Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/TT0XyvRT3XHOsKkGYMMh2KLl8is.roa
File: TT0XyvRT3XHOsKkGYMMh2KLl8is.roa (raw, json)
Hash identifier: H0Inif31t0xZP9GzkTXVx1ONCO8Jw1eOTMicdmmp0jI=
Subject key identifier: 4D:3D:17:CA:F4:53:DD:71:CE:B0:A9:06:60:C3:21:D8:A2:E5:F2:2B
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 048FBEB4
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/TT0XyvRT3XHOsKkGYMMh2KLl8is.roa
Signing time: Sat 01 Jan 2022 14:05:24 +0000
ROA not before: Sat 01 Jan 2022 14:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209900
IP address blocks: 45.65.88.0/22 maxlen: 22
2a09:fe00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76529332 (0x48fbeb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Jan 1 14:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d3d17caf453dd71ceb0a90660c321d8a2e5f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:57:01:69:59:40:a2:00:49:c6:9a:ca:73:
be:83:e1:d4:59:18:c2:42:fc:6b:64:67:42:2d:76:
a3:ed:71:7b:fa:72:bd:74:46:e4:25:1a:f5:af:8b:
08:04:45:ef:e4:28:83:7b:f1:d1:28:ed:1a:00:23:
2d:8c:a6:30:6f:9d:c7:0a:b1:80:16:c3:00:a7:e7:
9d:92:2f:d2:c5:ea:93:50:43:47:1c:2c:4e:d8:8f:
24:c0:65:95:c3:2b:93:8b:d5:4f:13:59:72:6f:43:
9f:b8:50:3c:30:93:62:a6:7c:30:2f:e1:3e:44:77:
38:ad:43:cb:78:90:76:d8:9e:89:b2:a0:43:17:51:
94:30:52:c7:1e:b6:62:ad:a6:0f:50:3c:dd:ac:41:
07:d3:f1:ac:c1:c7:b1:88:aa:0b:f8:e6:b1:05:ed:
02:55:97:fd:41:6c:bc:1f:9e:e2:74:f8:35:df:85:
83:87:b0:5c:e0:b5:ff:74:01:40:b1:c8:a7:31:d8:
08:5f:3b:0b:db:54:e2:db:8d:32:ef:15:92:bf:e5:
9d:30:47:d1:af:ea:79:75:bc:81:c5:55:9c:17:57:
d6:c1:0b:c6:ed:7e:c0:97:ae:b8:a5:2f:49:cd:9e:
26:f0:60:6d:d7:a9:92:40:bd:7d:57:5c:8a:45:48:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:17:CA:F4:53:DD:71:CE:B0:A9:06:60:C3:21:D8:A2:E5:F2:2B
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/TT0XyvRT3XHOsKkGYMMh2KLl8is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.88.0/22
IPv6:
2a09:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
9d:3d:66:ce:2c:75:e8:4c:68:3f:c2:49:90:9d:d6:73:64:ab:
11:d5:47:9f:d1:22:01:f5:2b:37:53:52:85:f3:22:0b:4e:7b:
28:94:46:e4:85:7b:35:49:62:86:53:f0:a4:da:1c:39:5f:18:
d7:da:47:6e:15:97:d2:47:e1:29:d0:25:ca:b1:cf:52:9c:02:
b3:d6:a4:eb:3b:f7:bd:a9:37:ff:e8:9f:1b:69:ef:ab:6b:4e:
6e:16:51:d0:53:c4:20:2b:13:d0:d8:84:29:e1:73:77:c7:cf:
15:f3:ba:e7:51:7b:c4:27:de:e7:39:64:96:33:4a:e8:e8:86:
6c:fd:0e:53:2e:00:9b:30:d4:a4:56:ca:bf:75:4b:67:14:aa:
4f:9e:e4:8a:9a:90:56:c5:4b:9f:08:e7:7d:05:66:36:bb:c2:
32:5e:0e:d9:b1:2f:9a:2a:1f:9d:75:2c:f0:19:b3:8c:9a:57:
b3:54:21:8c:40:c3:3c:72:87:58:88:83:e2:a8:f7:28:a6:40:
28:ce:8c:dd:59:fe:47:18:4a:0c:a6:fc:09:8f:3d:68:5e:d6:
e2:ac:23:6f:81:ed:48:4e:07:d9:a6:aa:6b:11:73:92:0e:30:
46:76:21:20:fc:87:88:a4:4d:4e:5d:5f:c3:8b:83:c3:47:6d:
96:76:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:49 2025 by rpki-client