Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/TpZYsbV8BcB_xHn3RTeBBiRWIFo.roa
File: TpZYsbV8BcB_xHn3RTeBBiRWIFo.roa (raw, json)
Hash identifier: OA7QdMqUic5Ex45bYR+uinWpNnRq3LsmdHru57F+q+A=
Subject key identifier: 4E:96:58:B1:B5:7C:05:C0:7F:C4:79:F7:45:37:81:06:24:56:20:5A
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01856C4151D2B971711AACDDED2466FC5BA0
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/TpZYsbV8BcB_xHn3RTeBBiRWIFo.roa
Signing time: Sun 01 Jan 2023 07:34:58 +0000
ROA not before: Sun 01 Jan 2023 07:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201873
IP address blocks: 185.142.252.0/22 maxlen: 22
185.143.104.0/22 maxlen: 22
185.61.52.0/22 maxlen: 22
2a02:7820::/32 maxlen: 32
2a07:3200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:51:d2:b9:71:71:1a:ac:dd:ed:24:66:fc:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jan 1 07:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9658b1b57c05c07fc479f7453781062456205a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:a5:13:03:fa:d1:43:d3:99:1d:01:73:8c:
33:25:32:84:18:27:d8:28:b9:ff:60:9a:11:4c:53:
f2:52:54:4c:8c:d0:ca:57:f7:e1:60:7a:c0:0e:06:
95:4e:dc:81:3a:66:dc:03:73:2f:e2:78:50:f9:36:
38:af:a8:30:40:d0:73:4f:fe:62:e2:48:af:3f:95:
6c:7c:8c:d3:0c:41:a0:80:b2:0a:ac:e3:9d:cd:d7:
84:c1:65:05:03:92:7c:f6:83:7c:9c:8b:6b:2c:c4:
f0:a5:bb:9e:a2:c1:13:76:eb:c1:b4:8b:a7:14:e9:
ea:d3:3d:d2:b6:4e:86:f9:5b:ac:de:7e:f9:e7:82:
48:4a:cd:9a:83:40:bc:27:89:db:93:73:c9:ae:02:
6c:da:07:15:f2:17:61:1e:5e:0c:12:08:a2:ac:a9:
fe:f0:19:ef:2f:b0:d1:cd:70:38:75:06:8a:36:8b:
a7:9a:55:e5:9c:31:4d:32:49:89:14:c8:cd:92:ea:
08:d9:58:a3:1f:6e:c7:9c:81:36:5e:b2:d9:da:29:
de:f8:84:74:62:96:5a:f1:c7:ec:4b:0a:e3:44:f1:
bc:9b:26:ee:b0:b8:4c:64:cc:4b:da:a9:6a:f2:2e:
49:20:5f:f9:57:7b:88:40:e7:55:41:ee:17:2a:12:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:58:B1:B5:7C:05:C0:7F:C4:79:F7:45:37:81:06:24:56:20:5A
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/TpZYsbV8BcB_xHn3RTeBBiRWIFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.52.0/22
185.142.252.0/22
185.143.104.0/22
IPv6:
2a02:7820::/32
2a07:3200::/29
Signature Algorithm: sha256WithRSAEncryption
16:ae:29:d5:99:85:43:74:5c:84:19:3d:56:22:8f:3c:ed:d6:
9e:b9:e4:ff:97:ec:88:12:ef:12:33:85:69:09:b6:1b:22:23:
b7:9f:38:51:a4:b9:80:ad:56:4d:8e:40:09:d5:d5:c8:0c:77:
a9:6a:db:61:5e:65:bd:52:c7:b1:27:b9:7d:a7:c9:4b:ae:aa:
0f:2d:1d:ac:82:2f:04:e7:e4:2e:a9:0b:21:07:fb:da:49:87:
bb:d4:3b:da:1f:5e:c0:f2:87:c4:0f:12:a7:f1:be:94:db:8b:
7a:e8:17:55:f6:c6:33:d7:14:55:c9:fd:18:60:63:c6:fb:f3:
6a:41:1a:e7:0a:48:94:0c:d3:6f:d4:57:cb:76:3e:3c:a1:71:
12:6a:99:20:d0:6d:1d:a5:0d:fb:65:d4:01:20:79:45:7b:b0:
33:28:9c:58:95:2f:b1:4b:a2:b4:09:cb:f5:0e:e6:03:1a:27:
7f:61:52:30:b4:67:44:97:23:fd:c3:56:59:0f:ef:a0:db:cd:
1f:75:16:61:82:a9:27:30:c7:f5:4d:03:8a:9e:9a:8d:3b:a6:
89:e3:bb:34:15:2f:94:bc:2e:75:ea:31:d4:30:92:d2:be:8b:
1f:f7:da:eb:72:83:ff:0b:a8:9c:52:7d:d6:ce:11:4f:d5:8f:
89:a3:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:34 2025 by rpki-client