Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/TSSMc_bbv3cKwyINPqjOo2p8bD4.roa
File: TSSMc_bbv3cKwyINPqjOo2p8bD4.roa (raw, json)
Hash identifier: l9aBdH1R5Sz/ozdXgp1wqnD7KZf93x//+1qf2a7IpG4=
Subject key identifier: 4D:24:8C:73:F6:DB:BF:77:0A:C3:22:0D:3E:A8:CE:A3:6A:7C:6C:3E
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 0C410EBC
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/TSSMc_bbv3cKwyINPqjOo2p8bD4.roa
Signing time: Sat 01 Jan 2022 14:55:15 +0000
ROA not before: Sat 01 Jan 2022 14:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61189
IP address blocks: 85.194.201.0/24 maxlen: 24
85.194.200.0/22 maxlen: 22
185.7.252.0/22 maxlen: 22
185.7.252.0/23 maxlen: 23
2a03:29c0:2000::/36 maxlen: 36
2a03:29c0:1000::/36 maxlen: 36
2a03:29c0:a000::/35 maxlen: 35
2a03:29c0:8000::/33 maxlen: 33
2a03:29c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205590204 (0xc410ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Jan 1 14:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d248c73f6dbbf770ac3220d3ea8cea36a7c6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:60:1f:10:b8:db:d1:3d:15:1e:d6:17:c0:d2:
75:51:83:53:d5:6d:fe:9c:91:88:e6:2e:2a:64:e9:
82:ca:f1:b5:c8:b6:7e:98:04:3a:2b:17:84:06:99:
89:8f:fd:7d:79:3d:d3:00:c7:c0:9f:76:74:c7:3b:
59:3e:9d:9b:4c:4b:96:05:d9:5e:7c:1a:fd:33:23:
bd:7b:e7:98:88:58:4b:93:67:3c:61:c5:0a:68:5b:
41:05:68:74:5f:5a:61:aa:1c:14:43:e8:9a:39:a7:
b2:60:41:04:ab:df:d5:67:6c:63:68:65:85:ed:ae:
9a:6d:e4:69:0e:0f:74:ee:b7:48:19:b9:8f:ef:db:
4b:5c:82:33:b8:3d:b9:f3:71:84:5e:94:fb:ab:c4:
86:8c:fb:cc:bc:ec:c5:a2:66:ae:9e:67:9f:97:5f:
80:f7:ae:0b:25:cb:fd:2b:08:f7:25:59:c1:90:12:
bd:0c:43:64:bc:70:3d:1e:9b:1f:34:ed:c1:93:00:
18:86:82:94:13:9a:61:48:54:23:56:64:e7:9a:bb:
75:a0:7a:1e:38:9a:ab:fc:6e:32:f6:90:17:94:26:
4f:48:05:77:4a:1d:44:a2:4c:84:bd:0e:10:96:17:
3a:a6:0c:56:c0:ff:f1:5c:60:cf:45:ba:a0:81:3f:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:8C:73:F6:DB:BF:77:0A:C3:22:0D:3E:A8:CE:A3:6A:7C:6C:3E
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/TSSMc_bbv3cKwyINPqjOo2p8bD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.200.0/22
185.7.252.0/22
IPv6:
2a03:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:cd:04:61:82:1e:f9:30:69:2d:37:29:e4:82:b9:1b:0a:d4:
47:97:c3:2e:83:89:72:25:ec:a1:a5:e7:0d:78:05:7e:09:09:
38:3d:f5:89:c8:a9:1d:c2:e7:ac:56:9d:8d:86:d3:4d:e0:c7:
f0:3e:06:5b:3b:66:a0:2e:c3:e3:d1:17:ee:4d:6f:d4:7a:ac:
11:d7:6f:f8:6f:57:1f:24:8a:17:bf:a4:21:01:4f:39:b0:03:
82:70:e1:d1:dd:c7:c4:a4:0e:0e:a4:3a:62:70:f6:a5:48:60:
cb:4c:82:39:37:22:c4:1c:93:5e:ee:bb:4c:b5:37:fd:82:54:
d6:a7:b1:d3:da:c8:ed:c2:23:0c:6e:e5:9e:87:5e:02:ff:bc:
fc:e1:6f:54:e6:02:e0:b9:24:ce:db:56:1f:fd:4c:7e:8d:a7:
b5:75:0e:7e:16:08:14:37:64:f2:55:e5:3d:f5:04:21:71:46:
fe:3a:aa:7a:54:1d:21:00:61:49:43:34:9c:02:25:a3:bd:32:
c2:99:82:22:90:06:c9:ab:9b:2b:24:e0:74:88:31:23:56:bb:
08:cc:27:0c:ec:63:f3:e8:50:9d:ef:16:e6:73:78:c9:ca:fa:
49:62:c4:b7:80:67:a1:5b:cf:0f:ac:04:b0:6f:95:b4:ef:5e:
32:e1:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:12 2025 by rpki-client