Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/TIO6RHpykYvOEw9rd9KZ3OBQP1I.roa
File: TIO6RHpykYvOEw9rd9KZ3OBQP1I.roa (raw, json)
Hash identifier: kFmKL6Hztj++Ea/yWCisJx8zO8JC8TA/X+P+Dbtw5Ww=
Subject key identifier: 4C:83:BA:44:7A:72:91:8B:CE:13:0F:6B:77:D2:99:DC:E0:50:3F:52
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01894421C7155748690C53624A81DA898121
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/TIO6RHpykYvOEw9rd9KZ3OBQP1I.roa
Signing time: Tue 11 Jul 2023 08:46:51 +0000
ROA not before: Tue 11 Jul 2023 08:46:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25467
IP address blocks: 82.214.66.0/24 maxlen: 24
82.214.76.0/24 maxlen: 24
82.214.76.0/23 maxlen: 23
82.214.77.0/24 maxlen: 24
82.214.78.0/24 maxlen: 24
82.214.85.0/24 maxlen: 24
82.214.84.0/24 maxlen: 24
82.214.84.0/23 maxlen: 23
82.214.96.0/21 maxlen: 21
82.214.97.0/24 maxlen: 24
82.214.98.0/24 maxlen: 24
82.214.96.0/24 maxlen: 24
82.214.100.0/24 maxlen: 24
82.214.101.0/24 maxlen: 24
82.214.99.0/24 maxlen: 24
82.214.102.0/24 maxlen: 24
82.214.103.0/24 maxlen: 24
82.214.112.0/24 maxlen: 24
82.214.108.0/22 maxlen: 22
82.214.111.0/24 maxlen: 24
82.214.110.0/24 maxlen: 24
82.214.114.0/24 maxlen: 24
82.214.115.0/24 maxlen: 24
82.214.112.0/21 maxlen: 21
82.214.113.0/24 maxlen: 24
82.214.118.0/24 maxlen: 24
82.214.116.0/24 maxlen: 24
82.214.117.0/24 maxlen: 24
82.214.121.0/24 maxlen: 24
82.214.119.0/24 maxlen: 24
82.214.120.0/23 maxlen: 23
82.214.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:21:c7:15:57:48:69:0c:53:62:4a:81:da:89:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jul 11 08:46:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c83ba447a72918bce130f6b77d299dce0503f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:8d:12:7d:21:c4:31:b8:cf:9f:68:6d:b5:
39:1b:37:fb:a9:3f:ec:2e:f5:d5:8d:58:98:ce:b0:
09:06:79:ce:a4:2d:08:f7:38:08:f5:ae:77:18:88:
dc:e1:28:53:31:b6:a8:d5:f9:49:97:e5:14:1f:cc:
9e:be:7f:b9:f2:70:21:5e:7d:c9:d4:ab:09:18:e0:
c8:fd:35:3b:23:69:ce:63:c3:17:05:d5:ab:98:de:
86:bf:e6:38:a8:8a:75:64:c7:82:7d:29:27:02:b9:
b4:5c:0c:a3:cc:3e:45:3e:3f:ad:6c:67:cd:63:b8:
e1:95:76:32:50:a9:68:3f:18:5d:6f:9b:a1:a7:ad:
4d:2a:24:c0:bd:7e:08:c5:67:b8:e1:8d:7b:44:b6:
8e:f6:3c:e8:52:25:c8:b2:5c:cb:d2:f9:9b:06:5c:
97:de:c2:2d:49:b5:1e:6c:e6:56:38:ae:89:d3:1e:
05:70:65:56:f7:cc:b3:ce:73:b2:48:f6:49:38:02:
85:7f:09:ad:10:e4:a4:79:ca:4b:fe:ca:29:b5:be:
b2:9c:c2:42:14:09:3c:3b:f0:57:5d:9c:88:1c:de:
d4:64:22:c0:d8:bc:f5:a1:7a:0b:0c:16:b5:c6:41:
a6:91:a1:03:7b:5c:35:01:11:e9:b3:ad:5c:d4:56:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:BA:44:7A:72:91:8B:CE:13:0F:6B:77:D2:99:DC:E0:50:3F:52
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/TIO6RHpykYvOEw9rd9KZ3OBQP1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.214.66.0/24
82.214.76.0-82.214.78.255
82.214.84.0/23
82.214.96.0/21
82.214.108.0-82.214.121.255
Signature Algorithm: sha256WithRSAEncryption
7e:76:4a:03:bb:96:fd:a2:31:22:41:65:52:ec:3e:2b:1f:77:
be:a2:29:5f:3d:8c:48:e9:7b:16:0f:0d:96:8d:f7:a2:40:12:
59:91:00:fe:cb:ef:79:59:4f:82:43:56:f5:9b:22:69:86:ec:
a4:b6:5b:c7:e4:85:59:99:c0:0f:c7:d8:8f:40:15:b9:94:df:
68:ef:7b:57:49:58:3e:1f:7c:08:7a:f8:9b:9d:82:d3:c5:64:
4a:4a:db:0f:df:8c:6b:98:86:21:f7:0d:b3:31:73:9b:7c:b9:
d4:59:99:e6:12:a3:ac:0c:77:dd:10:b1:aa:5d:07:30:a0:1c:
77:db:4d:14:3f:91:10:73:0a:6c:2b:f0:da:20:c2:61:7c:76:
0c:b1:4f:e7:34:9e:dd:63:3b:54:d3:11:7b:3f:cb:51:a7:41:
4c:83:79:c8:e8:57:a6:23:0d:28:d9:06:9a:15:59:3f:9d:8c:
f9:bd:09:e9:6b:c9:c0:1a:b5:44:e9:d2:b2:6b:1a:06:df:24:
d2:5e:04:2e:45:48:b0:2f:ce:9c:75:eb:6f:85:69:a5:fa:74:
bc:07:72:b7:91:50:b2:41:ed:89:c4:91:99:55:20:db:27:f5:
5c:71:78:96:64:d5:85:79:bd:28:f0:9f:a1:32:30:8f:15:b6:
6f:7f:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:25:18 2025 by rpki-client