Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/TPzplkFFfXMEd_pJd_u3uVhWnt4.roa
File: TPzplkFFfXMEd_pJd_u3uVhWnt4.roa (raw, json)
Hash identifier: qZLhYHonBIjOyOnK+4huY0xUQMueYgn937dXkyo90UA=
Subject key identifier: 4C:FC:E9:96:41:45:7D:73:04:77:FA:49:77:FB:B7:B9:58:56:9E:DE
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 018571152B9E4549AFEA0E96AE41E042DD10
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/TPzplkFFfXMEd_pJd_u3uVhWnt4.roa
Signing time: Mon 02 Jan 2023 06:04:50 +0000
ROA not before: Mon 02 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197157
IP address blocks: 178.249.136.0/21 maxlen: 21
178.249.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2b:9e:45:49:af:ea:0e:96:ae:41:e0:42:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jan 2 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfce99641457d730477fa4977fbb7b958569ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:8d:70:89:cf:06:60:d8:62:bf:52:50:7b:
96:13:45:3c:63:d5:37:da:c1:11:35:b1:6a:f1:ca:
03:63:4f:33:52:df:e2:6f:56:13:38:ec:80:f5:b1:
8f:d5:ed:7c:84:cb:65:37:e9:c7:09:a4:62:2a:e9:
68:a4:b7:1c:53:e6:73:0e:68:75:21:f2:3d:2e:77:
c6:fa:96:3a:6b:05:10:41:e0:20:aa:a2:80:f2:af:
be:30:ad:0f:94:cd:29:a9:d7:7d:3c:a6:e6:99:1d:
93:17:46:68:3a:d6:dd:57:04:dc:85:10:38:b3:35:
9b:d1:26:13:2b:6c:7b:62:9a:1a:e8:e4:52:54:02:
b8:4f:42:cf:42:2a:6e:db:7f:e5:86:6a:89:17:00:
79:dd:67:3c:b5:cf:54:00:af:99:c0:73:f6:3c:c3:
80:01:e1:8e:96:27:09:bc:6e:68:46:76:40:2c:d5:
e5:05:4f:6b:cf:97:a2:c2:f4:22:a0:59:48:b2:59:
4e:95:8f:09:a5:80:08:9f:66:d4:ba:79:44:71:21:
f7:8a:1b:0f:14:32:42:9b:89:52:3f:41:ed:ae:3c:
00:7a:dc:9a:4d:e9:53:b4:63:af:bb:a2:cc:a7:af:
70:f4:cc:bc:9b:7e:a5:8f:54:db:fa:e1:b0:91:f6:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:E9:96:41:45:7D:73:04:77:FA:49:77:FB:B7:B9:58:56:9E:DE
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/TPzplkFFfXMEd_pJd_u3uVhWnt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.136.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:1d:51:1a:18:fa:39:71:f9:67:03:c8:9c:e6:30:bc:61:77:
ce:00:dd:f5:74:08:17:a7:eb:4e:d7:4b:a5:55:ed:0f:db:bc:
f0:e4:8e:88:42:d3:02:48:08:b9:9c:8d:07:84:31:63:ae:57:
7d:7a:ba:e5:7d:87:e8:0d:58:41:97:ca:33:a0:f7:cc:f9:18:
95:53:47:9f:49:61:6f:d1:ab:87:98:b9:d1:38:60:b1:f9:e8:
47:b3:8c:bd:07:2e:59:26:f3:ca:b2:55:09:d0:b5:71:2c:4b:
d2:af:b3:4b:65:9f:2e:07:74:cc:29:61:62:e3:b9:fc:70:a9:
cb:52:31:f5:93:e7:ae:65:30:84:a2:5c:a5:eb:e5:46:a0:a5:
ad:94:90:d4:36:d9:36:d9:46:25:0e:7a:c3:64:70:f7:45:8a:
72:5e:c4:74:e6:7c:4b:43:e8:8a:8b:52:18:79:98:06:a1:bc:
94:da:15:87:5f:bd:32:96:7d:2f:f1:f3:bb:4b:7b:6c:da:85:
15:ed:79:dc:9f:03:bd:75:9f:d3:e0:2f:c1:29:a4:b3:1a:1e:
bd:91:3c:2c:05:f4:b8:a2:13:dd:88:40:2e:db:fc:b8:da:40:
d9:6a:a0:48:7e:ae:80:ef:5a:8b:49:34:09:3f:45:ab:33:22:
d7:f3:17:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:59 2025 by rpki-client