Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Tia3ZvrLcU-F7m6049Eq6SaC4YY.roa
File: Tia3ZvrLcU-F7m6049Eq6SaC4YY.roa (raw, json)
Hash identifier: K90FK3YmpXpvmuKZZkBmegjvnMUD3jsWIGwgxJZ7KPw=
Subject key identifier: 4E:26:B7:66:FA:CB:71:4F:85:EE:6E:B4:E3:D1:2A:E9:26:82:E1:86
Certificate issuer: /CN=4b0f3a6bea15f2cfdaaf11e526178af6a0811acf
Certificate serial: BB21CB
Authority key identifier: 4B:0F:3A:6B:EA:15:F2:CF:DA:AF:11:E5:26:17:8A:F6:A0:81:1A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sw86a-oV8s_arxHlJheK9qCBGs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Tia3ZvrLcU-F7m6049Eq6SaC4YY.roa
Signing time: Sat 01 Jan 2022 03:51:23 +0000
ROA not before: Sat 01 Jan 2022 03:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 194.110.27.0/24 maxlen: 24
194.110.30.0/24 maxlen: 24
194.110.72.0/24 maxlen: 24
194.110.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12263883 (0xbb21cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0f3a6bea15f2cfdaaf11e526178af6a0811acf
Validity
Not Before: Jan 1 03:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e26b766facb714f85ee6eb4e3d12ae92682e186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:00:e4:a3:7c:16:81:4f:b4:28:f8:4e:a5:
f0:f0:f8:7e:c9:5a:5f:01:dd:d5:38:cf:93:9a:f9:
6d:4c:af:04:74:f8:1e:92:8a:17:51:6e:9a:20:84:
04:33:4a:e9:ae:ca:cc:33:d0:04:c5:41:fe:c2:46:
70:06:e5:65:5c:b4:4d:db:7a:6b:90:ba:3f:a0:48:
60:b4:0a:19:3e:67:be:f7:42:da:f0:33:23:d4:b2:
a5:ae:27:45:10:fe:d7:fa:85:12:8d:b0:0d:24:ed:
71:9d:6c:b2:94:28:51:36:51:19:49:02:50:b6:e4:
fb:77:53:b4:e0:f6:d1:ef:ef:ec:d0:45:c0:f1:d7:
4d:5f:0c:a2:ba:c9:bb:93:e6:6c:26:dc:6e:12:6e:
9c:22:18:3a:58:23:97:a0:99:9d:f6:ff:5f:1e:42:
76:27:9e:3b:0c:85:90:8b:7d:1f:c7:c5:98:6b:42:
07:8b:c0:11:5a:3f:a8:b4:9f:bb:96:30:a3:83:59:
52:cf:3c:81:ed:8c:3a:a1:0d:8b:f5:27:0c:d3:42:
5b:c3:92:a2:39:97:6f:34:fd:e8:ba:55:ad:4c:2d:
5a:03:29:b5:ef:c8:77:11:6c:75:7a:4e:f5:0b:80:
58:7b:a4:05:4e:a3:27:6f:5e:e7:e2:ea:93:db:bd:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:B7:66:FA:CB:71:4F:85:EE:6E:B4:E3:D1:2A:E9:26:82:E1:86
X509v3 Authority Key Identifier:
keyid:4B:0F:3A:6B:EA:15:F2:CF:DA:AF:11:E5:26:17:8A:F6:A0:81:1A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sw86a-oV8s_arxHlJheK9qCBGs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Tia3ZvrLcU-F7m6049Eq6SaC4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Sw86a-oV8s_arxHlJheK9qCBGs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.22.0/24
194.110.27.0/24
194.110.30.0/24
194.110.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:65:7e:23:b1:f6:1f:04:66:17:8a:a6:96:77:df:eb:5d:d5:
b6:20:7a:4d:5d:2d:b3:47:03:d1:ee:4f:72:5a:96:d4:ff:99:
1c:22:c2:15:59:8e:a5:b8:c3:67:04:fe:3a:95:0c:87:50:c2:
4d:59:17:5b:b5:4a:75:30:b3:d3:52:a6:19:b1:54:5d:5f:4d:
96:d8:99:c3:fb:71:bb:c6:b1:60:15:a6:a8:39:29:5d:24:88:
b7:7e:1b:5e:3a:6c:5b:da:61:f9:8c:31:46:cb:9d:37:27:3b:
04:cd:0b:ba:53:09:34:16:72:25:a1:07:f0:76:61:66:75:ab:
5e:9e:b5:b0:d4:e7:77:28:ee:51:59:c9:94:4b:14:e7:ca:fd:
b0:53:57:8f:02:d6:fc:4c:52:28:20:e8:c8:e8:28:ce:bf:68:
c8:a7:c4:ec:51:34:d1:06:8a:73:90:c8:e7:ef:3b:e0:f4:3b:
5c:4d:9c:91:ae:e9:93:c6:e6:4f:ae:a6:d7:8a:64:3c:f4:6c:
68:9c:47:5c:25:70:3a:cc:ec:39:d3:f5:db:e3:8f:a9:d5:31:
3b:d6:40:f4:a8:ba:85:1a:69:9b:ec:f0:18:f0:b5:98:14:5a:
14:17:28:2d:eb:54:e5:2d:ae:5c:54:39:6e:3d:95:73:b4:33:
0b:4f:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org