Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/tGJbXn6nwTaKn7PqnKD2h0QUOoo.roa
File: tGJbXn6nwTaKn7PqnKD2h0QUOoo.roa (raw, json)
Hash identifier: qHToFtMcfYCvpO9XtMcB4ukIw1n6WmKAt8PDyUTM9nA=
Subject key identifier: B4:62:5B:5E:7E:A7:C1:36:8A:9F:B3:EA:9C:A0:F6:87:44:14:3A:8A
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 32BFEFDB
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/tGJbXn6nwTaKn7PqnKD2h0QUOoo.roa
Signing time: Sat 01 Jan 2022 11:55:04 +0000
ROA not before: Sat 01 Jan 2022 11:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8934
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
93.93.144.0/21 maxlen: 24
2a02:9c0::/29 maxlen: 29
2a02:9c6::/32 maxlen: 32
2a02:9c7::/32 maxlen: 32
2a02:9c0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851439579 (0x32bfefdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 1 11:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4625b5e7ea7c1368a9fb3ea9ca0f68744143a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:12:75:3e:96:a0:bb:c7:74:74:cf:91:2b:
27:48:12:f7:f1:a6:44:23:d2:56:d2:ae:17:0e:70:
65:5d:43:bf:29:9a:20:bd:6c:7d:e2:26:2e:df:bf:
6e:7a:a0:38:42:20:33:0d:89:4b:3f:92:80:92:29:
bb:51:5a:28:d8:59:9b:4e:ad:c5:2b:09:06:36:e6:
1e:1c:cd:f7:ac:3c:cb:fe:c4:cd:00:78:f9:b6:b6:
e8:23:6d:42:e4:4b:12:fa:4b:50:28:ac:ad:82:ca:
2a:81:25:f7:8a:fa:14:ac:8e:2f:84:ec:27:93:21:
2a:ed:70:a5:33:e0:a7:dd:2d:89:00:57:1f:df:cc:
db:11:43:fb:bc:84:8c:d5:44:f5:09:f2:1f:32:4f:
0e:38:8a:a0:1c:57:bd:8f:f7:cb:ec:4c:fb:1e:b4:
65:61:d5:32:2f:f6:f3:3c:ba:a3:69:b8:88:de:0d:
5c:de:1e:fd:68:04:48:57:be:fd:ed:f3:6a:39:43:
0b:ee:b7:fa:9f:1a:18:e2:fa:e1:a6:a5:b0:81:36:
4b:5c:9c:da:11:72:50:87:53:f9:c8:77:73:a4:fc:
6f:f9:2b:b7:ee:b6:70:ef:51:71:dd:2f:2f:46:96:
bb:06:70:99:c9:47:62:d2:8d:c0:76:af:ee:24:e0:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:62:5B:5E:7E:A7:C1:36:8A:9F:B3:EA:9C:A0:F6:87:44:14:3A:8A
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/tGJbXn6nwTaKn7PqnKD2h0QUOoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.144.0/21
185.109.120.0/22
193.188.64.0/19
IPv6:
2a02:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:12:78:b5:e3:95:2f:a8:27:c3:76:f9:ff:74:2c:1e:0a:83:
83:3d:76:05:50:a4:81:c9:a3:43:a1:a0:ec:73:2f:03:dc:3e:
5d:d2:59:80:56:0b:41:d4:23:e2:05:d9:a6:f8:e0:20:12:38:
e7:21:79:11:71:40:5c:99:5c:c1:77:fa:73:1f:01:7b:ce:fe:
d4:c8:d3:79:ef:2c:5c:90:18:9d:70:2e:bb:7e:b8:eb:cd:76:
36:bb:9f:cd:ff:54:2a:19:b4:01:bc:8f:2a:3e:35:9c:b3:66:
62:cc:01:b0:d0:ae:73:c5:6c:22:b9:cb:75:fc:c8:c6:df:96:
36:98:46:5d:dc:d7:8a:d1:a1:7f:15:16:d3:e3:f5:68:c5:43:
18:24:9a:ef:f3:b8:b8:d3:8d:ac:b6:3d:27:6a:18:d5:bb:fc:
6d:09:0f:5d:93:1b:58:fc:99:8d:eb:59:f7:69:f7:d5:1e:7b:
d5:41:bf:16:de:eb:ef:7d:8f:97:b1:9f:5a:83:51:a1:4d:76:
b6:e3:16:32:55:76:80:40:13:a9:6b:a2:ab:c1:b7:f0:99:1a:
50:28:9a:c2:81:91:8c:b4:0c:73:3e:60:01:be:cc:6f:ae:38:
74:f7:7c:1a:a5:66:70:72:73:29:21:fa:bc:2e:85:76:a4:fd:
b3:cb:95:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:23 2023 by rpki-client on console-fra.rpki-client.org