Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Ty-ElrQfLe6iC7vBFhnkg4z-1Ok.roa
File: Ty-ElrQfLe6iC7vBFhnkg4z-1Ok.roa (raw, json)
Hash identifier: 2sDaiJr79n82KMwdpEfoGLALFIBWLPpI6SH1rZnKztE=
Subject key identifier: 4F:2F:84:96:B4:1F:2D:EE:A2:0B:BB:C1:16:19:E4:83:8C:FE:D4:E9
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0188566FC1C8D5E9F116D130FAFE972298B0
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Ty-ElrQfLe6iC7vBFhnkg4z-1Ok.roa
Signing time: Fri 26 May 2023 05:02:24 +0000
ROA not before: Fri 26 May 2023 05:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 82.115.213.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:6f:c1:c8:d5:e9:f1:16:d1:30:fa:fe:97:22:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 26 05:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2f8496b41f2deea20bbbc11619e4838cfed4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:d5:3a:4d:d1:22:c8:cc:4c:83:ed:84:b3:
8e:c2:a3:be:19:4c:d9:ea:5c:a1:d1:01:0b:5c:74:
8a:9b:8d:18:62:0f:68:e3:bd:64:8e:43:92:f7:73:
4b:b6:5c:2f:53:11:1f:6c:eb:ad:08:04:fb:0a:60:
c4:b8:1d:be:28:14:88:23:30:1d:d2:5d:4a:08:12:
f4:b3:2e:e1:d5:7b:fe:db:66:5d:8e:4e:16:79:12:
7d:67:b2:82:0b:69:89:45:d8:c6:e3:e7:3f:fa:3b:
10:21:22:9e:02:13:54:2d:fe:ee:32:36:44:24:99:
5b:a0:38:ff:52:18:aa:17:d4:f9:7a:c4:62:57:3f:
76:64:87:ca:6d:c1:c7:33:5b:23:66:59:16:bc:1e:
11:b7:f8:2e:da:82:36:e9:aa:46:6a:20:87:8f:31:
5f:63:72:95:c7:4f:8b:54:61:f1:36:30:8d:44:16:
b7:1f:1c:25:bb:1b:0d:3f:86:79:36:4c:5e:3a:67:
ab:9f:85:f4:bb:b1:a6:3e:90:5f:0c:f7:59:41:ec:
05:7f:2b:73:7f:70:af:79:2f:3a:1a:53:c0:bd:d6:
f9:44:63:e2:35:6d:29:80:2e:4c:b7:b4:4d:47:d9:
8f:9c:66:a9:e2:03:3c:4a:ee:d6:8a:41:8c:fa:a4:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:84:96:B4:1F:2D:EE:A2:0B:BB:C1:16:19:E4:83:8C:FE:D4:E9
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/Ty-ElrQfLe6iC7vBFhnkg4z-1Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cf:16:f4:8b:75:a9:1a:94:58:2e:8b:1f:60:cf:83:1c:10:
61:19:b9:a2:55:27:51:47:ba:9f:42:05:d4:4b:55:02:5a:55:
0d:61:fa:4a:d7:8a:20:f3:d0:be:cc:d9:de:16:e1:ea:f1:84:
3d:1a:41:26:36:7b:78:f2:b9:72:97:cf:b0:e2:4d:29:0f:42:
24:80:a4:de:58:50:90:9d:a7:5f:a7:6b:ef:bf:88:07:b2:92:
85:22:ad:41:7a:a4:30:6f:5d:28:e1:b9:dd:96:bf:c2:94:8e:
33:85:06:e3:0a:d0:4c:6c:34:d4:d1:16:92:40:c7:6f:ed:8b:
ba:e0:64:40:9e:f7:7a:1d:c7:41:f2:d6:f4:cf:8f:ba:09:49:
3c:3f:9b:33:84:39:51:b9:85:ae:06:5c:ab:85:c7:a4:15:ac:
0c:b2:0d:e5:7b:15:26:a3:5f:e9:17:25:70:aa:96:29:c5:c5:
fa:01:e8:cc:25:fe:50:84:42:40:b4:24:91:19:c0:3f:94:27:
03:f2:26:3d:23:98:c6:2d:8b:4e:d4:a1:2c:65:5b:d9:9c:86:
9f:5d:2e:f3:a5:2d:fe:ab:de:66:bf:f3:9e:3c:ce:4f:7c:fd:
c5:ae:a5:94:d8:35:28:50:a6:c8:fa:f9:50:85:35:df:e1:51:
de:ca:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:34:31 2025 by rpki-client