Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/TU9jL4c6fZi3KVs4ogIScmLDnBw.roa
File: TU9jL4c6fZi3KVs4ogIScmLDnBw.roa (raw, json)
Hash identifier: 9IKFzYm0bZHl0XtmhtQWkST1nGWvgMNyUy7qLyZuJu8=
Subject key identifier: 4D:4F:63:2F:87:3A:7D:98:B7:29:5B:38:A2:02:12:72:62:C3:9C:1C
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01856E6FC2C7BAC08AC2AC5AF996B2BCF363
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/TU9jL4c6fZi3KVs4ogIScmLDnBw.roa
Signing time: Sun 01 Jan 2023 17:44:56 +0000
ROA not before: Sun 01 Jan 2023 17:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213281
IP address blocks: 217.195.148.0/22 maxlen: 24
151.252.216.0/21 maxlen: 24
45.155.140.0/22 maxlen: 24
2a0f:ff00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:c2:c7:ba:c0:8a:c2:ac:5a:f9:96:b2:bc:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Jan 1 17:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4f632f873a7d98b7295b38a202127262c39c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:23:d5:08:89:7b:57:17:f1:7f:94:c9:b6:
ba:6b:90:22:0b:64:86:bb:82:fb:cf:2f:e9:de:aa:
0d:5d:8d:b7:c0:e0:8d:bc:c0:8d:1b:c6:70:6a:0d:
8a:32:b3:e1:0b:fc:9f:bc:08:85:9c:e0:69:8f:24:
74:a9:5f:30:2f:b0:c6:3d:c6:7d:64:b9:e2:f6:fc:
74:b0:f0:7d:c3:5e:50:32:c7:4d:29:a6:1d:e7:9b:
94:93:f1:09:40:b6:35:4c:66:78:e2:f8:1a:f9:5c:
7f:f1:42:3f:27:af:ff:1a:d6:5e:7c:42:4e:8f:35:
7b:12:97:b6:32:f7:8c:bf:79:01:d2:cd:ec:db:5c:
8a:a2:85:98:3d:54:bc:d9:21:db:5a:ee:f1:48:0b:
74:82:a4:09:fe:be:2f:ee:78:34:4f:17:f9:4a:f0:
c5:5c:a5:13:9f:fd:82:52:cd:01:a4:8c:e1:1b:45:
3b:b3:ed:b6:fb:74:fc:19:17:ed:17:36:8b:78:53:
8d:dc:a2:72:e2:01:45:39:80:61:1b:42:49:3f:f0:
a4:04:94:49:d3:31:b6:b1:38:39:ce:97:24:a3:d5:
fd:80:58:ce:66:63:82:93:dc:2f:14:2d:81:f5:de:
45:f8:13:3b:14:2c:4e:93:f1:b0:39:c8:b4:8b:85:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:63:2F:87:3A:7D:98:B7:29:5B:38:A2:02:12:72:62:C3:9C:1C
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/TU9jL4c6fZi3KVs4ogIScmLDnBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.140.0/22
151.252.216.0/21
217.195.148.0/22
IPv6:
2a0f:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
62:47:4f:fd:f6:97:e5:7f:11:5e:d4:21:63:6e:0f:5a:97:32:
cf:f5:20:9f:41:dc:ba:e5:37:c4:5b:b6:f0:23:e4:ef:5b:15:
45:39:d7:99:6d:16:31:5a:d5:4e:62:9a:9f:8c:41:17:7e:e3:
9f:b3:24:76:c5:31:29:8a:bc:27:6e:1c:4f:c5:ba:cc:a8:9a:
10:bc:10:d1:6b:f5:b4:e6:53:0a:6e:3a:3d:38:16:95:b1:33:
a6:21:4b:2e:cd:4a:13:3d:a7:ae:7d:7b:b6:c1:b8:d7:34:ab:
db:51:b9:ce:1d:fd:95:02:6b:ad:1c:97:77:9d:02:18:10:21:
6e:56:34:af:02:66:3a:35:32:85:02:e0:a3:1e:b5:37:03:c1:
81:3a:38:50:ab:30:fc:8c:2e:07:a0:1f:ed:c7:73:02:3c:c5:
0c:26:7a:4a:3c:a9:c4:5a:8c:f1:98:f8:f7:5b:51:df:56:30:
6b:54:aa:0f:c8:d3:4c:fe:c1:4e:d8:70:bd:ac:9d:95:00:2f:
ec:58:6c:bb:a5:0c:bb:9a:70:82:58:55:c4:a4:20:d2:9d:42:
c1:10:a6:98:3d:51:90:1a:c4:8f:08:a2:65:a4:d6:be:6a:6a:
83:2c:7d:f4:96:45:49:d9:d8:ae:20:5b:bd:4c:49:08:c0:3d:
0b:0b:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:31 2025 by rpki-client