Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/PXdVJPD5ti_4Fx8EZ77tDfJ_ilE.roa
File: PXdVJPD5ti_4Fx8EZ77tDfJ_ilE.roa (raw, json)
Hash identifier: skGKztspwWiqQ29RynIIFtRF4cMU6M0fgPSOQbaTUGI=
Subject key identifier: 3D:77:55:24:F0:F9:B6:2F:F8:17:1F:04:67:BE:ED:0D:F2:7F:8A:51
Certificate issuer: /CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Certificate serial: A1435C
Authority key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/PXdVJPD5ti_4Fx8EZ77tDfJ_ilE.roa
Signing time: Sat 01 Jan 2022 00:56:23 +0000
ROA not before: Sat 01 Jan 2022 00:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25471
IP address blocks: 185.104.253.0/24 maxlen: 24
185.104.252.0/24 maxlen: 24
185.104.255.0/24 maxlen: 24
185.104.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10568540 (0xa1435c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Validity
Not Before: Jan 1 00:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d775524f0f9b62ff8171f0467beed0df27f8a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:49:aa:60:5d:cc:eb:9e:e6:70:a4:df:0c:
74:9c:e7:5f:c8:a0:07:b1:e0:00:70:1f:d4:7d:0c:
b5:91:18:b9:5a:63:d7:02:f4:3b:b7:10:34:aa:b7:
b5:2e:5c:91:f5:b2:a9:6a:72:b1:d7:a6:98:60:eb:
21:85:1a:54:87:20:56:0b:3a:bc:d2:58:d7:3f:55:
1d:88:ea:ab:b5:3b:5c:2e:a0:d4:3e:5b:82:84:60:
3f:56:d8:40:2f:5e:57:a6:7c:0d:78:20:8a:78:b8:
67:7e:a5:2b:ce:a0:a3:39:34:c8:d4:c0:07:eb:40:
fd:bd:92:0a:5f:4b:b9:9c:0e:4f:5a:7a:d2:0e:ee:
1a:32:7a:d6:c9:bc:7f:dc:20:c4:f1:6d:ef:b9:70:
5b:e0:cd:16:09:b8:58:e1:14:d3:59:fa:a3:12:5a:
c5:2a:bd:1c:4b:7e:01:7e:ba:43:05:24:0e:b6:82:
71:4b:d2:d7:40:9a:58:ba:b9:de:00:ec:a0:88:0e:
eb:a1:1d:31:0b:e0:a2:46:db:9a:b9:c7:27:70:17:
6b:22:b6:0a:ee:2a:64:ca:91:fa:61:cf:11:a7:60:
f8:f4:34:3e:4c:52:22:df:c6:21:17:8b:8e:cc:1b:
ed:6d:6c:19:74:dd:99:27:e3:94:7f:76:52:96:54:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:55:24:F0:F9:B6:2F:F8:17:1F:04:67:BE:ED:0D:F2:7F:8A:51
X509v3 Authority Key Identifier:
keyid:B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/PXdVJPD5ti_4Fx8EZ77tDfJ_ilE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:55:3e:94:41:17:25:88:68:36:ab:94:6d:f1:11:36:24:fe:
75:c8:70:1f:fb:59:d4:28:94:2f:cc:d6:1b:cb:70:eb:eb:a7:
0f:c3:c6:46:d6:1a:f4:5e:28:0f:ae:b1:6c:42:9a:c0:6a:dc:
6d:4c:14:73:67:dc:4d:cf:76:0b:95:f4:9d:31:ef:91:e9:0d:
d1:48:35:8e:ea:c9:7a:90:20:80:f0:fd:26:60:68:cb:7c:f3:
9c:b0:bd:02:31:16:0d:a0:f4:79:13:d7:32:db:54:75:d7:a8:
8a:de:be:94:e8:1f:60:42:96:80:33:c9:9b:7c:2d:22:de:4c:
cd:50:79:3b:e8:42:a1:4b:99:c9:07:19:69:76:9e:f7:26:eb:
10:1d:4b:d7:66:dd:2f:0b:2f:aa:dd:01:d4:6c:d1:f5:bc:1b:
2c:c5:58:94:97:09:f5:2a:67:88:c9:e5:68:7c:79:97:1e:ca:
5f:9d:e8:df:c0:65:00:a5:ee:9e:86:72:1e:cb:65:5e:15:62:
91:eb:dc:5e:2c:98:02:75:66:b5:d7:ae:13:bd:71:d0:97:43:
81:2b:c4:d6:e5:09:65:8d:eb:a3:a7:58:cb:21:95:ab:4d:dd:
21:3b:c9:47:01:eb:47:62:e3:4a:99:45:34:2e:4c:42:e9:15:
04:be:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:49:07 2025 by rpki-client