Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/TViHTj877HZwUtyb2llPuVnRNtg.roa
File: TViHTj877HZwUtyb2llPuVnRNtg.roa (raw, json)
Hash identifier: dbYgcvWbb75/at1ik94yZNZv1CKbkTRlpaPNjBa4D78=
Subject key identifier: 4D:58:87:4E:3F:3B:EC:76:70:52:DC:9B:DA:59:4F:B9:59:D1:36:D8
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 018570F095F062878A083477B74EF004C8EF
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/TViHTj877HZwUtyb2llPuVnRNtg.roa
Signing time: Mon 02 Jan 2023 05:24:53 +0000
ROA not before: Mon 02 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59989
IP address blocks: 185.82.33.0/24 maxlen: 24
185.82.35.0/24 maxlen: 24
185.82.32.0/24 maxlen: 24
185.82.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:95:f0:62:87:8a:08:34:77:b7:4e:f0:04:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 2 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d58874e3f3bec767052dc9bda594fb959d136d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:78:4a:5c:9f:d8:5c:96:f4:db:87:19:dc:a6:
44:19:a2:96:df:1e:8f:12:ca:4a:b9:da:af:af:c4:
f5:f7:19:d1:9b:45:39:1f:10:bc:20:20:63:9d:f2:
8a:21:9b:51:97:dd:09:17:35:64:b9:46:b0:d1:f4:
69:a9:b5:cd:12:05:52:e1:45:56:25:dc:73:3b:80:
af:1a:40:d9:b1:45:7d:0a:40:2f:88:d3:64:8f:41:
af:51:e6:55:83:44:d3:c7:77:82:15:b8:b6:18:f3:
9b:ae:3a:79:73:cf:1f:ad:b2:82:75:e6:35:9b:10:
8b:da:14:2b:af:6e:cb:af:42:78:8e:7f:a6:c1:11:
b7:d9:4f:1e:38:3d:6e:a0:08:8b:49:c1:ee:41:19:
e9:02:42:88:c3:1e:e2:8a:be:49:d0:48:0d:32:ba:
c5:88:1f:f4:b4:c5:a9:3d:40:9f:bd:cc:c3:1b:d8:
d8:a7:ee:fb:dd:77:55:7c:eb:18:ca:d6:97:2b:62:
b4:eb:18:52:c6:0e:a7:3e:39:ce:8e:3c:a3:c8:b3:
df:09:e2:8d:7f:5f:44:cd:55:48:6f:bb:33:47:7d:
90:dd:56:c4:19:36:7c:50:d3:41:ac:dc:82:2c:2b:
43:39:26:60:12:b9:80:8b:58:cd:b4:be:94:df:45:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:87:4E:3F:3B:EC:76:70:52:DC:9B:DA:59:4F:B9:59:D1:36:D8
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/TViHTj877HZwUtyb2llPuVnRNtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:93:65:f0:cb:7e:af:64:4d:bf:cf:dc:5f:66:77:f1:6f:9d:
5e:16:35:3a:db:56:38:64:bd:0f:3f:57:e4:6c:1b:55:62:b1:
28:a7:dd:97:c0:28:0a:45:00:72:0b:9d:9e:d7:54:54:0c:d3:
49:45:16:c1:39:1e:23:14:32:32:b1:a8:25:66:5a:31:d8:f6:
b4:79:66:6f:a3:0d:aa:bc:9d:5d:f4:cc:04:27:14:fc:09:b7:
d6:e8:5f:a5:6e:1b:5c:02:70:bd:6c:4b:c2:0c:d6:9a:d6:db:
b7:ff:a1:fa:13:95:ad:a0:2e:23:b4:bd:a6:b1:81:32:68:f9:
f3:62:81:3e:64:79:c2:e5:de:7f:3a:bc:8d:90:44:51:7d:ff:
56:6f:71:51:35:b0:60:9d:06:87:16:75:03:d2:fd:bc:18:1c:
df:fd:46:30:e1:4d:2e:6c:6f:1f:4d:89:04:7f:52:18:2f:ec:
32:ee:3d:91:60:1a:b6:a3:19:1e:d5:2e:f5:f5:47:c8:a1:1d:
22:b4:ea:a0:c2:15:c1:2f:a2:17:f2:5f:42:2c:92:21:bd:f9:
17:d9:da:5a:70:dd:35:79:8c:d3:4b:82:b6:d7:3a:d8:6b:d9:
0a:de:00:5e:b6:e5:a1:58:ce:69:e5:6a:44:04:fe:27:70:2c:
af:de:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:52 2025 by rpki-client