Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tk2XCKNMTF4Xkhf4J7Cr8TKwJ2w.roa
File: tk2XCKNMTF4Xkhf4J7Cr8TKwJ2w.roa (raw, json)
Hash identifier: VwU6XmqgNXhWO8OLegxIFLULCLs5E7XJ4fLXRxIWiVw=
Subject key identifier: B6:4D:97:08:A3:4C:4C:5E:17:92:17:F8:27:B0:AB:F1:32:B0:27:6C
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01849A81001FB089CEE07808B187BEF2CF4F
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tk2XCKNMTF4Xkhf4J7Cr8TKwJ2w.roa
Signing time: Mon 21 Nov 2022 14:04:16 +0000
ROA not before: Mon 21 Nov 2022 14:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44854
IP address blocks: 45.113.236.0/23 maxlen: 24
185.219.6.0/24 maxlen: 24
103.243.124.0/22 maxlen: 24
27.123.244.0/22 maxlen: 22
93.114.180.0/23 maxlen: 24
2a10:e300:35::/48 maxlen: 48
2a10:e300::/32 maxlen: 48
2a10:e300:26::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:81:00:1f:b0:89:ce:e0:78:08:b1:87:be:f2:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Nov 21 14:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b64d9708a34c4c5e179217f827b0abf132b0276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:d6:d0:a9:fd:9f:49:ef:70:5e:a7:22:e8:
99:35:90:97:04:22:b5:81:6b:1b:f7:a3:91:68:3f:
07:75:d0:09:fb:e2:f3:9c:2b:44:56:2d:00:2a:15:
0c:09:56:54:7d:be:94:e8:23:0d:ca:7c:9a:13:5d:
66:8a:a8:50:99:f6:02:b8:94:ce:f4:36:5f:8f:0c:
f6:ea:bf:3c:34:2a:63:42:62:1a:00:f4:e5:f2:d2:
53:75:74:22:98:ed:49:23:fb:0b:8b:27:7e:34:24:
5a:c5:a6:8b:35:0f:77:bd:8c:72:96:0e:b8:82:87:
d7:05:8d:5a:d2:4d:f3:fc:b2:ce:3a:b7:b0:fc:1a:
a5:5a:a9:37:fa:76:22:c2:ec:e4:59:19:27:6a:53:
b6:d5:ae:5f:0c:fd:9e:38:bb:7f:27:46:86:ff:bf:
4e:dc:3c:a1:25:43:c7:8e:1a:fc:c2:60:1c:4f:99:
99:f9:52:d8:d2:21:d6:ec:4d:56:ba:37:e4:91:a3:
f1:2a:7c:2d:1f:d6:7c:ef:61:a6:2d:4a:df:0f:9f:
cc:67:d3:91:7d:b5:53:80:33:d1:5b:40:4b:e6:a0:
b6:c2:fd:0e:3f:25:a2:ed:9d:2b:80:01:cd:f4:d4:
1d:20:fe:d5:50:ce:0d:e7:35:a8:b2:b6:f8:ca:1f:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:97:08:A3:4C:4C:5E:17:92:17:F8:27:B0:AB:F1:32:B0:27:6C
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/tk2XCKNMTF4Xkhf4J7Cr8TKwJ2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.244.0/22
45.113.236.0/23
93.114.180.0/23
103.243.124.0/22
185.219.6.0/24
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
4f:3e:24:aa:bb:6f:91:01:ee:82:d4:e5:cf:fe:8b:8a:01:f8:
f1:43:b8:16:51:0a:af:e2:56:29:3a:d3:0d:04:36:56:01:4f:
7d:ee:cb:33:ae:d5:ec:43:3c:8d:33:26:af:16:0b:10:3b:7a:
f1:ec:ff:9d:90:2d:3f:e3:e9:58:f4:74:52:9b:ac:47:9a:80:
b2:17:17:a2:1d:91:d0:67:ee:e3:83:46:0c:b7:64:a8:a5:f9:
83:76:27:ad:e0:9e:14:8e:05:9a:0a:ca:92:cd:3a:e4:5a:39:
cc:50:2e:6d:f6:b6:26:a3:6b:e8:aa:a3:ed:ea:4a:0b:80:b8:
11:3f:a4:6a:27:3c:b5:c5:1e:62:ba:14:b9:e3:61:aa:c6:71:
3f:02:80:83:0a:ef:59:7b:a2:0d:b3:6e:ea:36:4a:83:aa:ed:
45:f2:b6:5d:c9:91:02:e3:b6:a4:9b:e8:db:42:23:d1:e2:7d:
00:a8:66:0d:fa:00:8d:3d:be:15:02:17:34:4d:7c:87:89:18:
bd:cc:5d:f7:d9:c5:48:11:8e:1f:8b:13:a4:0a:71:d4:29:8d:
e8:0c:49:42:c2:af:e0:1f:0d:6e:8d:31:d4:b1:9c:f9:2b:0a:
bc:ae:cf:b4:05:b9:27:a3:bd:fc:17:99:4e:ae:0b:76:38:2c:
31:9a:74:35
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYSagQAfsInO4HgIsYe+8s9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjIxMTIxMTQwNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjRkOTcwOGEzNGM0YzVlMTc5MjE3ZjgyN2IwYWJmMTMyYjAyNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgbW0Kn9n0nvcF6nIuiZNZCXBCK1
gWsb96ORaD8HddAJ++LznCtEVi0AKhUMCVZUfb6U6CMNynyaE11miqhQmfYCuJTO
9DZfjwz26r88NCpjQmIaAPTl8tJTdXQimO1JI/sLiyd+NCRaxaaLNQ93vYxylg64
gofXBY1a0k3z/LLOOrew/BqlWqk3+nYiwuzkWRknalO21a5fDP2eOLt/J0aG/79O
3DyhJUPHjhr8wmAcT5mZ+VLY0iHW7E1WujfkkaPxKnwtH9Z872GmLUrfD5/MZ9OR
fbVTgDPRW0BL5qC2wv0OPyWi7Z0rgAHN9NQdIP7VUM4N5zWosrb4yh+vQwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLZNlwijTExeF5IX+Cewq/EysCdsMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvdGsyWENLTk1URjRYa2hmNEo3Q3I4VEt3SjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCG3v0AwQB
LXHsAwQBXXK0AwQCZ/N8AwQAudsGMA0EAgACMAcDBQAqEOMAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPPiSqu2+RAe6C1OXP/ouKAfjxQ7gWUQqv4lYpOtMNBDZWAU997ssz
rtXsQzyNMyavFgsQO3rx7P+dkC0/4+lY9HRSm6xHmoCyFxeiHZHQZ+7jg0YMt2So
pfmDdiet4J4UjgWaCsqSzTrkWjnMUC5t9rYmo2voqqPt6koLgLgRP6RqJzy1xR5i
uhS542GqxnE/AoCDCu9Ze6INs27qNkqDqu1F8rZdyZEC47akm+jbQiPR4n0AqGYN
+gCNPb4VAhc0TXyHiRi9zF332cVIEY4fixOkCnHUKY3oDElCwq/gHw1ujTHUsZz5
Kwq8rs+0Bbkno738F5lOrgt2OCwxmnQ1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:33 2023 by rpki-client on console-fra.rpki-client.org