:6d:98:61:fa:45:8c:a4:cb:8b:28:24:
4b:42:a9:0e:2d:20:a7:77:a0:4e:a5:a2:ca:2d:5b:
d4:be:e8:17:7a:f9:b0:00:a1:95:2a:e3:08:f1:bf:
ec:12:2b:5b:ce:76:f0:c1:47:67:80:fc:e1:e7:d5:
2d:90:0a:e6:c3:61:a0:29:33:6a:0d:d5:30:8a:45:
e7:f3:90:0a:a1:7e:f5:db:7e:11:91:b8:78:d0:72:
16:93:c1:b6:e9:a0:c3:be:ef:c5:3b:13:b3:1c:a6:
19:5c:25:31:a5:c3:32:05:ae:c9:83:d7:d5:3a:59:
74:31:ac:7a:cc:72:c5:7b:ac:78:3a:2a:67:6a:ba:
65:19:70:c2:68:5e:39:9b:b7:6e:c8:63:61:7b:52:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:28:60:04:17:10:D0:88:9C:16:92:09:34:E3:40:D3:1C:9B:C4
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/TTUoYAQXENCInBaSCTTjQNMcm8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.208.0/22
Signature Algorithm: sha256WithRSAEncryption
34:17:ee:72:95:22:30:c0:29:11:bb:df:3d:e9:fa:7b:2c:01:
51:d7:8b:39:8a:01:23:fa:a3:fa:6e:e4:d1:46:10:2c:7c:1d:
f3:d1:3d:76:ad:76:99:ee:d7:42:d3:b7:c1:bc:96:a9:60:e0:
40:0b:37:04:a6:67:a0:88:e9:c9:c5:ad:4b:12:53:28:fc:55:
1e:54:b5:76:9f:8e:aa:17:43:1a:ef:f3:20:89:5c:89:81:2f:
c0:36:47:a8:94:f9:6e:4d:ee:ba:99:41:97:54:35:6e:6d:05:
b0:52:1c:9f:3e:2e:ac:96:64:db:49:fe:6e:b7:62:36:53:fb:
2e:72:c3:db:10:c5:9c:d6:74:c8:00:00:a5:4f:43:7a:0d:cc:
94:00:f8:b0:e6:45:e6:b1:a8:41:d2:74:ea:1a:39:f4:c8:c8:
e8:b2:68:7e:13:10:91:81:ad:85:a3:92:6e:b0:b9:1d:a1:2c:
c3:4e:02:49:1b:18:83:2b:87:3d:dc:40:05:58:00:99:5b:90:
a4:0f:3c:4f:d6:93:f1:56:67:59:7f:8b:64:7a:59:fd:1f:bb:
27:08:5b:b2:f9:e5:84:22:fa:20:44:f4:66:56:8d:58:e7:d4:
0b:58:7b:a1:67:40:66:99:67:7f:be:a7:98:d4:81:4f:95:b8:
8d:82:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:20 2024 by rpki-client on console-ams.rpki-client.org