Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/TSBfO4yzSO0oPLY8OJ46QT5fybs.roa
File: TSBfO4yzSO0oPLY8OJ46QT5fybs.roa (raw, json)
Hash identifier: yLNo2uwIeh+pQkr2NWIiC1eqhP1Qr+bMhLV/egxUYLc=
Subject key identifier: 4D:20:5F:3B:8C:B3:48:ED:28:3C:B6:3C:38:9E:3A:41:3E:5F:C9:BB
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 0F17BE
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/TSBfO4yzSO0oPLY8OJ46QT5fybs.roa
Signing time: Fri 27 May 2022 20:45:15 +0000
ROA not before: Fri 27 May 2022 20:45:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59895
IP address blocks: 194.26.222.0/24 maxlen: 24
185.65.206.0/24 maxlen: 24
185.65.205.0/24 maxlen: 24
185.65.204.0/24 maxlen: 24
185.65.207.0/24 maxlen: 24
2a05:300:1::/48 maxlen: 48
2a05:300:2::/48 maxlen: 48
2a05:300::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989118 (0xf17be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: May 27 20:45:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d205f3b8cb348ed283cb63c389e3a413e5fc9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:40:71:af:a8:a2:fc:a1:ca:07:48:0d:d9:
ba:02:e0:cc:66:f4:93:c1:ec:5d:5c:09:f6:7f:4e:
41:49:82:23:34:59:4c:13:fc:00:90:91:99:d9:b9:
b8:56:28:cd:6c:fd:69:35:a1:07:f2:31:02:20:a0:
17:fa:5f:07:4b:cd:ee:6f:d3:d3:be:80:ea:e9:0c:
56:cf:8f:3b:2f:28:69:b2:68:3c:8f:8d:3c:94:8f:
7b:dd:43:99:19:1c:be:a7:3b:8e:72:5d:07:0d:24:
04:44:67:e5:f8:00:66:81:f2:7a:72:9a:df:5a:1c:
6d:1d:fb:4a:45:4e:db:3a:10:ec:e3:d5:bd:0e:31:
a8:b2:95:f2:0f:85:80:18:7e:5b:70:21:5f:2d:25:
d8:45:44:f3:f1:3e:9a:f0:27:1b:6a:dc:0d:01:13:
8a:f6:48:6b:94:90:4b:47:64:fd:c1:25:41:75:9d:
89:5b:00:dd:3d:46:a7:bc:3a:91:63:cd:ac:e5:7c:
9f:92:20:38:6e:47:44:6b:9d:c1:e5:69:58:fa:9a:
1a:24:b2:9f:2b:9a:aa:58:1f:b1:68:df:14:2a:b3:
af:ee:77:01:0a:20:c4:69:54:37:7f:2a:f0:03:df:
8f:46:1b:e4:42:43:3f:21:21:d1:37:1a:2a:95:4c:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:5F:3B:8C:B3:48:ED:28:3C:B6:3C:38:9E:3A:41:3E:5F:C9:BB
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/TSBfO4yzSO0oPLY8OJ46QT5fybs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.204.0/22
194.26.222.0/24
IPv6:
2a05:300::-2a05:300:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:76:ec:4d:3d:34:b3:fd:a2:ba:72:05:13:90:2a:51:82:e7:
6c:2c:b2:1e:21:0a:f7:89:0d:bb:1c:0a:fb:41:fb:19:11:c5:
a8:ab:39:5a:29:40:15:6b:98:bb:c2:a2:1d:cc:ee:92:b2:9f:
d4:36:13:67:d1:33:a0:a9:2f:49:3b:f4:5b:f8:4d:b3:1d:25:
fe:df:84:96:04:5e:e5:09:13:ae:bc:0e:5b:ea:f7:9c:e1:20:
03:7f:50:1b:d9:e5:e7:3b:11:87:b7:ad:19:25:73:54:66:a9:
f3:70:68:83:48:37:e4:1f:51:d9:51:52:e1:ea:78:07:34:24:
ef:8d:90:c4:54:2e:21:4f:79:be:d3:63:21:58:34:84:48:93:
35:09:e3:f0:c2:c3:7e:4f:4c:7e:ac:2a:bc:fb:91:27:b4:17:
85:af:5b:12:cb:e1:a2:ad:fc:48:6f:27:ae:4b:86:16:79:cf:
79:af:f0:e5:2d:f6:6f:79:2a:ac:86:2f:72:ed:30:dc:1c:2f:
1a:14:65:7d:f5:64:be:76:39:fd:71:6e:f1:90:e5:89:47:92:
1f:9e:8c:96:d2:b0:22:c0:bb:0f:e9:f8:ee:b2:ce:f3:f5:37:
88:de:0e:2c:5a:93:38:31:2a:09:3b:24:76:8d:95:be:5e:e3:
15:28:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:42 2025 by rpki-client