Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/TgHGgx6Uw-w9DCPRe0huT9DPG-0.roa
File: TgHGgx6Uw-w9DCPRe0huT9DPG-0.roa (raw, json)
Hash identifier: g+Kscqip6RvMKZNJICbGqLsYPHzTYdNf1XLam6QA54M=
Subject key identifier: 4E:01:C6:83:1E:94:C3:EC:3D:0C:23:D1:7B:48:6E:4F:D0:CF:1B:ED
Certificate issuer: /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial: 01DD1C19
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/TgHGgx6Uw-w9DCPRe0huT9DPG-0.roa
Signing time: Sat 01 Jan 2022 08:55:02 +0000
ROA not before: Sat 01 Jan 2022 08:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49163
IP address blocks: 185.119.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31267865 (0x1dd1c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Validity
Not Before: Jan 1 08:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e01c6831e94c3ec3d0c23d17b486e4fd0cf1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:a3:cf:a6:f0:8a:3e:bd:0b:63:88:f3:c5:
7d:67:d3:84:82:b1:eb:9e:01:8e:45:c8:b8:b4:96:
55:31:a1:80:90:f6:02:21:f6:e5:1d:95:39:73:30:
4a:79:15:63:cf:a2:25:06:41:fc:7d:c0:91:5f:50:
58:29:c3:e3:83:52:ff:92:0f:18:fa:68:a8:a8:ed:
65:05:4b:03:20:3d:ae:8c:3a:7a:8a:b4:70:f5:2d:
0f:ce:cd:56:05:5f:66:d2:df:24:d8:20:1d:3a:72:
2d:5d:a9:bd:e2:ca:dc:6d:df:31:40:a3:b5:c4:f2:
96:a1:7c:82:39:9e:b1:af:08:ff:d0:13:5d:f5:89:
19:33:9f:5e:8c:6c:94:13:05:f9:29:03:98:d4:9f:
01:1d:a6:78:69:e2:49:4a:bc:67:b6:c7:29:96:cd:
b1:c6:31:63:8a:68:6a:ad:f2:ed:bb:25:14:aa:cd:
34:cf:3c:46:d3:8f:3e:b5:42:ea:66:0e:d4:d9:95:
47:1d:1d:62:0f:2a:95:7d:ae:23:36:a6:f2:4a:e5:
a4:bd:2b:df:ca:60:90:c4:9a:14:42:d5:f0:47:ff:
a6:45:cc:e2:c3:2f:e3:dd:a1:de:f3:93:5e:6f:f5:
87:f3:1c:15:0e:79:7c:5f:17:f5:63:10:56:4a:4b:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:C6:83:1E:94:C3:EC:3D:0C:23:D1:7B:48:6E:4F:D0:CF:1B:ED
X509v3 Authority Key Identifier:
keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/TgHGgx6Uw-w9DCPRe0huT9DPG-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:2d:a2:21:07:10:9a:be:82:8c:fb:18:54:63:36:ed:28:49:
0e:2d:a3:e7:88:47:52:4c:f2:56:be:f2:b9:95:d8:79:db:a9:
ee:6d:33:5f:82:22:be:9a:d2:1e:73:6f:16:3a:b8:7e:22:84:
0d:15:74:4d:0c:75:16:0e:e5:be:21:45:e3:96:46:ba:00:3f:
d6:1a:43:db:f1:51:16:ee:c1:b7:72:dd:a4:c5:f4:7b:6a:f9:
f7:b1:73:78:97:e3:7d:10:b5:e6:08:cd:91:a5:e5:b5:18:f8:
96:14:34:4e:c6:90:c8:08:a0:e3:0b:b6:1e:6b:06:4d:3c:63:
23:96:2c:db:f7:bc:16:98:d9:28:8f:0f:b2:7f:a6:60:9f:9d:
ec:57:1a:96:8c:72:8a:a8:88:75:2b:18:e9:9d:6a:e4:dc:94:
50:70:8f:5b:a1:e4:9f:80:bb:eb:16:17:4a:18:23:1e:67:1f:
7c:77:3f:5f:56:c4:d9:71:59:94:09:1d:47:19:26:62:f2:1f:
2a:fc:d6:98:77:9b:6f:1e:16:87:37:94:b3:e9:ef:0c:fa:29:
e2:79:d7:db:1d:e1:07:c7:b9:82:22:08:a1:59:c8:b1:cc:ad:
91:73:ef:b8:fd:49:07:1a:f0:f6:23:d9:88:aa:94:6f:ec:48:
d7:54:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:38 2025 by rpki-client