Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/Tx08TVwL6EQGjAbYAmnRg2s8tTM.roa
File: Tx08TVwL6EQGjAbYAmnRg2s8tTM.roa (raw, json)
Hash identifier: kKCCIZ0hvH6i4152EDeGTO1BlI2wg2R3fdo6j8yzxoQ=
Subject key identifier: 4F:1D:3C:4D:5C:0B:E8:44:06:8C:06:D8:02:69:D1:83:6B:3C:B5:33
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 059C8819
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/Tx08TVwL6EQGjAbYAmnRg2s8tTM.roa
Signing time: Sat 01 Jan 2022 09:53:19 +0000
ROA not before: Sat 01 Jan 2022 09:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204425
IP address blocks: 185.245.224.0/24 maxlen: 24
185.245.224.0/22 maxlen: 22
2a0d:7c80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94144537 (0x59c8819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Jan 1 09:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f1d3c4d5c0be844068c06d80269d1836b3cb533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:94:2e:04:cf:3b:29:84:af:8f:6b:f5:12:
f7:36:6d:2d:03:6c:6e:d0:2f:9b:36:c6:5d:ce:2f:
5a:17:b2:6d:60:df:31:09:5b:e4:7b:2f:6a:9f:ea:
71:3a:5c:ae:1c:1d:15:c5:37:60:85:a6:1d:12:4a:
50:66:a3:a1:e4:2a:c7:10:73:24:aa:36:27:30:82:
5f:24:5d:31:3c:da:88:01:a6:b2:a9:23:c9:6a:61:
9b:c2:83:56:85:db:d4:f6:d6:f6:74:4a:ad:52:de:
09:20:0c:50:29:0f:a3:75:1a:9e:19:c1:0d:ca:2f:
65:20:14:68:7c:57:a6:8c:e2:02:d9:de:88:01:00:
ff:d3:63:ac:ac:6f:71:fd:f1:17:ff:e7:bd:47:6e:
d4:b1:3a:01:5b:e1:bb:08:87:af:81:10:ff:ad:83:
9b:80:35:a5:3a:a3:90:e1:69:d8:f8:d2:7e:35:5f:
94:75:47:f4:2b:27:ef:a8:19:59:bf:3c:d9:06:30:
8f:2e:c8:46:22:b4:e4:e7:ef:c7:8e:c6:d7:02:25:
e2:d6:f0:c8:43:83:68:e6:50:82:46:88:27:43:c7:
5e:82:fe:7b:a1:48:c1:bb:14:01:df:cf:df:5e:5e:
0f:0b:d2:48:07:d2:5e:49:05:cc:d1:50:58:69:aa:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:3C:4D:5C:0B:E8:44:06:8C:06:D8:02:69:D1:83:6B:3C:B5:33
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/Tx08TVwL6EQGjAbYAmnRg2s8tTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.224.0/22
IPv6:
2a0d:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
40:08:78:98:65:c5:d6:8f:4b:5d:db:a2:cb:49:fd:79:cc:b6:
1a:62:35:d5:aa:0c:fa:b5:ce:6a:3a:64:da:11:0f:c3:8e:6b:
ae:eb:2c:44:60:b1:2e:5e:b0:4f:cc:1e:e3:23:2f:73:94:d4:
ef:55:54:50:74:21:c8:7e:09:b7:89:7b:0f:67:61:c7:99:9f:
04:9c:1e:e5:35:4f:ef:cf:6e:18:ec:0f:6e:45:46:a1:c0:3e:
77:61:36:71:4e:e8:a8:74:8b:9f:38:b5:e5:e8:fe:34:9e:76:
ba:10:b7:46:d1:78:4d:47:93:86:9d:61:c2:9f:28:e0:8e:11:
ce:5a:66:4a:0c:62:63:28:17:07:1a:d1:bb:c2:f7:d1:72:bd:
2b:63:7b:3f:76:de:66:ca:53:51:ef:a1:f5:61:83:44:c4:4e:
42:13:fa:26:54:35:6b:73:a6:81:1f:38:59:21:0b:c1:7c:21:
af:e4:f6:29:64:ce:83:9b:8f:d9:71:28:ba:e5:e8:b9:09:c0:
88:a8:dc:c9:bc:fe:3c:9f:39:a7:01:18:9d:20:44:a4:6c:c1:
7a:83:03:07:26:d2:9b:8c:e7:f5:69:38:e3:c3:b2:9f:3c:33:
ca:47:34:43:7c:46:db:f0:b1:56:e0:c0:cc:df:8e:cb:45:58:
32:09:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:26 2025 by rpki-client