Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TuXOLDNypkI2X7z5eu54M4kvPZs.roa
File: TuXOLDNypkI2X7z5eu54M4kvPZs.roa (raw, json)
Hash identifier: nqHD20OEOvoKxJMSxxfQCjtfOQraSWq3AhxY5NcP73o=
Subject key identifier: 4E:E5:CE:2C:33:72:A6:42:36:5F:BC:F9:7A:EE:78:33:89:2F:3D:9B
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018ADFF1CBCBE2E7E64C120EC00A2ED729D8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TuXOLDNypkI2X7z5eu54M4kvPZs.roa
Signing time: Fri 29 Sep 2023 07:57:59 +0000
ROA not before: Fri 29 Sep 2023 07:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 94.26.90.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:f1:cb:cb:e2:e7:e6:4c:12:0e:c0:0a:2e:d7:29:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 29 07:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee5ce2c3372a642365fbcf97aee7833892f3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:10:21:85:6e:5e:4b:46:c1:84:43:a6:d9:
a4:65:0d:8b:4d:50:3d:d6:5b:82:16:6a:c7:33:00:
ae:4b:a0:ac:18:f9:c1:ae:df:43:61:3e:aa:e6:49:
d8:a0:61:55:4a:94:79:62:4c:32:d3:a8:b5:60:ba:
a3:1b:04:07:05:c0:50:56:50:a9:84:87:0c:64:be:
6e:9a:66:9c:03:43:f3:c7:61:ef:b0:13:19:98:f0:
53:fd:40:21:64:37:87:40:2d:31:6d:af:dc:2f:1a:
12:5c:9c:0d:e3:6f:50:e2:32:cf:08:eb:bf:8a:ba:
fd:1b:ed:c9:80:85:3e:b8:e6:70:4d:f7:7a:44:ec:
fb:db:6c:9a:e0:b3:05:6e:dd:75:21:9b:76:d8:47:
e8:de:35:d1:e6:70:4a:2c:cb:51:d5:1e:64:40:bf:
8d:c8:50:1f:09:44:67:b3:64:a1:35:35:9d:35:ef:
9c:73:d6:70:30:8e:be:a7:71:5c:46:9b:65:00:57:
53:48:bc:ca:f5:27:6f:05:7f:b4:44:22:7b:6a:5f:
81:9a:ee:e8:b9:4f:73:0f:a1:9f:fa:82:b0:fc:06:
17:05:1f:9d:9d:84:91:e8:68:53:25:64:83:dc:ef:
5b:4a:3e:de:ab:2b:69:c9:62:5d:d7:91:b0:89:cb:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:CE:2C:33:72:A6:42:36:5F:BC:F9:7A:EE:78:33:89:2F:3D:9B
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TuXOLDNypkI2X7z5eu54M4kvPZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
78.159.131.0/24
93.152.205.0/24
93.152.214.0/23
93.152.220.0/23
93.152.225.0/24
94.26.90.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c4:9b:89:d7:54:9e:94:55:e4:7a:4d:9f:51:26:3f:08:ba:
47:27:80:00:bc:3d:3f:82:0a:82:85:90:8f:c0:67:43:22:3a:
0c:65:57:1a:b5:db:d6:08:3b:12:44:3e:9b:14:3c:c8:a7:00:
07:d5:a9:10:f9:39:14:30:a1:6f:bb:74:0e:e3:ae:c5:29:ce:
88:9c:fe:2f:b1:3a:00:69:ac:a4:bf:15:fa:4e:e6:e4:ac:b9:
0e:38:31:fd:d4:8c:12:2b:7c:32:d0:78:25:5e:1e:9f:dc:96:
b9:38:34:83:72:f1:0c:61:26:41:38:7f:d4:89:e4:b9:d0:92:
30:b6:f0:5b:8e:61:75:8c:b0:c5:f1:ed:b0:c9:e9:22:73:ac:
f5:bc:9d:63:7e:78:18:e9:96:e3:5c:9c:44:5d:d9:e8:76:74:
33:e7:2c:67:0b:f3:16:5a:7d:bc:9d:9e:66:44:89:19:bb:a5:
8d:fd:dc:6a:dc:c5:fb:e0:39:15:2f:1b:0b:0d:0b:b1:5f:73:
51:0a:90:80:b9:b4:f1:d7:a3:5d:7f:6d:a4:4a:74:20:ae:6a:
c0:66:28:a8:44:e8:7f:91:9e:5e:7c:3c:e6:78:7d:ff:90:1b:
d1:3a:45:58:ae:8b:95:5d:aa:8e:fb:19:02:d8:f8:89:72:5e:
1b:ab:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:09 2025 by rpki-client