Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tq4_--zY_s9hhu3dbNxP4KSzmAA.roa
File: Tq4_--zY_s9hhu3dbNxP4KSzmAA.roa (raw, json)
Hash identifier: BDWcdbaHuBSR8DRiGfE0/sOz6Jb3u9tZ/0bZeYJSSjk=
Subject key identifier: 4E:AE:3F:FB:EC:D8:FE:CF:61:86:ED:DD:6C:DC:4F:E0:A4:B3:98:00
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0182E68458DE9B6E132361D9EA87A77A88A2
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tq4_--zY_s9hhu3dbNxP4KSzmAA.roa
Signing time: Sun 28 Aug 2022 22:13:29 +0000
ROA not before: Sun 28 Aug 2022 22:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202777
IP address blocks: 185.124.149.0/24 maxlen: 24
185.124.148.0/24 maxlen: 32
185.124.150.0/24 maxlen: 24
185.235.141.0/24 maxlen: 24
2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e6:84:58:de:9b:6e:13:23:61:d9:ea:87:a7:7a:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Aug 28 22:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eae3ffbecd8fecf6186eddd6cdc4fe0a4b39800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:83:26:43:e8:91:6c:fe:fc:73:15:95:8d:
c8:83:62:e1:20:c3:95:79:f3:3b:28:31:a5:57:7d:
17:5b:e7:9e:e0:cd:a8:7f:80:af:80:09:5e:15:53:
f1:26:8f:f8:6a:55:4d:6f:65:29:d3:82:a3:0e:6b:
9c:af:7b:e8:46:92:69:58:1e:b9:57:f1:45:14:b1:
81:aa:21:fa:7b:85:5d:71:d6:23:65:4f:a4:3b:6e:
d5:e2:34:f1:8a:9d:10:23:a8:92:ff:1f:ee:81:96:
27:fe:e5:4f:f8:15:d9:ff:69:7a:bc:3c:6e:40:8b:
fa:32:06:e2:7f:35:6d:9c:7d:c7:a9:74:36:d0:3b:
fe:0b:0a:fd:1d:73:5d:f2:fd:c2:a7:ee:1c:5f:70:
37:06:41:06:17:3f:3a:f7:35:94:ad:a7:d1:1b:75:
ab:a0:f9:8f:7d:f6:dd:8e:77:31:c7:84:6a:3d:77:
65:52:46:9f:89:7a:59:eb:6f:c2:56:3b:f4:d0:11:
8e:2a:4c:16:a7:d3:0a:fa:70:0a:8c:f8:c0:41:8d:
7c:80:52:1e:ef:eb:09:d8:9c:17:b9:51:37:0a:0f:
f5:35:13:d6:63:8c:b8:72:f9:0a:f2:14:7e:34:c6:
a4:1d:4c:53:18:c9:69:7c:c2:78:4b:f4:2c:a2:1b:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:3F:FB:EC:D8:FE:CF:61:86:ED:DD:6C:DC:4F:E0:A4:B3:98:00
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tq4_--zY_s9hhu3dbNxP4KSzmAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0-185.124.150.255
185.235.141.0/24
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
af:52:4d:02:1e:f9:6e:35:fc:43:c6:8b:71:e8:e2:f2:09:46:
08:63:69:7b:85:a4:e0:51:1c:f4:a5:ef:20:c5:10:c7:2d:8f:
14:12:5d:3d:fc:1f:51:29:9b:0c:42:19:8b:6a:40:c0:f8:80:
46:94:de:60:7f:32:81:a2:2c:08:d5:22:74:34:81:86:43:3b:
dc:50:dd:5f:08:1b:53:b5:65:56:93:ad:45:f3:26:ef:10:74:
9c:1a:a6:5a:a3:ca:99:f1:00:a5:5f:ed:58:17:7e:05:94:49:
1d:42:af:6f:50:f0:c5:42:3e:c0:b5:ff:70:65:b4:89:6b:d5:
af:58:b6:80:1b:55:bf:6e:9b:67:d0:cc:f3:7c:ee:56:52:8b:
16:2f:2a:27:29:90:d1:e3:61:34:2e:7a:1d:24:b2:74:b2:40:
ce:fc:d3:8e:70:8c:0e:31:4a:fb:42:3d:29:34:e3:5b:3a:96:
e4:99:9e:75:6b:ca:99:02:e0:c6:c9:52:f4:1a:64:bf:d5:7b:
12:6d:40:03:ca:a7:27:41:13:f4:df:14:3d:c9:be:a7:b1:ba:
3d:ec:c4:31:03:07:e1:d0:b6:9e:ae:55:bf:fa:8b:7c:3f:60:
0e:54:3c:8f:63:fa:c4:b6:2c:37:47:fd:5b:f2:a1:8c:4f:21:
0a:74:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org