Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/TlkrWFAL72pI7mHTDIDJTQpWwGU.roa
File: TlkrWFAL72pI7mHTDIDJTQpWwGU.roa (raw, json)
Hash identifier: 8EepZznSHIRP5pDaqWNq3uoB0OY2l6iOqvVi2hh5SEo=
Subject key identifier: 4E:59:2B:58:50:0B:EF:6A:48:EE:61:D3:0C:80:C9:4D:0A:56:C0:65
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 627401
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/TlkrWFAL72pI7mHTDIDJTQpWwGU.roa
Signing time: Thu 06 Jan 2022 18:14:15 +0000
ROA not before: Thu 06 Jan 2022 18:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56749
IP address blocks: 31.130.187.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
31.130.190.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.188.0/22 maxlen: 22
31.130.188.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.176.0/20 maxlen: 20
31.130.180.0/24 maxlen: 24
31.130.180.0/22 maxlen: 22
31.130.186.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.184.0/24 maxlen: 24
31.130.183.0/24 maxlen: 24
31.130.182.0/24 maxlen: 24
31.130.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6452225 (0x627401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 6 18:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e592b58500bef6a48ee61d30c80c94d0a56c065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:25:d0:8c:92:34:79:7b:b7:51:b5:aa:e7:
a2:f8:46:be:54:4f:0e:c2:e3:fe:6d:32:c8:f6:58:
23:e6:4b:e0:88:39:6c:95:51:01:99:fb:77:16:46:
1d:ec:95:2f:dc:34:2a:66:c9:d3:59:e8:be:25:af:
6c:b2:61:d3:b9:78:6d:38:96:fd:ef:4a:20:32:24:
2c:db:80:51:43:0a:57:05:83:14:3d:2d:ff:c2:25:
be:f1:10:c4:37:1c:ba:a5:0e:e7:5e:fa:76:a7:41:
9f:b6:5d:10:a0:63:6e:57:18:54:c7:ab:f2:68:f7:
e4:dd:8f:fd:dc:5b:7f:90:2d:05:c0:2d:b2:7f:58:
01:c5:61:25:7c:9d:e6:3f:ac:01:eb:43:9d:ad:94:
75:ce:2d:89:f3:79:48:9f:8c:e6:f8:b6:2f:af:d4:
9d:83:15:13:ce:18:66:d6:63:0e:1e:77:74:3a:39:
1f:44:53:91:71:42:ea:cb:9e:9c:b0:f2:b8:c2:71:
1d:46:18:4a:a2:b7:aa:36:92:3b:e3:6e:12:d0:bb:
ed:95:b1:0e:23:e4:dd:7a:10:0c:92:63:fa:58:58:
7f:1c:25:98:be:84:b3:3f:f5:b4:f6:47:26:08:89:
d0:cc:3e:66:21:7d:80:32:9d:64:91:e1:b1:8c:38:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:2B:58:50:0B:EF:6A:48:EE:61:D3:0C:80:C9:4D:0A:56:C0:65
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/TlkrWFAL72pI7mHTDIDJTQpWwGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0/20
Signature Algorithm: sha256WithRSAEncryption
de:9f:cd:05:32:6c:48:a6:e0:51:90:ed:53:da:6d:11:e9:56:
a2:5d:56:57:42:10:f8:56:25:78:48:26:da:6b:2d:06:5f:7a:
8b:18:1b:b7:ec:e7:86:37:8c:fb:18:b4:90:3b:f0:e4:ce:4b:
f3:e8:b8:db:ad:dd:f1:1a:0a:db:04:ce:a2:3c:cd:56:34:e6:
4b:48:d1:1d:3f:91:fa:05:9a:9d:9f:6a:e1:b3:75:ac:cd:4a:
72:bf:96:81:f7:39:92:fe:0e:26:c8:bb:19:03:f9:ce:c8:ef:
d1:64:ea:50:79:67:7f:ae:eb:7c:45:47:b0:08:c9:43:70:76:
87:71:47:8d:41:17:4d:10:40:d2:29:bc:24:50:34:1a:67:f4:
6b:27:52:0e:85:b9:3d:c6:81:ad:ff:2d:ad:28:27:95:14:ad:
8a:75:04:be:79:24:d6:8e:c1:35:af:90:66:95:34:73:38:98:
15:fd:45:64:37:67:a9:d9:f0:41:7f:8f:53:3d:1b:a0:cc:71:
2d:d1:c3:86:4d:91:f1:46:98:d6:76:40:b0:1b:20:65:32:c1:
0d:3c:30:72:73:c2:84:b5:ec:c5:34:1a:e3:88:f2:99:ae:58:
8a:3e:10:59:ac:f1:65:27:91:de:b4:60:40:fb:c4:b6:e8:3b:
35:70:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:29 2025 by rpki-client