Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/t-TANS_eQIdiL4Dm4SAMAO8rHhk.roa
File: t-TANS_eQIdiL4Dm4SAMAO8rHhk.roa (raw, json)
Hash identifier: Z3sY8Rj3ZaTPbkfpygoQess4U+XoyZciucr35R21pE4=
Subject key identifier: B7:E4:C0:35:2F:DE:40:87:62:2F:80:E6:E1:20:0C:00:EF:2B:1E:19
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 018571277A3CD1A880D1B47A682C40BE0A10
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/t-TANS_eQIdiL4Dm4SAMAO8rHhk.roa
Signing time: Mon 02 Jan 2023 06:24:50 +0000
ROA not before: Mon 02 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200189
IP address blocks: 185.108.37.0/24 maxlen: 24
185.108.36.0/24 maxlen: 24
185.108.36.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:7a:3c:d1:a8:80:d1:b4:7a:68:2c:40:be:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 2 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e4c0352fde4087622f80e6e1200c00ef2b1e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:21:5f:3b:77:2a:80:46:eb:9d:99:ae:03:
d7:22:0c:35:dd:42:34:65:47:25:bc:a5:46:db:31:
5c:32:cf:0a:53:75:92:f3:d8:b7:42:d6:20:d3:38:
6d:2d:a7:53:a9:f9:70:bd:d3:f6:81:9b:9e:25:b0:
a1:1a:a8:6c:b4:60:b0:60:35:d8:df:2d:f4:1c:a9:
d2:a7:2f:06:e5:b6:0e:ce:f4:a4:84:75:da:0e:20:
40:c4:dc:b1:1a:08:7f:34:84:0a:c8:84:c2:ef:93:
34:08:95:4b:fb:11:f9:b9:ac:b9:c9:1c:51:2e:a5:
4e:d2:c4:f7:89:0c:43:31:20:7e:09:fe:9f:99:68:
e6:26:98:cd:64:d9:fc:66:05:b7:39:26:77:cb:f6:
ff:bd:27:96:fc:ca:3b:3c:29:11:c4:34:41:86:aa:
66:51:de:d8:1f:73:8b:98:6c:ae:3a:1e:7b:e0:67:
68:2a:f4:e2:d4:ad:06:1f:18:5d:d7:c4:3e:39:c4:
fc:b7:d9:7f:50:6b:20:ad:90:e6:26:b3:25:da:0f:
dd:0b:69:ae:c6:1d:7d:5d:19:8a:09:62:5a:d3:69:
00:cc:ec:76:2b:85:ae:f9:46:17:25:41:80:91:43:
14:99:8f:74:54:98:a1:37:f2:e9:7f:b9:9e:77:9e:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E4:C0:35:2F:DE:40:87:62:2F:80:E6:E1:20:0C:00:EF:2B:1E:19
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/t-TANS_eQIdiL4Dm4SAMAO8rHhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ab:f4:3f:8b:c9:08:ce:8b:fe:96:26:60:44:7a:c5:e9:c2:
88:2d:10:21:58:07:9f:85:39:23:08:1c:da:0b:89:99:fc:14:
c3:6d:83:fd:26:dd:23:c1:e2:a1:3e:79:63:dc:a4:9a:ab:ca:
24:03:ca:91:10:fd:8a:a4:8f:b0:e3:46:79:61:ad:6e:fa:d3:
4b:fe:b2:99:5b:77:8a:87:a2:b7:5b:b1:73:c8:0f:ab:19:6b:
1d:a5:d5:41:27:43:98:62:0a:e6:d5:2c:94:e5:2e:e9:11:ee:
6d:4c:32:d0:ca:61:16:82:a0:b2:fe:1d:02:0b:65:7c:1d:84:
ab:d6:5d:19:1c:78:8b:88:b2:76:84:3a:b1:ff:d6:4d:b1:12:
c1:43:a9:13:95:49:c4:ec:fb:22:f4:a2:f5:fd:88:56:8a:53:
71:0f:48:0c:98:f5:44:c1:46:90:fa:0b:7c:6c:46:a5:7a:3d:
02:d5:b0:37:e6:8a:1b:68:39:36:bf:83:45:d9:6a:5e:7f:fc:
9c:1d:df:2d:57:17:37:42:cf:7c:c4:d8:7b:3a:48:b2:62:1a:
bf:51:0f:3c:79:b5:1d:75:6a:88:c9:1b:88:12:cc:b9:1b:3c:
a4:02:34:3d:f7:73:b7:b7:06:ab:cc:c6:01:ec:3c:01:fe:c4:
0c:49:53:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:34 2025 by rpki-client