Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/tbVSRxbmGjRg4I2XA0PzYozYpts.roa
File: tbVSRxbmGjRg4I2XA0PzYozYpts.roa (raw, json)
Hash identifier: RiZIdHRKOcFKlkW8cB+Wj8gupmlCVSMb7RG1+zAOTws=
Subject key identifier: B5:B5:52:47:16:E6:1A:34:60:E0:8D:97:03:43:F3:62:8C:D8:A6:DB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01836ACFD49985D7D61D841746B7FF2C944C
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/tbVSRxbmGjRg4I2XA0PzYozYpts.roa
Signing time: Fri 23 Sep 2022 14:45:48 +0000
ROA not before: Fri 23 Sep 2022 14:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203380
IP address blocks: 82.118.245.0/24 maxlen: 24
79.124.7.0/24 maxlen: 24
91.148.141.0/24 maxlen: 24
78.128.99.0/24 maxlen: 24
94.72.140.0/23 maxlen: 24
94.72.143.0/24 maxlen: 24
82.118.227.0/24 maxlen: 24
82.118.230.0/24 maxlen: 24
82.118.234.0/24 maxlen: 24
82.118.235.0/24 maxlen: 24
130.185.251.0/24 maxlen: 24
79.124.77.0/24 maxlen: 24
78.128.127.0/24 maxlen: 24
2a01:8740:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:cf:d4:99:85:d7:d6:1d:84:17:46:b7:ff:2c:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 23 14:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5b5524716e61a3460e08d970343f3628cd8a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:b7:5a:2e:ed:af:7b:ff:cd:74:92:d9:a8:
7a:34:af:ef:19:0c:45:26:5a:93:18:2a:05:58:00:
21:95:e4:2b:5a:cb:bb:99:e5:0b:60:50:aa:16:7b:
6c:ec:92:46:be:66:00:5f:c0:4b:c7:81:17:76:be:
26:a2:05:1f:4f:d6:09:29:1c:9d:27:a5:f9:0b:b4:
eb:db:6b:0b:90:36:d8:d0:2d:a5:f2:c0:f3:37:d5:
c0:77:d5:9e:11:82:00:17:32:1e:78:d8:10:e8:c2:
83:db:1b:d2:a5:ef:3b:1d:db:f2:ab:0d:d3:d9:d5:
dc:4d:40:58:7e:9f:e3:41:9c:a4:39:3b:62:8f:a6:
0e:fd:d2:53:f7:c1:54:1b:31:fa:3a:47:36:98:45:
28:9e:13:2a:ee:ab:93:70:b0:fa:de:ad:6c:41:36:
68:a2:9e:64:68:97:08:ea:21:07:4d:38:2c:c4:0f:
fa:52:41:39:66:10:6d:00:47:74:a7:fd:fc:69:6e:
f6:ad:5d:0b:76:09:3d:0f:09:e3:d8:9a:40:f8:a9:
cd:2e:0f:63:e3:73:74:e7:b8:56:b7:89:4e:95:d3:
53:35:3a:8c:19:9d:a8:cc:08:7e:20:de:3c:f4:e5:
d1:39:79:9f:87:78:bc:e2:38:97:e5:f6:1a:30:35:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:52:47:16:E6:1A:34:60:E0:8D:97:03:43:F3:62:8C:D8:A6:DB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/tbVSRxbmGjRg4I2XA0PzYozYpts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.99.0/24
78.128.127.0/24
79.124.7.0/24
79.124.77.0/24
82.118.227.0/24
82.118.230.0/24
82.118.234.0/23
82.118.245.0/24
91.148.141.0/24
94.72.140.0/23
94.72.143.0/24
130.185.251.0/24
IPv6:
2a01:8740:1::/48
Signature Algorithm: sha256WithRSAEncryption
13:e6:c7:19:6e:b3:47:17:53:47:4d:32:fb:42:41:bd:6a:c0:
9b:42:55:f3:f1:9f:33:5c:40:e5:cc:f7:03:b9:c3:7c:c8:1b:
60:4d:6b:52:b7:1e:48:83:3c:1f:64:35:32:7b:e7:b9:53:7d:
78:4a:e0:a9:57:5f:05:44:b0:cc:e4:97:4f:d3:c8:b0:94:99:
b3:4e:cb:e1:cd:90:df:c3:83:2b:c1:59:87:cc:c8:05:d3:7c:
62:73:e9:69:c3:70:db:2b:8d:6c:f3:85:4a:63:3e:0f:ac:0a:
82:b9:1d:ef:05:88:fe:31:76:51:f9:93:ae:dc:6d:21:5e:cf:
b9:3c:2e:85:0b:51:f3:bf:af:2a:ad:c1:78:c2:72:4c:99:80:
4d:f7:53:fe:ee:b0:e6:da:00:77:62:f8:e8:2e:5d:80:cf:cc:
3c:b5:c4:02:d1:96:e8:5f:05:c3:01:6f:1c:d5:ef:9a:37:46:
9c:3a:e1:39:c5:15:f3:da:66:ef:69:ab:3e:5c:a3:08:9f:f6:
68:a6:69:97:6a:be:d2:4d:f1:b3:57:ec:48:64:12:14:23:16:
de:0e:76:10:06:6a:fd:1f:43:e5:06:b8:b3:02:11:ca:e1:ac:
bb:47:2d:8d:2e:78:ac:ec:ec:7e:79:01:a4:22:bd:8a:a9:ee:
cc:31:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org