Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/TKMzNg0lnEzv-X3OPk74EN7Qksg.roa
File: TKMzNg0lnEzv-X3OPk74EN7Qksg.roa (raw, json)
Hash identifier: 5KN5wKUJhI14sLIODcmp31NWcTsSTP0bx0Q9BBNS5Ig=
Subject key identifier: 4C:A3:33:36:0D:25:9C:4C:EF:F9:7D:CE:3E:4E:F8:10:DE:D0:92:C8
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315F52D9F284902B9919A29D9E9ECE6
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/TKMzNg0lnEzv-X3OPk74EN7Qksg.roa
Signing time: Mon 02 Jan 2023 15:24:56 +0000
ROA not before: Mon 02 Jan 2023 15:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41803
IP address blocks: 194.12.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f5:2d:9f:28:49:02:b9:91:9a:29:d9:e9:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ca333360d259c4ceff97dce3e4ef810ded092c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:d2:cd:f1:c4:50:8c:17:bf:3b:8a:b7:9e:
e8:90:e0:fc:fc:05:2a:a4:96:d2:63:2b:79:03:8b:
64:dd:ff:08:c0:88:86:e3:59:5b:2f:a8:65:16:71:
26:0f:c1:32:9f:6e:49:28:9a:c6:0f:52:47:b9:2a:
f9:c8:3c:98:5f:b1:13:50:21:8b:c0:b8:81:5b:bc:
53:e5:66:5b:6b:0f:dc:0b:0a:27:ee:23:05:b7:44:
7f:73:33:31:fe:37:9f:af:1d:ca:e1:ff:7d:ae:9d:
0b:c4:b7:b6:45:d5:7a:22:e2:70:63:19:c4:4f:1b:
d2:dc:6f:fd:f9:88:74:01:b0:93:cc:9a:68:88:77:
8a:84:88:5b:6d:9a:1e:97:73:ec:20:80:18:6f:82:
04:69:fa:64:57:1e:eb:e8:c9:68:5c:74:84:01:a4:
47:6e:e2:1f:80:4c:b5:01:d6:00:f7:71:49:45:c1:
cf:d8:cd:0a:f8:5a:ea:9e:a4:5d:c9:21:3f:a8:30:
fc:fa:d9:ec:28:90:45:00:34:47:0a:b6:63:aa:da:
74:89:ea:9c:ad:41:25:c6:b9:95:4f:7d:d5:4d:d5:
9d:51:01:57:b6:74:3b:04:01:fc:89:7b:a0:2e:03:
c9:77:b7:2e:0c:d9:e6:b8:f4:a4:c9:80:68:65:1d:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:33:36:0D:25:9C:4C:EF:F9:7D:CE:3E:4E:F8:10:DE:D0:92:C8
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/TKMzNg0lnEzv-X3OPk74EN7Qksg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:dc:67:ff:56:b3:98:7b:b8:cb:86:49:65:c6:33:8d:3d:2b:
13:40:de:da:74:14:20:0f:b6:38:d5:5e:83:3a:9c:d2:87:95:
a1:c4:cf:41:a6:c2:3b:6b:e2:75:c6:a0:4e:87:97:36:54:96:
6b:7f:62:4d:51:00:1a:33:ff:4f:2c:d2:a8:34:16:e0:f7:e6:
6e:d0:ec:54:6b:ad:7f:dc:31:50:39:e0:d9:bc:5e:6f:0c:84:
2e:50:e0:76:e3:dd:28:6f:0b:f4:41:1f:0a:36:6f:92:e6:0d:
29:96:1e:df:c5:2b:6f:30:9e:62:ec:a3:80:51:ab:88:89:3f:
d6:88:a8:8e:c6:9d:aa:2d:22:2a:90:da:e1:e2:b5:ef:d8:b1:
4d:7e:bd:07:74:e2:b5:bd:7a:84:ab:37:e4:e8:f5:e2:56:05:
76:4e:1c:7f:b8:32:45:15:f6:58:a3:d9:20:25:eb:3d:b9:45:
64:82:48:f8:b0:d6:18:a6:b8:3b:e4:4c:cf:ea:6f:f6:21:18:
30:7a:9a:eb:53:33:c1:26:ac:ea:79:aa:ec:b4:ba:5b:aa:d5:
5c:1e:bd:bc:0b:f1:89:f7:4d:07:35:e7:36:b9:6e:fa:89:2b:
0d:e1:ae:7a:3a:b8:cc:9d:8a:4e:ce:4a:3e:b0:8a:06:6e:64:
e9:74:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:56 2025 by rpki-client