Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Tzvk-2ICQyV5ArKLcAo7gzsLsnE.roa
File: Tzvk-2ICQyV5ArKLcAo7gzsLsnE.roa (raw, json)
Hash identifier: RsG0ahVIKl5yQBdZgKP7EAoln3VO+vX90zCTp8yFXMI=
Subject key identifier: 4F:3B:E4:FB:62:02:43:25:79:02:B2:8B:70:0A:3B:83:3B:0B:B2:71
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0691BB89
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Tzvk-2ICQyV5ArKLcAo7gzsLsnE.roa
Signing time: Thu 10 Feb 2022 18:13:38 +0000
ROA not before: Thu 10 Feb 2022 18:13:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.66.203.0/24 maxlen: 24
185.66.202.0/24 maxlen: 24
185.237.4.0/24 maxlen: 24
185.237.5.0/24 maxlen: 24
185.237.6.0/24 maxlen: 24
185.237.7.0/24 maxlen: 24
82.115.214.0/24 maxlen: 24
2a07:e3c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110214025 (0x691bb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Feb 10 18:13:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f3be4fb620243257902b28b700a3b833b0bb271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:31:77:41:af:91:c1:8c:f2:72:47:ed:4e:
af:a4:ce:41:5c:4e:5b:bb:b7:ec:3f:c0:08:e0:88:
14:99:9d:bb:67:87:14:eb:8d:a2:3b:69:49:00:f3:
2c:8f:53:67:ec:ce:f0:80:12:03:30:90:ad:b7:0e:
f7:48:01:bb:6d:83:92:ad:d0:f3:b3:cd:92:9c:5f:
91:53:03:f2:4c:b9:7d:6e:61:e3:8d:ac:0a:c6:e8:
31:51:dc:d7:e3:10:d5:3c:2c:a4:ff:82:0d:0f:d1:
48:56:f8:96:3b:0e:a7:e1:c2:12:75:c4:e0:c8:71:
b7:a3:9e:07:53:97:a6:90:b5:34:e8:e0:dc:3f:20:
9e:a7:9e:f5:f4:a0:54:e9:5a:81:30:12:02:b3:00:
ad:71:d8:a1:ca:60:18:55:7f:bb:69:22:d1:fb:0b:
c1:fe:72:12:38:46:73:08:c4:67:46:06:29:11:94:
b8:b0:81:55:4f:b1:a7:41:61:6c:79:c2:41:40:15:
0a:87:06:f9:25:bd:38:d1:4d:a2:79:79:94:a1:a9:
39:8c:df:7e:ba:e7:13:53:95:38:83:b6:e4:35:7d:
9f:0a:06:dd:ea:3e:0f:59:b2:d0:ce:b9:7c:f8:ca:
b7:ee:ca:ed:a7:0e:04:60:41:67:b4:3e:1d:18:89:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:E4:FB:62:02:43:25:79:02:B2:8B:70:0A:3B:83:3B:0B:B2:71
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Tzvk-2ICQyV5ArKLcAo7gzsLsnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.214.0/24
185.66.202.0/23
185.237.4.0/22
IPv6:
2a07:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
91:f5:13:ac:9a:3f:27:e8:e4:c2:5f:92:83:25:ae:20:33:b8:
5e:9e:07:1c:81:5f:cf:33:32:a9:89:b8:63:15:77:af:3a:79:
be:41:9a:bd:75:11:d8:7d:34:53:b5:60:df:d1:6b:9c:c6:0e:
1e:c9:d3:b5:08:7f:04:36:3b:1d:71:e1:26:f6:b7:5d:a1:8e:
27:69:f2:c3:9f:a3:2e:be:47:b7:ce:71:dc:3f:41:6b:8f:a0:
a8:e4:79:7c:77:87:db:79:e2:14:66:d5:24:ed:99:5f:b6:bc:
1b:7b:29:88:cb:e7:fb:0f:13:8b:59:09:30:4f:29:8b:31:b6:
be:7f:06:68:36:f8:da:c4:83:46:bf:4f:1e:02:db:fa:71:27:
1b:dd:94:4a:b0:e6:27:1c:4b:b5:36:bd:d7:3b:c7:96:09:de:
c2:09:4e:8f:f1:08:a1:60:67:f8:c9:3a:2f:06:52:79:a1:29:
a8:41:18:7b:f3:8c:d0:e6:2b:ba:3e:09:97:ab:26:5a:f0:71:
b9:20:32:0b:22:10:e7:c5:27:10:ac:38:1e:07:74:e9:d4:0d:
65:09:b6:28:de:bb:1b:c7:7c:68:1a:90:e7:d7:76:5a:36:05:
94:47:a5:65:17:84:cb:cc:e2:af:17:95:7e:de:f9:90:4c:f4:
2d:ce:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org