Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/TsJGyFLqx1SHTSrc7_fblHDpi94.roa
File: TsJGyFLqx1SHTSrc7_fblHDpi94.roa (raw, json)
Hash identifier: mEfF9AA9/6+6rXmI7TQQ5i7EV0yvMlfIMg+xvjtKfy0=
Subject key identifier: 4E:C2:46:C8:52:EA:C7:54:87:4D:2A:DC:EF:F7:DB:94:70:E9:8B:DE
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: C4BAC0
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/TsJGyFLqx1SHTSrc7_fblHDpi94.roa
Signing time: Wed 16 Mar 2022 16:28:09 +0000
ROA not before: Wed 16 Mar 2022 16:28:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 185.15.102.0/23 maxlen: 23
185.15.100.0/22 maxlen: 22
185.15.101.0/24 maxlen: 24
5.152.168.0/21 maxlen: 21
5.8.184.0/21 maxlen: 21
37.1.176.0/21 maxlen: 21
37.1.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12892864 (0xc4bac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Mar 16 16:28:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ec246c852eac754874d2adceff7db9470e98bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:9d:0f:fe:3b:f7:28:3b:7a:4f:68:e7:7e:
41:c1:14:74:b0:25:b7:5d:cf:60:d3:98:4e:0a:35:
56:59:38:30:09:d3:81:dd:f8:ea:11:1c:6c:c0:b3:
a9:94:2e:2f:cc:ce:e8:ad:5e:cf:b9:3f:44:dc:c0:
8f:53:5c:3e:d1:fd:e7:f6:4a:4d:01:49:f1:7c:83:
72:44:05:2e:1b:0a:82:51:af:30:4b:5b:d0:56:f1:
69:2c:17:c5:21:3f:c7:9d:33:e5:65:5b:70:79:90:
26:a1:08:7c:cd:e5:09:21:0c:04:51:21:7f:e6:a3:
70:40:b6:fe:96:77:60:d2:33:f4:6b:5b:80:09:16:
fc:df:7a:51:3a:74:6e:b4:62:a3:30:e5:42:31:6c:
6c:5a:6c:b8:60:8f:b7:70:4e:93:f6:54:c1:54:4b:
4f:28:d0:47:6a:e0:c4:f9:27:b9:be:00:b2:e4:83:
77:70:2b:fb:00:94:1a:ec:86:fa:ba:b9:bb:0b:d9:
6c:30:28:08:08:6c:cb:99:9a:a9:2e:89:d8:16:cd:
ca:88:83:06:b4:21:0d:9b:bd:21:5b:27:ef:f3:c2:
dc:4b:e6:a3:ca:b7:a8:2b:70:e3:c4:74:a5:84:12:
c8:77:d5:04:8f:01:53:91:dc:04:e5:be:97:72:d1:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:46:C8:52:EA:C7:54:87:4D:2A:DC:EF:F7:DB:94:70:E9:8B:DE
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/TsJGyFLqx1SHTSrc7_fblHDpi94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/21
5.152.168.0/21
37.1.176.0/21
185.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
24:eb:42:10:25:2f:86:5f:35:65:34:13:a9:83:e5:a1:fe:31:
37:9e:95:b6:b0:97:76:ba:22:c7:ee:a5:79:6b:6e:37:05:80:
94:1c:d2:17:53:cd:0b:8d:ac:1b:40:d4:a7:68:59:49:75:aa:
87:18:38:87:bc:01:07:de:25:6b:8f:55:4a:2a:c6:e5:f5:e6:
90:84:85:6c:60:9a:5e:9e:38:71:dd:3c:99:8f:03:db:a1:08:
51:15:ce:ed:d0:bb:1a:51:5a:d6:f3:d2:43:3e:d4:42:7a:22:
f2:8e:71:1a:eb:3e:7c:5b:49:bd:5a:31:0c:34:b6:a4:41:1a:
69:b4:69:93:a5:00:44:e9:85:f6:9b:6a:2d:7b:95:bd:6f:37:
15:0b:20:c5:30:80:72:67:d6:63:a3:84:c4:54:30:50:c4:08:
a2:dd:3a:2c:4d:1c:b3:ab:fb:27:68:98:54:42:d4:8e:11:bc:
ea:44:43:10:83:e6:a6:73:e0:26:33:de:d4:25:c9:1a:c1:17:
78:c5:e4:5d:c0:27:71:d9:5b:3a:f5:de:e4:00:91:e7:3b:ce:
4b:09:6f:bb:2a:06:5c:f2:12:77:7d:41:d5:be:3e:02:b5:4b:
e1:b3:59:f5:c0:4d:1d:47:b5:b4:7a:8a:18:0b:e6:68:ca:c1:
10:de:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:21 2025 by rpki-client