Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/tJKiaR--6gly9UxJdA8bG9gikdE.roa
File: tJKiaR--6gly9UxJdA8bG9gikdE.roa (raw, json)
Hash identifier: /ZGdNoicJcPKnYrDEfXREbM7HRKTYjN6HyCmf3lTYSw=
Subject key identifier: B4:92:A2:69:1F:BE:EA:09:72:F5:4C:49:74:0F:1B:1B:D8:22:91:D1
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01826E7F276013566C0EF8B4EC017519AEA2
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/tJKiaR--6gly9UxJdA8bG9gikdE.roa
Signing time: Fri 05 Aug 2022 14:53:23 +0000
ROA not before: Fri 05 Aug 2022 14:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 185.172.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:7f:27:60:13:56:6c:0e:f8:b4:ec:01:75:19:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Aug 5 14:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b492a2691fbeea0972f54c49740f1b1bd82291d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:1a:8e:f8:a8:1b:0c:27:46:03:14:97:81:
8a:bd:8a:ed:6e:1c:a1:db:f4:38:c0:af:15:12:3e:
a6:66:40:31:89:16:39:90:34:7f:2d:b0:6d:a4:65:
40:f0:a8:4b:dd:ea:3a:a0:81:97:9f:45:6a:17:55:
47:e0:b8:14:c2:fb:d6:df:c2:e7:7f:57:86:9a:9e:
0b:52:b4:6f:83:d3:7c:d4:37:f1:59:de:1c:87:3c:
79:03:5b:c5:62:ca:14:17:13:3a:57:2c:f4:ba:8b:
04:e2:4e:c0:00:a2:74:50:68:fd:e9:38:56:f5:57:
cd:e7:f0:c1:20:c1:a7:a7:25:cf:df:c4:8d:6b:33:
4c:f6:6e:3a:9d:82:2c:ad:cd:d0:42:f8:27:e1:d6:
93:60:0b:74:2b:d1:1b:21:e0:f6:75:62:13:9f:ba:
5f:76:2c:38:7b:a2:2a:13:f5:41:b3:f6:49:6e:9a:
dc:49:c0:3f:7c:0a:9c:eb:49:f0:43:61:47:8b:b2:
da:7b:95:ed:87:66:dd:c9:16:04:58:f9:cb:d3:01:
92:b9:f1:3c:c8:48:7a:2f:12:d6:d8:04:82:29:eb:
94:a7:c7:42:ea:17:c2:51:db:1c:a8:07:d6:83:c2:
23:09:10:40:be:97:3d:e8:24:32:53:6f:c6:51:63:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:92:A2:69:1F:BE:EA:09:72:F5:4C:49:74:0F:1B:1B:D8:22:91:D1
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/tJKiaR--6gly9UxJdA8bG9gikdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e1:e0:f5:f6:56:1e:29:39:fc:df:65:82:51:98:d3:f2:05:
9e:9a:3a:5b:c4:9a:d5:b5:50:99:bc:f2:38:13:b4:8a:96:66:
7a:0a:94:f3:93:22:ca:51:a0:b0:fb:a5:eb:fa:4e:fc:3b:b6:
95:39:e3:1c:64:3f:d0:d9:4e:f5:d8:32:34:e6:9c:a9:0e:16:
dc:ad:9f:5f:26:fb:01:b5:f3:3e:b4:37:8d:a0:8f:6b:9c:16:
49:c6:91:e0:35:76:54:14:96:18:b6:00:d2:2d:1f:ce:a6:e8:
32:00:3b:8c:33:85:55:b7:cc:a6:f0:3b:01:29:f5:00:23:73:
5e:1d:0e:f1:72:bc:ed:3b:c5:2c:d2:6f:4c:5b:7b:cb:e3:68:
12:7e:08:b4:77:82:fb:c4:4d:38:80:f5:9d:24:f2:55:4c:cd:
81:ed:c9:1b:14:4c:9c:24:95:de:fb:a9:b2:6c:71:66:2e:cf:
27:a2:74:72:90:a8:a6:97:b6:6c:35:34:34:99:da:0e:56:ea:
84:14:5d:0f:d0:62:f7:3e:42:53:62:43:cf:8f:7d:dc:97:99:
6c:db:c4:f9:c6:05:f6:0b:2c:4c:6f:6d:3a:3b:45:35:37:38:
b1:c9:d1:e1:26:86:90:f0:a9:73:d8:c5:cb:fb:ba:12:32:5e:
a3:a8:86:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:37 2025 by rpki-client