Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/tlrMm9LXBS9nGHZsV3ptTO8nhGw.roa
File: tlrMm9LXBS9nGHZsV3ptTO8nhGw.roa (raw, json)
Hash identifier: H9rsliUqmcJJf53d36TInEcyf8rmjaCltRabxyrf8eg=
Subject key identifier: B6:5A:CC:9B:D2:D7:05:2F:67:18:76:6C:57:7A:6D:4C:EF:27:84:6C
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 01856CE5F3F14AB1A446CCA4951506EAC577
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/tlrMm9LXBS9nGHZsV3ptTO8nhGw.roa
Signing time: Sun 01 Jan 2023 10:34:47 +0000
ROA not before: Sun 01 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51048
IP address blocks: 185.83.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:f3:f1:4a:b1:a4:46:cc:a4:95:15:06:ea:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jan 1 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b65acc9bd2d7052f6718766c577a6d4cef27846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:4e:3b:3d:63:67:63:c2:71:6e:df:a5:4f:
22:83:1d:cb:4e:7f:f8:f3:29:0e:da:bf:47:bd:b6:
34:03:9e:66:9b:41:51:e3:17:e9:5a:7c:fc:86:20:
12:6f:f2:d4:18:86:02:0b:42:fd:19:4c:f1:2d:63:
a1:eb:4f:49:91:a5:a9:79:5c:c8:d0:04:7c:21:4a:
c9:5b:c2:d8:42:79:d7:6a:e1:92:3f:cf:2f:3f:95:
a7:2c:bb:e2:f6:b6:80:9b:24:3f:35:31:c7:61:37:
14:9f:a9:9d:a5:a0:72:da:6e:6a:ce:da:47:64:8d:
6b:86:cb:a7:59:aa:a1:58:ca:70:9a:17:f6:c5:2f:
4c:e3:8d:aa:7a:3d:0e:ee:06:7b:30:50:5f:a1:06:
6b:ed:fc:ec:ae:c6:d0:5f:cf:d4:20:cb:96:c4:17:
9a:56:bf:6b:2d:33:f4:be:8d:cc:22:0e:30:ae:ae:
18:66:4a:76:82:d8:81:58:16:26:a9:42:83:54:8b:
ea:7c:df:49:b9:8f:ab:c6:d4:2c:0f:02:b9:2e:da:
79:c3:ca:fb:9c:15:19:8d:97:f4:cc:9c:c7:87:38:
2c:dd:ed:99:5b:8f:5d:9b:86:bd:1b:5b:39:25:d6:
ad:43:4f:63:b5:97:ad:b4:eb:62:55:e6:81:46:a5:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:CC:9B:D2:D7:05:2F:67:18:76:6C:57:7A:6D:4C:EF:27:84:6C
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/tlrMm9LXBS9nGHZsV3ptTO8nhGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:c9:aa:ae:df:30:26:f2:fa:8e:f2:35:8f:e4:fe:e3:a7:c3:
73:71:db:fd:e0:8b:ff:b1:19:82:0f:35:6d:36:e9:63:86:e0:
48:55:07:3e:7c:72:08:95:8e:1e:7f:15:d3:32:1d:a3:11:c1:
be:eb:71:99:3f:be:ee:b3:ed:b4:22:a9:84:25:3f:d5:f7:4d:
be:18:cd:88:12:5f:f2:5f:a8:fe:94:85:d2:20:b3:b6:b4:f2:
65:08:70:06:43:17:b8:38:fc:ab:af:8f:0f:68:b3:b6:b6:55:
ec:07:04:db:5f:be:47:7c:31:fd:65:a5:00:cf:7e:78:a2:49:
4c:fd:72:86:90:be:ff:69:c5:45:fd:12:aa:07:8f:55:01:d7:
6f:d8:13:07:2b:75:db:ff:25:25:57:a4:7d:ea:e3:78:0d:91:
30:ea:6d:a8:90:89:7a:c3:c9:40:d9:87:ec:50:54:8a:92:3d:
63:ba:83:16:3d:13:c6:fe:f6:da:23:a3:c8:aa:42:6f:29:60:
5a:fd:77:19:12:e4:b5:33:79:0a:70:65:e6:65:95:a2:83:f3:
9f:82:21:6a:0c:22:2b:1c:05:27:fa:ae:86:70:8a:38:7f:cf:
7e:bb:e2:23:25:63:05:a3:48:1a:bc:bf:39:1f:af:5e:88:33:
cf:b9:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:29:06 2025 by rpki-client