Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/TukHdh-CT3XBa5XJUo5kRMWOvAk.roa
File: TukHdh-CT3XBa5XJUo5kRMWOvAk.roa (raw, json)
Hash identifier: biSAte7OjlU+1YD/pDY4BYnXVUvuBKK88RnLZY4QsWQ=
Subject key identifier: 4E:E9:07:76:1F:82:4F:75:C1:6B:95:C9:52:8E:64:44:C5:8E:BC:09
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 0186E267527878730BF238B051CC9AE9E068
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/TukHdh-CT3XBa5XJUo5kRMWOvAk.roa
Signing time: Tue 14 Mar 2023 23:14:27 +0000
ROA not before: Tue 14 Mar 2023 23:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51582
IP address blocks: 185.89.124.0/22 maxlen: 24
46.55.216.0/21 maxlen: 24
46.55.224.0/20 maxlen: 24
46.55.128.0/18 maxlen: 24
46.55.242.0/23 maxlen: 24
46.55.241.0/24 maxlen: 24
46.55.244.0/22 maxlen: 24
46.55.248.0/22 maxlen: 24
185.240.144.0/22 maxlen: 24
46.55.192.0/20 maxlen: 24
2a03:8340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:67:52:78:78:73:0b:f2:38:b0:51:cc:9a:e9:e0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Mar 14 23:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee907761f824f75c16b95c9528e6444c58ebc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:fe:83:fd:74:cc:eb:60:88:65:66:d9:5c:
ee:65:e2:5b:98:cb:2d:6e:44:92:3f:f7:d7:6d:04:
19:51:10:65:a9:e4:59:7c:0a:5a:cd:eb:1e:35:65:
d4:e5:29:f3:20:d7:b3:ca:96:27:7a:c2:97:b9:21:
32:5c:b4:34:ad:a8:43:ba:2a:5d:6a:da:c7:6b:44:
54:ea:4b:ac:6b:4c:e9:b8:47:27:be:aa:6f:51:e2:
a6:de:18:33:7c:98:93:06:0f:b2:b8:ad:16:fd:ab:
91:ac:ef:1f:04:ff:04:ba:95:4f:e9:6a:e5:b8:d2:
10:84:a0:7b:f5:cc:f4:af:68:91:87:b6:fc:75:19:
b7:1f:a7:fa:13:f5:4f:99:09:c1:fc:e3:bd:d9:9f:
31:2f:28:d8:35:50:f8:54:2b:15:42:10:4f:01:a6:
2b:a1:67:ac:e4:6b:cd:02:b4:62:f0:93:43:65:9c:
32:82:21:78:5a:1b:be:ae:c9:ad:df:8b:b9:53:43:
be:22:b2:39:80:52:0a:65:a7:05:f1:38:1c:fc:f4:
48:7b:a1:c5:e4:94:4c:fd:e1:30:0e:b6:28:b2:7b:
34:d5:05:e2:a9:1b:3b:82:27:7c:c9:2e:6d:4c:0d:
32:fc:89:1c:06:32:ee:be:9b:9d:21:47:ca:70:9a:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:07:76:1F:82:4F:75:C1:6B:95:C9:52:8E:64:44:C5:8E:BC:09
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/TukHdh-CT3XBa5XJUo5kRMWOvAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.128.0-46.55.207.255
46.55.216.0-46.55.239.255
46.55.241.0-46.55.251.255
185.89.124.0/22
185.240.144.0/22
IPv6:
2a03:8340::/32
Signature Algorithm: sha256WithRSAEncryption
2b:bd:5a:c6:15:d1:b0:60:a8:62:fa:82:45:d1:8d:8b:23:cd:
1b:91:04:89:f6:11:be:c4:6b:e4:aa:a8:11:7e:80:77:a6:b3:
e8:1b:01:41:a2:7f:37:64:2b:f5:61:bb:fd:3a:30:a5:b9:c0:
55:b6:da:d6:27:1e:21:1d:35:ae:44:02:01:5c:a2:77:96:a9:
81:0d:2b:5f:db:91:5c:b8:90:bd:b9:45:8e:e5:32:63:86:73:
af:05:13:40:9c:f2:47:0b:4e:cb:75:1b:8e:d7:3a:64:ad:95:
3d:2e:01:20:48:00:69:6f:f8:fe:08:1e:09:20:e7:38:05:37:
c3:32:d0:5c:af:77:dd:26:25:e4:6c:63:da:15:33:36:3f:5a:
c3:4b:c4:ef:04:48:64:08:92:fe:89:65:da:1a:55:69:dd:ed:
a9:23:65:f2:ff:11:4c:41:f1:b0:f6:ef:fc:59:3b:61:1b:00:
cd:1a:60:9c:69:bc:bc:23:c3:15:d3:f0:5c:45:6d:2b:4e:d0:
ff:24:89:0d:55:cd:16:4b:f7:cb:a3:26:48:58:8c:d5:8f:86:
c9:d4:8b:ba:7c:e0:64:3b:1d:cd:2d:5b:07:a5:6f:d1:6b:48:
97:ce:3c:a8:a6:18:7d:db:78:1d:d0:85:5c:f9:55:bc:41:1b:
bd:a1:23:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYbiZ1J4eHML8jiwUcya6eBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0
MmFkNGIwHhcNMjMwMzE0MjMxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU5MDc3NjFmODI0Zjc1YzE2Yjk1Yzk1MjhlNjQ0NGM1OGViYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzn+g/10zOtgiGVm2VzuZeJbmMst
bkSSP/fXbQQZURBlqeRZfApazeseNWXU5SnzINezypYnesKXuSEyXLQ0rahDuipd
atrHa0RU6kusa0zpuEcnvqpvUeKm3hgzfJiTBg+yuK0W/auRrO8fBP8EupVP6Wrl
uNIQhKB79cz0r2iRh7b8dRm3H6f6E/VPmQnB/OO92Z8xLyjYNVD4VCsVQhBPAaYr
oWes5GvNArRi8JNDZZwygiF4Whu+rsmt34u5U0O+IrI5gFIKZacF8Tgc/PRIe6HF
5JRM/eEwDrYosns01QXiqRs7gid8yS5tTA0y/IkcBjLuvpudIUfKcJr4XQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFE7pB3Yfgk91wWuVyVKOZETFjrwJMB8GA1UdIwQY
MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt
YTIwZDJkNzUxZWI1LzEvVHVrSGRoLUNUM1hCYTVYSlVvNWtSTVdPdkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1
LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2MAwDBAcuN4AD
BAQuN8AwDAMEAy432AMEBC434DAMAwQALjfxAwQCLjf4AwQCuVl8AwQCufCQMA0E
AgACMAcDBQAqA4NAMA0GCSqGSIb3DQEBCwUAA4IBAQArvVrGFdGwYKhi+oJF0Y2L
I80bkQSJ9hG+xGvkqqgRfoB3prPoGwFBon83ZCv1Ybv9OjClucBVttrWJx4hHTWu
RAIBXKJ3lqmBDStf25FcuJC9uUWO5TJjhnOvBRNAnPJHC07LdRuO1zpkrZU9LgEg
SABpb/j+CB4JIOc4BTfDMtBcr3fdJiXkbGPaFTM2P1rDS8TvBEhkCJL+iWXaGlVp
3e2pI2Xy/xFMQfGw9u/8WTthGwDNGmCcaby8I8MV0/BcRW0rTtD/JIkNVc0WS/fL
oyZIWIzVj4bJ1Iu6fOBkOx3NLVsHpW/Ra0iXzjyophh923gd0IVc+VW8QRu9oSNt
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:58 2025 by rpki-client