Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/TTcGXLwJbIdaNyEpXyRA9cGn3Ck.roa
File: TTcGXLwJbIdaNyEpXyRA9cGn3Ck.roa (raw, json)
Hash identifier: PxXeybJotvF3oh7BroIW6Ntrzu4f5ZBoQ/VKvvgjmz4=
Subject key identifier: 4D:37:06:5C:BC:09:6C:87:5A:37:21:29:5F:24:40:F5:C1:A7:DC:29
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 07A344B7
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/TTcGXLwJbIdaNyEpXyRA9cGn3Ck.roa
Signing time: Sat 01 Jan 2022 16:02:55 +0000
ROA not before: Sat 01 Jan 2022 16:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197143
IP address blocks: 185.33.130.0/24 maxlen: 24
185.33.129.0/24 maxlen: 24
185.33.131.0/24 maxlen: 24
185.33.128.0/24 maxlen: 24
185.218.218.0/24 maxlen: 24
185.218.217.0/24 maxlen: 24
185.218.219.0/24 maxlen: 24
185.218.216.0/24 maxlen: 24
46.245.163.0/24 maxlen: 24
46.245.162.0/24 maxlen: 24
46.245.165.0/24 maxlen: 24
46.245.164.0/24 maxlen: 24
46.245.166.0/24 maxlen: 24
46.245.161.0/24 maxlen: 24
46.245.160.0/24 maxlen: 24
46.245.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128140471 (0x7a344b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jan 1 16:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d37065cbc096c875a3721295f2440f5c1a7dc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:dd:9f:22:fa:c7:28:38:c3:33:8a:4b:6a:
4a:ad:e2:a4:d6:41:bc:76:a1:e1:a9:e0:12:21:69:
86:87:dd:12:05:c8:6e:93:c4:c7:69:79:fc:73:91:
0b:69:aa:ed:c0:de:e8:2f:4d:47:c0:26:66:ef:8d:
d1:77:62:08:cd:13:f8:b8:97:03:41:cd:7b:4b:c1:
d7:5e:af:69:25:cb:4e:01:ff:93:aa:91:2f:5b:c6:
20:c5:cf:82:6f:50:63:22:63:28:a1:74:d0:71:7e:
0f:cb:d0:2e:8b:32:a5:f7:94:86:98:71:5d:16:a2:
65:71:aa:54:e6:cb:33:a7:fa:bc:8a:fe:25:d9:b9:
bb:92:7c:51:ef:75:29:66:e6:7e:72:ee:6d:4c:75:
84:b7:2a:a6:19:6f:2e:9d:9f:aa:ca:e0:02:c9:2e:
75:3b:89:60:ae:4e:8c:b1:8d:22:28:b4:21:d3:5e:
32:c6:f2:1d:e5:b1:1c:44:6c:17:30:bf:63:4e:42:
28:07:d9:f3:68:4c:1d:cd:95:76:14:de:7a:f1:7f:
e5:29:80:a1:67:46:da:ff:58:88:37:20:51:f8:2d:
9e:e4:cb:fb:8f:e0:c4:d7:1b:d4:36:47:d4:65:de:
f0:af:64:de:f5:a5:72:d7:54:d0:1a:fd:f7:b7:e2:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:06:5C:BC:09:6C:87:5A:37:21:29:5F:24:40:F5:C1:A7:DC:29
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/TTcGXLwJbIdaNyEpXyRA9cGn3Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.160.0/21
185.33.128.0/22
185.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:43:00:fa:6a:26:90:50:ee:90:68:01:62:c8:c8:bf:2d:ac:
72:3a:0a:64:7e:61:d7:15:36:02:04:01:6d:c8:cd:ac:83:67:
e3:f8:66:68:cf:4a:27:96:a5:9e:fa:f8:ac:5c:45:a0:3a:7d:
f3:4c:04:6a:8d:41:51:5d:3b:85:e5:4c:4a:d8:83:45:e9:55:
2f:d1:88:15:9e:18:4e:cb:38:4e:f6:05:c2:2c:67:c5:3c:11:
cd:3b:c7:5d:b2:3a:22:7d:c0:47:57:fe:e3:c3:9c:03:97:2d:
05:88:5e:6e:66:84:e8:76:c9:54:f3:54:b0:6c:24:6b:83:eb:
4c:2e:5b:eb:44:7f:54:6b:ae:a6:ad:65:bd:21:e4:c6:a0:67:
b2:f0:0b:0f:64:ca:b6:85:79:c6:9b:0f:fe:c5:22:e2:48:17:
1f:fa:04:25:d8:c8:5b:99:be:9a:33:78:6d:aa:b3:cc:8e:6d:
bd:0e:91:27:b1:d4:c5:bd:35:bf:0c:82:c9:96:86:a5:e7:8e:
67:c9:5d:f3:83:d9:e0:29:75:d6:e7:c1:ca:c0:a1:4e:ad:19:
f6:9a:4d:b3:2c:0f:61:9e:63:95:18:ba:01:2f:fa:01:d4:4f:
96:04:90:74:60:7d:a6:e6:75:1c:4f:0d:0b:85:35:b7:0e:e4:
8d:dd:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org