Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TlUDuqrmdjUZl0jDkaLn_f61-58.roa
File: TlUDuqrmdjUZl0jDkaLn_f61-58.roa (raw, json)
Hash identifier: PHgsqXJus9nreyGDAXI2Vk85+jpKw9+g0wO2nkTkyEs=
Subject key identifier: 4E:55:03:BA:AA:E6:76:35:19:97:48:C3:91:A2:E7:FD:FE:B5:FB:9F
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0207B08A
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TlUDuqrmdjUZl0jDkaLn_f61-58.roa
Signing time: Sat 01 Jan 2022 06:01:32 +0000
ROA not before: Sat 01 Jan 2022 06:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212578
IP address blocks: 185.84.116.0/24 maxlen: 24
185.84.117.0/24 maxlen: 24
185.84.118.0/24 maxlen: 24
80.255.112.0/24 maxlen: 24
185.84.119.0/24 maxlen: 24
80.255.113.0/24 maxlen: 24
80.255.114.0/24 maxlen: 24
80.255.115.0/24 maxlen: 24
80.255.124.0/24 maxlen: 24
80.255.125.0/24 maxlen: 24
80.255.126.0/24 maxlen: 24
80.255.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34058378 (0x207b08a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Jan 1 06:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e5503baaae67635199748c391a2e7fdfeb5fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:21:b6:4a:96:06:23:56:4c:ec:7e:af:a9:
56:d6:17:8e:5f:85:e0:7c:b3:ff:60:a7:b3:e0:b6:
e0:f5:91:d4:f4:f0:6a:94:3a:a8:f3:8c:cd:59:ae:
7f:82:50:52:0c:d7:62:eb:7a:74:ae:c6:29:f5:81:
59:bc:86:d4:a7:49:ed:c0:38:25:41:51:e5:cf:04:
3b:cc:07:eb:48:b1:01:97:27:3f:70:8e:4b:7a:2c:
23:33:68:59:6c:3b:48:40:54:c5:25:67:15:5d:e4:
51:51:64:58:c6:d1:31:a4:fc:58:6d:19:d3:f9:92:
ad:f1:c3:89:d7:8e:15:bb:08:f1:23:5a:40:ed:ba:
12:ab:7e:87:7f:3b:1b:c3:d0:b9:64:4a:23:7f:27:
49:5b:b1:72:4a:5f:9f:44:99:fd:56:83:87:3f:22:
ef:41:71:ed:89:70:bd:2d:26:78:1d:14:6d:78:eb:
8b:d2:35:21:88:3b:73:1d:89:7e:8f:7e:cd:3c:d6:
a5:fa:54:07:26:09:f6:7b:09:bb:b4:86:83:dd:64:
f7:52:a9:5c:9d:04:16:25:be:f9:17:6e:25:6e:33:
a0:29:b8:7a:e8:8e:05:89:3d:0a:b7:30:07:33:b6:
51:57:48:d0:20:f8:5f:00:05:3d:68:62:5d:1f:80:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:03:BA:AA:E6:76:35:19:97:48:C3:91:A2:E7:FD:FE:B5:FB:9F
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/TlUDuqrmdjUZl0jDkaLn_f61-58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.112.0/22
80.255.124.0/22
185.84.116.0/22
Signature Algorithm: sha256WithRSAEncryption
db:03:f2:91:d8:08:fc:f2:ee:ba:14:b3:8c:70:1e:6a:9e:8c:
10:14:41:19:d1:0c:1a:fa:27:41:53:5f:70:24:0e:f7:14:57:
ee:26:22:37:c9:49:48:4a:cd:a9:f5:0c:d9:4e:3b:ca:e8:da:
7a:a9:c0:dc:9c:e5:79:8d:69:dd:6e:c1:c5:b5:ef:2a:9a:1e:
67:07:01:7f:85:ea:3c:85:ae:bb:41:a0:3e:7d:4d:70:22:12:
3e:51:13:d0:56:b1:a8:33:5f:dd:05:ee:b7:fa:3b:df:40:9f:
05:61:d5:33:08:63:ad:66:08:44:23:4c:61:fb:63:e7:b3:bc:
c4:6c:37:e6:11:91:44:f5:61:04:b8:47:91:be:4d:8f:07:10:
65:b0:19:a7:72:65:e7:37:d5:6e:b7:ee:ac:26:20:3b:d5:47:
35:0c:56:eb:cf:ec:b2:62:35:e9:8e:9b:5c:47:e3:9c:52:7f:
fa:38:70:ce:7a:25:0e:94:df:e8:c9:f9:17:b4:4e:01:f1:ec:
b9:28:6e:04:9e:87:c2:ed:02:2a:a8:8e:11:d1:04:f3:a3:c5:
64:ce:eb:15:a1:fe:07:a1:1f:c5:c4:2c:15:83:40:d6:d6:f1:
0f:7d:e7:81:09:4c:e4:b8:b1:73:74:0d:23:c4:0e:27:85:14:
6a:41:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org