Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ttUnsmdX8u9xcsdDpF94JrIuVzU.roa
File: ttUnsmdX8u9xcsdDpF94JrIuVzU.roa (raw, json)
Hash identifier: XZF15TpNyoDrGmwAGI4JTLuSaAcj2iXEOT2ifousP20=
Subject key identifier: B6:D5:27:B2:67:57:F2:EF:71:72:C7:43:A4:5F:78:26:B2:2E:57:35
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0184990338D3E53B117C159DE4A2371847B9
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ttUnsmdX8u9xcsdDpF94JrIuVzU.roa
Signing time: Mon 21 Nov 2022 07:07:15 +0000
ROA not before: Mon 21 Nov 2022 07:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 217.113.24.0/21 maxlen: 24
217.113.20.0/22 maxlen: 22
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
5.134.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:03:38:d3:e5:3b:11:7c:15:9d:e4:a2:37:18:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 21 07:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6d527b26757f2ef7172c743a45f7826b22e5735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:8d:fb:cb:c1:4e:cb:97:70:b2:b8:e9:bd:
62:d1:5a:11:0b:a8:37:2c:8c:05:40:64:c5:58:e1:
af:a4:b9:f8:1b:31:84:d8:84:76:4f:4d:ec:3a:ca:
84:15:b5:ce:b2:18:2e:f8:f4:ef:d7:35:67:7d:f0:
f6:08:1e:3b:a3:e6:0e:04:26:71:29:db:e7:27:03:
62:46:ac:cb:7c:ef:09:41:45:0b:4a:d0:3f:6c:15:
a6:ce:18:b2:6e:db:10:6a:b2:24:29:8b:7e:56:ba:
11:4a:47:f8:35:bf:c3:d5:b8:3f:29:2e:17:32:c5:
ca:2a:75:31:1d:20:7c:9e:b0:13:33:89:9c:86:20:
07:59:56:7b:3a:06:3f:b7:7b:15:96:9c:fb:a4:0d:
27:f8:22:89:31:c9:cf:c1:0b:19:8a:d8:82:bc:92:
28:e6:eb:eb:ea:c4:b4:06:3b:69:d1:73:47:9d:2c:
c2:be:a3:6b:cc:a0:2f:2f:0c:80:4e:41:76:72:1b:
ad:48:94:19:53:1e:96:39:42:73:89:54:50:1d:9b:
b3:fb:83:50:d0:92:3d:a4:a6:b0:04:89:90:d6:41:
9b:46:a9:4b:a1:39:26:17:3d:ff:2a:7a:00:64:e3:
fe:c2:9d:9d:5e:c9:2b:d0:aa:f2:50:31:8a:5e:4a:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:27:B2:67:57:F2:EF:71:72:C7:43:A4:5F:78:26:B2:2E:57:35
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ttUnsmdX8u9xcsdDpF94JrIuVzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
45.133.104.0/22
217.113.18.0-217.113.31.255
Signature Algorithm: sha256WithRSAEncryption
45:02:da:66:a3:8b:ca:cb:ec:c1:d5:a2:f2:a4:5c:dd:15:77:
d3:50:65:29:a8:ff:c4:96:93:0b:6f:a4:3e:f1:46:95:48:6a:
74:af:67:80:66:e5:a6:95:ce:94:3e:c0:dd:c6:ea:22:fd:b2:
9b:a0:47:be:72:89:b2:19:3c:b7:a7:d4:f9:db:58:3f:6e:05:
ad:04:33:b9:ed:57:ed:5f:b0:fe:39:a8:5f:e9:f8:a6:82:04:
ab:8b:9c:80:70:4b:d6:47:ce:bf:a3:3a:c2:2e:aa:1b:e3:9e:
42:3b:b1:ed:55:a0:e7:8a:90:fa:bc:c5:58:b0:74:f3:d8:55:
a8:11:e5:23:bb:81:64:a6:5e:3f:dc:50:c0:15:eb:b3:0c:4f:
5c:63:44:88:e4:30:6b:5b:27:e8:d5:2c:5c:d4:26:4a:ef:68:
d6:b9:0e:2a:dc:a1:39:f3:89:3b:75:e1:9b:1f:66:42:f6:2e:
c9:00:f0:0c:32:85:30:01:f5:74:cc:db:cd:d2:8e:9f:25:47:
a2:34:44:16:11:34:ce:df:b1:9c:e0:b7:f8:00:6c:46:02:b8:
27:7f:3c:17:fe:ee:87:6b:09:77:fc:27:ef:7d:20:21:6a:3b:
b7:18:ac:97:80:3a:6b:99:f8:a4:3f:db:73:ff:f8:2d:94:38:
0f:fc:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:09:04 2025 by rpki-client