Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TV8ICBaiFfA9SMPtFb9iaukiY0g.roa
File: TV8ICBaiFfA9SMPtFb9iaukiY0g.roa (raw, json)
Hash identifier: HygEuvLJYBTvCV0LCh6+bHGydO8YsnmA3KZAH/ad1v0=
Subject key identifier: 4D:5F:08:08:16:A2:15:F0:3D:48:C3:ED:15:BF:62:6A:E9:22:63:48
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853985E84DD5DCE9624BDC8E1E71007840
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TV8ICBaiFfA9SMPtFb9iaukiY0g.roa
Signing time: Thu 22 Dec 2022 11:09:15 +0000
ROA not before: Thu 22 Dec 2022 11:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60397
IP address blocks: 45.149.116.0/22 maxlen: 24
151.237.130.0/24 maxlen: 24
151.237.132.0/23 maxlen: 24
79.170.148.0/22 maxlen: 24
2.59.112.0/22 maxlen: 24
151.237.134.0/23 maxlen: 24
185.158.8.0/22 maxlen: 24
151.237.58.0/23 maxlen: 24
151.237.56.0/23 maxlen: 24
151.237.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:85:e8:4d:d5:dc:e9:62:4b:dc:8e:1e:71:00:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 22 11:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d5f080816a215f03d48c3ed15bf626ae9226348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:ac:fc:2f:12:3c:f2:b7:a8:f9:0a:27:b2:
f3:9e:d6:cd:b5:7e:f7:e6:0b:1a:11:0e:be:8e:54:
19:b1:06:c3:aa:34:2e:10:13:6f:93:b0:91:b5:8f:
d9:de:c1:f7:ca:51:d7:7e:2e:a2:8e:4f:9b:a9:0e:
a9:69:b0:22:a7:e2:5b:95:50:ad:f6:c9:68:c7:60:
00:3f:fc:ff:18:97:f1:96:72:62:98:7d:f2:f5:f9:
b4:d6:77:69:9a:e5:0d:a6:36:db:0d:d0:8e:a3:15:
dc:81:8c:4d:48:4d:48:a8:9c:d9:84:b9:60:3a:ef:
c4:ee:0d:4a:5f:9c:c3:34:1e:de:21:9d:1f:d0:48:
59:c0:c3:da:c8:6f:0c:3d:2a:89:22:bc:ee:f0:cc:
c1:07:92:7d:9d:6a:b0:09:a5:44:6d:50:59:46:26:
c5:48:92:8c:47:5e:33:50:96:ea:72:a6:57:b6:97:
f8:59:cd:53:7c:84:1c:b7:97:07:5c:56:f6:9a:28:
13:dc:ce:8d:e1:9d:f1:71:98:d7:ef:58:b8:17:8b:
a6:ea:86:f2:a3:f1:5a:d1:36:bd:17:1f:45:d3:b4:
67:34:25:2f:24:41:ca:a6:ca:9c:7e:54:6f:81:d3:
f4:d2:dc:a3:f7:58:85:1a:8b:3c:a6:d9:a7:07:23:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:08:08:16:A2:15:F0:3D:48:C3:ED:15:BF:62:6A:E9:22:63:48
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TV8ICBaiFfA9SMPtFb9iaukiY0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.112.0/22
45.149.116.0/22
79.170.148.0/22
151.237.56.0/22
151.237.64.0/23
151.237.130.0/24
151.237.132.0/22
185.158.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a0:5d:ae:de:d3:44:5e:56:4b:71:31:e5:d7:81:9d:d0:50:
94:17:fa:f4:67:ff:f9:67:3c:4a:c2:cd:32:97:64:78:f7:4f:
5f:a7:0a:28:27:e8:4d:75:a5:57:80:8b:0a:f2:32:07:f9:96:
13:94:c2:25:1d:ab:f1:96:c6:53:e7:7f:a9:3c:41:8f:df:be:
f6:fb:ce:6d:c4:63:41:d0:85:b8:ff:e8:90:96:73:f2:17:0f:
59:67:87:9f:27:db:5f:34:92:9b:2c:95:f5:1b:e5:00:ea:f1:
1c:d9:01:fa:30:81:0b:79:83:63:aa:2c:c0:17:05:ba:13:5f:
ec:69:ae:d7:d1:9c:4a:02:a8:84:75:fd:1d:94:7b:6a:8e:62:
f7:2f:7d:2e:b6:7f:04:eb:79:6b:98:3d:ed:0a:e3:d8:8e:68:
86:64:10:5b:5e:80:43:6f:63:49:9e:ee:b4:ed:6d:15:43:4f:
99:ee:aa:bc:1c:e3:4d:ac:d0:a4:f3:04:77:b6:53:7c:32:58:
19:cc:d2:cc:d9:17:d1:25:d7:e3:d0:f6:e9:08:76:e4:a0:15:
5b:7e:a0:05:74:f3:91:47:c4:10:89:19:6b:a8:07:96:b1:09:
19:fb:0d:08:33:41:4d:e9:30:13:4d:9a:1e:96:3a:0f:fd:0b:
88:36:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org