Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/TigUKNPPaJ68a2ddwCVDflWp0CQ.roa
File: TigUKNPPaJ68a2ddwCVDflWp0CQ.roa (raw, json)
Hash identifier: EIhcU/NVSkNv14dJZ51HC6XA+wl6bgZtEs4M1m7rjmM=
Subject key identifier: 4E:28:14:28:D3:CF:68:9E:BC:6B:67:5D:C0:25:43:7E:55:A9:D0:24
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE28EEE
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/TigUKNPPaJ68a2ddwCVDflWp0CQ.roa
Signing time: Sat 01 Jan 2022 12:59:42 +0000
ROA not before: Sat 01 Jan 2022 12:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205513
IP address blocks: 185.190.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266505966 (0xfe28eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e281428d3cf689ebc6b675dc025437e55a9d024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:a0:f3:6e:19:05:bb:5a:8e:0e:fa:66:3b:
ac:1b:56:81:23:7f:97:63:b4:04:2a:5f:f0:38:41:
10:c1:e3:3f:a7:c8:ec:2b:4c:4a:78:ee:c0:cc:10:
83:64:dd:c6:44:f7:eb:0f:47:8c:cb:45:da:af:64:
58:2f:a8:12:75:23:ac:58:48:a4:39:f2:85:15:08:
1a:83:f0:58:70:b3:c2:fe:a6:e1:07:f3:89:eb:bd:
e6:60:05:99:88:fd:4b:df:f8:69:ee:6e:ae:63:94:
d0:a7:f9:8b:8a:fc:63:52:2d:aa:4e:5f:c7:e6:ce:
43:8f:1a:ff:a5:ba:52:5c:60:f5:fc:dc:c6:a5:0b:
1a:ca:4f:e0:6e:81:22:be:c0:37:73:60:33:31:f9:
b0:b6:6f:27:b9:20:80:9c:84:2d:3e:3b:76:c2:da:
1d:0b:56:b1:d0:9c:4e:d9:de:88:cd:69:85:d7:8b:
b8:d1:71:5f:f9:c0:eb:c7:f3:97:a8:af:27:f2:d6:
b8:9d:21:3f:fb:f5:5d:80:de:c1:1b:14:c1:f5:c4:
88:79:e1:55:db:f5:6e:76:4d:c2:ca:a2:16:d2:41:
e5:0c:8d:cf:c9:98:00:ed:0d:a7:f4:72:dc:09:f1:
31:62:4f:2b:51:fe:4b:c4:24:4c:f4:f6:d1:ee:a2:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:14:28:D3:CF:68:9E:BC:6B:67:5D:C0:25:43:7E:55:A9:D0:24
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/TigUKNPPaJ68a2ddwCVDflWp0CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.151.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cf:21:f9:ea:b9:21:8b:de:9d:16:13:e6:03:f6:b9:18:d9:
16:ca:96:b8:dc:43:9f:55:1d:7e:3f:6b:0b:e1:a0:b9:ca:67:
ca:b5:e8:9c:dc:95:3d:a4:14:39:85:a7:76:c0:ac:64:d6:26:
d8:e1:e1:74:08:1a:7b:50:9f:2c:d7:a8:8f:d3:42:8c:4b:df:
19:25:34:b0:4d:90:93:62:f9:26:ed:c3:67:54:da:84:85:d3:
0a:03:84:bd:9e:bd:d8:88:e7:5a:ef:aa:4f:39:37:08:21:f9:
62:15:ab:3b:4f:84:dc:58:96:74:73:22:1b:f5:b6:4f:42:49:
d4:9c:08:76:53:10:ff:98:50:93:c8:d4:c1:46:b4:e3:f4:b7:
e4:eb:48:d8:b0:cc:5f:82:8a:45:80:7f:6a:dc:18:6f:be:39:
e9:b0:66:31:73:bf:c5:79:85:de:c9:3f:6d:7d:9c:c0:4d:57:
57:b2:c1:75:63:b1:94:3c:c0:01:3b:65:53:bc:1c:ce:c8:d5:
0c:5c:4c:0a:27:53:be:01:e1:bf:c7:92:d5:4f:36:de:72:82:
0b:a9:df:c5:d5:fa:bc:f1:5b:4e:e6:9c:a3:72:4a:91:73:ea:
20:55:66:76:e8:80:6e:34:99:90:cf:f2:ff:d2:6a:15:d3:15:
8e:79:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:20 2025 by rpki-client