Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tlxh2ZbNz84fg8p-52DPCAtpC0I.roa
File: tlxh2ZbNz84fg8p-52DPCAtpC0I.roa (raw, json)
Hash identifier: 2ARL8eOsdgnN/gekUiobMnB8ZBxGRuTihx9RBzEs2hc=
Subject key identifier: B6:5C:61:D9:96:CD:CF:CE:1F:83:CA:7E:E7:60:CF:08:0B:69:0B:42
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 38AA2F0F
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tlxh2ZbNz84fg8p-52DPCAtpC0I.roa
Signing time: Sat 01 Jan 2022 13:04:40 +0000
ROA not before: Sat 01 Jan 2022 13:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/19 maxlen: 20
85.115.208.0/22 maxlen: 22
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950677263 (0x38aa2f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 13:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b65c61d996cdcfce1f83ca7ee760cf080b690b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:be:af:20:94:fd:8b:7c:3f:59:7e:c9:d7:
96:ae:f9:09:96:07:5d:65:8e:13:0a:e1:9b:2f:42:
82:8a:df:ee:f2:22:cc:62:aa:a6:b8:76:f5:a8:30:
f8:e0:68:17:ec:3a:db:33:73:af:42:7b:55:e0:87:
6d:ae:ee:4c:53:06:ed:2f:5d:04:cc:d2:00:28:eb:
d0:bc:05:5b:cc:82:e2:2c:68:4b:1c:28:48:0c:5f:
f0:1a:0e:cc:dd:92:d3:2e:21:8d:b5:7e:7d:4e:54:
79:b9:10:76:e2:6f:bc:82:5d:c3:b4:ee:fd:44:34:
d8:b5:db:0d:7b:ec:ab:c5:5c:a1:7d:1b:32:37:c2:
0d:59:41:90:67:e4:04:3b:bd:9d:9a:81:61:af:66:
d9:3e:21:e6:1a:1d:f1:d1:8b:27:1c:ac:c6:1a:d4:
35:32:cb:3e:27:35:b8:44:e8:e4:0b:e6:21:e4:da:
2e:b1:ee:36:6d:1c:ba:7f:8e:1d:17:e7:a2:fb:c6:
bb:83:36:42:80:12:72:58:91:ab:ab:68:5b:29:23:
76:8d:b3:86:3c:c1:05:6b:e8:d8:ec:dd:09:01:e9:
73:bc:2f:8a:07:7f:70:b9:bf:eb:94:5e:44:a7:b9:
25:7f:cb:1c:cf:01:a6:3d:6a:91:dd:34:58:33:f6:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:61:D9:96:CD:CF:CE:1F:83:CA:7E:E7:60:CF:08:0B:69:0B:42
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tlxh2ZbNz84fg8p-52DPCAtpC0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.64.0/19
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:8f:5c:6b:f1:2e:32:06:3f:90:6d:4b:20:89:9d:56:07:8f:
07:55:03:f7:c0:33:ca:55:46:e6:f6:a0:c3:50:36:96:4e:08:
b9:e3:c8:fd:3c:07:86:93:5c:3e:f3:c4:39:73:93:59:bf:d1:
ed:ce:1a:15:60:94:08:79:72:2c:7a:f8:e4:58:d4:7e:78:dd:
fa:2b:aa:eb:60:f4:9c:bb:4a:b4:72:25:c5:80:f6:32:05:a9:
df:99:aa:a9:e0:6e:9a:76:c1:c6:cf:41:ba:24:08:97:64:47:
30:36:92:b3:73:ac:3a:30:fc:88:33:9d:1b:89:d8:7f:72:84:
80:43:27:9d:1e:ff:0d:10:00:de:1e:a4:6e:5d:8b:8c:3f:d8:
9d:42:55:ef:ac:f9:67:c5:1d:1a:5a:b6:e7:4a:e1:66:53:2a:
97:73:2d:76:c4:72:f0:72:20:57:87:be:14:65:6f:0d:bc:e7:
a3:ba:62:6f:2d:d3:05:49:ed:e5:3b:4d:e0:bb:6d:82:da:a0:
00:0d:d3:58:28:88:fa:5d:89:95:90:27:20:c2:7d:50:9c:63:
8b:1b:c4:1f:f4:21:55:ac:ba:fd:36:dd:31:3b:0d:21:d1:e9:
ca:68:71:b8:f3:69:18:1f:b0:fc:a1:46:98:d5:09:8e:a6:0e:
d9:9d:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org