Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/TSEg8zRBNUd6Yq_XmBNX1ecxfg8.roa
File: TSEg8zRBNUd6Yq_XmBNX1ecxfg8.roa (raw, json)
Hash identifier: YW4O0cdL5unK6EqyGdFmNI0QTAoV0PiZDwXZV6CBTuE=
Subject key identifier: 4D:21:20:F3:34:41:35:47:7A:62:AF:D7:98:13:57:D5:E7:31:7E:0F
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 04C36D6A
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/TSEg8zRBNUd6Yq_XmBNX1ecxfg8.roa
Signing time: Sat 01 Jan 2022 03:55:00 +0000
ROA not before: Sat 01 Jan 2022 03:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42487
IP address blocks: 46.235.176.0/21 maxlen: 24
85.95.192.0/19 maxlen: 24
2a03:d602::/31 maxlen: 31
2a03:d606::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79916394 (0x4c36d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 1 03:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2120f3344135477a62afd7981357d5e7317e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:7a:ef:fb:15:a1:d0:68:84:f2:c7:7d:b7:
dd:39:10:ca:06:67:34:d9:29:31:6a:cd:16:17:bb:
2a:9d:cb:54:95:6f:0d:db:a1:96:f0:13:05:67:6b:
2b:81:81:31:9c:63:66:d5:33:99:f0:33:41:a5:60:
84:f8:4d:9b:c8:56:e9:6e:77:97:68:53:80:86:1f:
44:16:c1:7a:9e:bb:bb:a2:70:ea:b5:38:6e:45:ba:
7b:e5:ed:7c:3a:b7:37:fa:70:2e:19:90:b9:e6:2d:
3f:21:a0:c1:86:13:1c:87:d9:86:2f:46:84:22:50:
6c:1a:ea:1a:a7:b6:bf:65:d4:3a:27:fd:77:8f:9b:
ae:4b:45:5e:50:36:3e:a0:38:16:80:69:f4:38:91:
09:88:34:13:4b:48:54:cd:6d:9f:2d:30:fe:2a:f0:
49:0d:51:7b:4b:82:ea:f7:a3:33:27:62:1b:b5:cb:
14:21:44:11:98:03:95:86:b9:a4:6a:df:7b:e2:4a:
76:80:30:52:86:ec:42:97:e4:75:8d:cf:99:24:af:
d7:f9:5a:25:69:f6:35:58:c0:f3:76:39:b2:d3:e0:
47:f2:55:47:24:c4:23:a1:11:ea:8d:e4:41:2e:5a:
0d:5b:77:46:c3:16:85:13:01:1c:26:7c:17:92:54:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:20:F3:34:41:35:47:7A:62:AF:D7:98:13:57:D5:E7:31:7E:0F
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/TSEg8zRBNUd6Yq_XmBNX1ecxfg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.176.0/21
85.95.192.0/19
IPv6:
2a03:d602::/31
2a03:d606::/31
Signature Algorithm: sha256WithRSAEncryption
92:04:7c:09:d1:a2:2c:05:a5:cd:8b:74:97:cb:1b:0e:f9:9b:
a7:cd:1d:3c:6b:e0:91:8f:eb:a2:55:10:98:7c:3e:6d:c4:5d:
65:61:63:3f:17:0f:f0:a4:de:b2:7e:d5:26:0c:47:c0:31:51:
57:28:11:77:65:7e:5b:b2:8c:86:cb:f6:91:5e:fa:29:76:ad:
9f:6d:b4:54:c7:eb:ff:8b:ac:3c:d3:62:c0:eb:69:74:05:59:
75:2e:98:6c:50:6d:ee:5f:12:b0:2d:72:6d:37:59:44:08:2f:
7a:32:b7:33:3f:27:16:cb:37:e7:35:4d:cb:1d:3c:19:af:60:
bb:d6:44:2e:c3:32:a3:31:ee:60:df:e3:e1:b3:0c:56:0b:87:
a1:93:19:d9:ca:47:f9:07:05:51:42:57:b8:fc:d0:d9:05:05:
97:bf:3a:9e:d3:40:2b:ff:cc:e5:35:c8:de:87:30:a5:12:6e:
b1:7a:89:0b:91:45:06:ba:5e:1e:a3:b7:b8:ac:2e:d4:00:4b:
53:fa:09:32:72:3c:cc:85:0f:49:e2:72:fb:b1:ac:90:a6:10:
1f:9f:09:da:ab:f8:15:ec:c4:30:24:9d:87:eb:5d:89:e9:d9:
c4:44:62:78:9c:d4:33:10:2b:d8:c6:fe:e9:fd:d0:44:c3:48:
e6:18:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:04 2025 by rpki-client