Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/T3QL4Y8xNmcwFSpA-xUoZjRD8_k.roa
File: T3QL4Y8xNmcwFSpA-xUoZjRD8_k.roa (raw, json)
Hash identifier: yUGoUKDcKx9+OACqcRaHmznMr6hOlZ9fsQLrZR/IwFA=
Subject key identifier: 4F:74:0B:E1:8F:31:36:67:30:15:2A:40:FB:15:28:66:34:43:F3:F9
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 35793ED3
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/T3QL4Y8xNmcwFSpA-xUoZjRD8_k.roa
Signing time: Sat 01 Jan 2022 10:55:25 +0000
ROA not before: Sat 01 Jan 2022 10:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20775
IP address blocks: 217.194.224.0/21 maxlen: 21
217.194.224.0/20 maxlen: 20
217.194.232.0/21 maxlen: 21
2a02:22d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897138387 (0x35793ed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Jan 1 10:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f740be18f31366730152a40fb1528663443f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:b5:a4:4d:c3:02:f0:b8:cd:46:f4:2e:b5:
2c:cd:15:d5:17:8e:d5:a9:58:39:4c:6b:5e:1c:f5:
81:b4:38:f0:ae:fb:71:ce:a3:93:d4:0e:ab:85:56:
00:e1:2d:81:72:46:d0:26:7d:22:f2:8a:fb:21:5c:
31:6c:a9:b5:99:aa:27:a1:ae:55:eb:96:53:23:e1:
c9:14:fa:d3:e5:bb:54:87:cf:a5:ff:17:d2:98:74:
88:c7:22:f1:5e:76:d8:0e:9b:0d:53:90:b9:3f:03:
d6:b1:a4:d7:9f:19:51:75:fb:50:13:96:3a:7d:0a:
20:6e:37:ef:dc:d5:27:76:30:ea:1c:50:b6:15:3a:
3c:09:67:f3:90:a9:18:d7:ab:42:e3:82:74:cd:a8:
f2:53:f3:1f:db:fd:c7:fa:44:dd:22:09:1a:da:09:
04:09:e0:f5:61:ef:93:fa:98:b4:02:31:e7:cf:8c:
51:e6:d2:4a:b4:2a:b4:11:bc:6c:0b:59:bc:ce:a6:
3f:43:c4:04:49:84:9c:65:2a:71:1c:59:cd:29:c5:
c4:af:64:0c:7b:e9:aa:38:0b:1d:43:59:6b:52:ff:
59:75:52:2b:3b:c6:69:f8:c0:0b:8f:76:98:9e:46:
98:6e:65:53:39:67:cd:05:d2:ae:aa:24:6d:b7:85:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:0B:E1:8F:31:36:67:30:15:2A:40:FB:15:28:66:34:43:F3:F9
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/T3QL4Y8xNmcwFSpA-xUoZjRD8_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.224.0/20
IPv6:
2a02:22d8::/32
Signature Algorithm: sha256WithRSAEncryption
a5:81:98:06:53:38:cc:23:04:a7:9a:34:b1:21:e8:3e:21:a1:
6e:8c:67:8d:94:57:23:c4:3d:3b:cf:cd:35:8e:96:22:54:57:
ec:e9:13:af:b4:9d:35:2a:5d:e9:c5:52:8d:55:01:b1:cc:f6:
d3:06:a6:97:dc:a4:8c:06:8c:ab:0d:86:d4:47:3a:58:20:36:
59:49:55:46:b1:09:d0:7b:71:2b:f6:12:62:be:a6:49:2d:2f:
67:c2:50:50:14:5c:b5:c6:0a:a7:6d:79:5c:4c:59:43:f0:f2:
48:1d:4a:7f:eb:c7:72:08:ba:bd:d7:2b:71:c1:67:65:49:bb:
9e:00:19:c6:6b:b9:ce:e5:da:36:0b:dc:7a:c1:12:2b:63:77:
b9:fa:67:7a:cf:22:5a:5d:de:e2:67:15:43:8f:13:12:76:9b:
45:46:5b:1a:99:a0:a1:e1:d5:0e:de:13:78:db:75:0e:d5:4f:
9a:0a:f2:f2:77:b6:c3:9c:d6:d1:4b:44:7d:02:02:df:2b:95:
ed:39:0c:fe:fc:f7:5e:d3:eb:c6:c7:80:e7:c5:f7:ec:ef:a7:
26:bf:4a:88:2d:c7:0d:e1:a2:71:fb:07:45:34:1a:79:a1:c4:
28:08:f9:06:47:72:47:83:66:ff:62:ac:d0:34:8d:34:45:14:
48:b8:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:34 2025 by rpki-client