Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/TjGpZcZPEA8eZRLc1VjUH5tsKuQ.roa
File: TjGpZcZPEA8eZRLc1VjUH5tsKuQ.roa (raw, json)
Hash identifier: 7X/gqjArnNNgfLKRvfXUw2hT2nZOQzu9m2iyejAd4+Y=
Subject key identifier: 4E:31:A9:65:C6:4F:10:0F:1E:65:12:DC:D5:58:D4:1F:9B:6C:2A:E4
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 018B5D5BE8AED244915EC38BF37663B173C4
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/TjGpZcZPEA8eZRLc1VjUH5tsKuQ.roa
Signing time: Mon 23 Oct 2023 16:26:26 +0000
ROA not before: Mon 23 Oct 2023 16:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59462
IP address blocks: 185.22.231.0/24 maxlen: 24
185.150.16.0/24 maxlen: 24
2a0e:d487:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:5b:e8:ae:d2:44:91:5e:c3:8b:f3:76:63:b1:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Oct 23 16:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e31a965c64f100f1e6512dcd558d41f9b6c2ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:f0:34:9a:a9:53:85:7c:7a:a7:40:b6:a6:
e0:f4:03:b0:bd:b3:9e:9d:e0:ce:09:d5:d8:61:ae:
f7:2e:23:2a:7e:14:28:99:2e:aa:3c:7b:7e:d3:67:
60:6f:00:34:60:d2:33:4d:a8:88:3f:8b:c8:8e:f3:
e6:d6:4b:a3:3b:7f:1d:43:8e:2c:9d:0a:6f:f0:3a:
5e:04:50:6b:91:c3:be:4c:73:5e:e8:04:10:c5:1b:
13:38:14:b0:17:20:4d:b9:61:06:30:54:9f:65:d9:
98:a8:fd:6c:3f:c5:94:29:ef:d8:fe:b9:03:cb:da:
22:f9:30:80:37:2d:55:7c:65:f5:9b:b3:d2:9c:ee:
ee:e0:f1:82:93:86:0c:de:6c:6b:3f:0b:1c:6c:83:
26:01:a1:a5:39:1f:c6:ad:50:ff:a0:73:28:94:c0:
e8:e3:86:bc:15:de:7f:21:d7:a6:b5:eb:a2:0b:56:
63:68:74:fc:f0:da:88:17:17:df:9e:a4:bd:40:a1:
ad:76:4b:e0:23:c1:50:61:97:cd:d7:4e:15:ff:5e:
40:52:19:22:10:27:24:63:14:b1:07:e2:e0:e7:53:
dd:73:fa:69:ac:cb:f0:25:77:6b:6e:17:7a:41:2f:
07:a2:01:4c:50:ad:6b:18:73:03:f1:7a:03:a5:81:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:A9:65:C6:4F:10:0F:1E:65:12:DC:D5:58:D4:1F:9B:6C:2A:E4
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/TjGpZcZPEA8eZRLc1VjUH5tsKuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.231.0/24
185.150.16.0/24
IPv6:
2a0e:d487:f000::/48
Signature Algorithm: sha256WithRSAEncryption
55:33:50:b7:49:06:d3:46:b3:20:5e:cd:5c:dd:02:d0:61:6e:
dc:af:24:03:6c:55:8f:08:fe:fb:c9:0a:5f:8b:fa:c3:2a:7a:
d2:c3:b6:8b:f8:0f:56:77:92:69:26:61:23:b9:9c:3f:c2:f2:
2f:d8:dc:86:2f:d8:69:b2:3d:9d:01:51:fe:e6:b4:ca:fd:7a:
d7:03:73:50:6d:fa:7d:f0:0b:42:53:de:66:11:b5:8c:46:50:
da:aa:16:db:19:15:2a:9b:6c:c9:c6:d7:3b:de:63:0a:37:be:
9c:5e:1d:be:c3:3c:ed:de:84:3e:12:74:c9:cd:00:07:3f:df:
37:a5:0f:36:06:4a:71:2a:16:73:42:03:00:ec:4d:64:a3:14:
3d:05:b9:cc:42:8c:7d:38:83:ac:df:9a:e0:80:69:e8:58:ed:
ed:4d:80:e6:e0:b5:c5:30:e7:c6:97:8b:47:f2:47:91:55:5a:
ca:8b:4f:68:a1:b9:b4:11:8c:89:7a:83:ac:78:0e:76:09:6a:
4d:40:69:e0:e1:5b:c0:72:9c:c1:48:20:74:b3:66:14:6e:b4:
9f:e1:9e:3a:1b:76:33:30:d6:4c:c0:93:f2:fb:c5:57:5b:59:
35:1f:ab:14:5f:52:5e:e6:53:e4:c2:e2:ef:b2:52:09:b7:23:
b1:d7:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:43 2025 by rpki-client