Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Tgw6cdJ-7j8F1AgSQ1gP1TQcF0k.roa
File: Tgw6cdJ-7j8F1AgSQ1gP1TQcF0k.roa (raw, json)
Hash identifier: YHBWIFxz5ot6EOwM+5T3a898GsTfCFaHfsNEXqf3R2E=
Subject key identifier: 4E:0C:3A:71:D2:7E:EE:3F:05:D4:08:12:43:58:0F:D5:34:1C:17:49
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 35A63A07
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Tgw6cdJ-7j8F1AgSQ1gP1TQcF0k.roa
Signing time: Sat 01 Jan 2022 08:54:58 +0000
ROA not before: Sat 01 Jan 2022 08:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60413
IP address blocks: 80.79.249.0/24 maxlen: 24
80.79.249.7/32 maxlen: 32
80.79.249.6/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900086279 (0x35a63a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 08:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e0c3a71d27eee3f05d4081243580fd5341c1749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:6e:ec:07:b7:8d:cc:c3:5a:3d:a8:ff:a3:
b5:5c:74:b0:76:b5:c9:1b:27:98:fc:e9:84:cc:7a:
e6:cb:31:a2:10:fe:de:29:2f:06:e6:ed:b5:43:58:
db:38:93:fa:46:cd:a7:be:23:59:69:94:7d:95:dc:
f7:15:5c:e4:2f:06:32:fc:45:a9:72:cc:89:94:17:
77:7a:7c:79:8d:88:9e:1a:6e:03:2d:99:be:d3:81:
40:09:54:be:84:4f:82:e1:71:58:04:dc:33:58:cf:
8d:07:e0:10:7e:9e:61:7f:41:19:95:0d:be:f4:95:
98:a6:b8:ac:30:65:1a:f8:81:09:a9:23:03:bd:c7:
62:ad:ab:6b:ef:2d:1c:f1:29:5c:cb:b7:a8:2c:c7:
4c:83:fa:3d:44:03:bd:32:30:99:09:e5:67:d8:be:
74:47:69:10:73:41:6d:75:84:9c:1c:59:cd:2a:f5:
c3:8a:ce:c1:92:99:ae:ed:a4:84:b6:89:c9:c9:a8:
21:99:8f:4d:96:93:10:25:1b:f7:e7:53:48:13:c2:
a5:44:fc:c5:5a:ae:98:05:1b:30:0a:f2:bb:e7:3e:
53:a9:7a:bb:5a:77:8f:bb:97:fb:6e:7f:18:bb:aa:
e6:75:54:c0:a4:bf:97:71:15:b9:f2:05:49:5d:89:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:3A:71:D2:7E:EE:3F:05:D4:08:12:43:58:0F:D5:34:1C:17:49
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Tgw6cdJ-7j8F1AgSQ1gP1TQcF0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8f:3c:24:70:83:71:04:40:4c:fe:1d:84:70:23:2b:7a:db:
ab:41:cc:e5:4d:ed:89:0e:ed:66:a2:0c:e7:a8:b0:76:a2:85:
a7:cc:86:f2:88:78:dc:6e:1c:51:e5:21:03:2d:5b:04:3a:ce:
bf:11:0f:27:98:3d:12:00:b2:8b:cf:7d:e0:b5:b5:46:19:4e:
92:29:fe:dd:5f:0c:12:38:4d:bb:c9:a7:ef:d3:20:c6:fe:da:
4f:1c:9e:bb:7a:c3:e1:48:35:67:08:25:2e:86:b4:f8:d4:88:
11:27:cb:17:e7:df:04:68:af:29:78:53:51:90:95:19:54:78:
1c:33:37:f4:66:31:53:a6:20:59:fb:29:a9:ea:77:b6:73:94:
83:24:14:cb:1a:f4:d5:75:5c:3f:a3:a8:74:bb:38:26:a2:13:
31:eb:e2:ee:04:10:be:a2:41:41:6d:bb:6f:31:42:07:1b:fd:
cb:f8:a7:23:25:5f:65:c0:cc:05:bf:50:44:0f:2c:6a:5c:82:
b8:04:0e:26:2e:1c:9d:27:e7:fe:81:ed:25:88:f5:b9:86:b2:
d0:7f:d4:9a:41:75:a7:80:98:48:78:3f:bc:c6:e7:c9:3f:76:
17:96:d9:bd:e7:0a:1c:93:c4:1b:16:f9:32:d0:f8:ed:7a:a9:
47:b4:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:04 2025 by rpki-client