Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/TQK3TiYLK2g4YmLEsujFieuBuIA.roa
File: TQK3TiYLK2g4YmLEsujFieuBuIA.roa (raw, json)
Hash identifier: 11T/sCwrK0oGGZGjIfxbGmPU3jEE9GmTGgkOVINHKwE=
Subject key identifier: 4D:02:B7:4E:26:0B:2B:68:38:62:62:C4:B2:E8:C5:89:EB:81:B8:80
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 157AF7FE
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/TQK3TiYLK2g4YmLEsujFieuBuIA.roa
Signing time: Sat 01 Jan 2022 03:55:05 +0000
ROA not before: Sat 01 Jan 2022 03:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203675
IP address blocks: 185.82.108.0/24 maxlen: 24
185.82.111.0/24 maxlen: 24
185.82.108.0/22 maxlen: 22
185.82.109.0/24 maxlen: 24
185.82.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360380414 (0x157af7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jan 1 03:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d02b74e260b2b68386262c4b2e8c589eb81b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:8f:77:43:15:93:05:ad:be:1e:5c:d8:23:
a8:e7:9c:cc:97:1b:c5:37:35:91:3e:24:c7:31:c6:
cc:d9:d5:29:50:d5:04:63:58:39:c9:fa:8c:e7:bb:
e2:9c:25:5b:b7:64:b0:9f:bb:3b:a7:f3:1e:53:d3:
66:9b:2e:6d:70:4b:9e:72:78:47:4c:cf:3f:de:93:
a0:b3:0e:27:c4:82:25:48:a7:da:06:60:11:d1:b3:
86:fc:6e:53:69:5a:8d:d8:40:cc:e6:b4:65:bc:3c:
c3:a0:cf:c4:92:ff:ad:0b:6e:bc:6c:6c:8d:4d:c6:
2c:06:10:8a:13:6c:75:4b:67:94:5c:bb:a3:d3:07:
26:5c:d9:bc:8d:34:52:8d:a2:db:d1:96:a0:56:81:
59:fb:c0:85:f1:22:f4:cd:c7:d0:ac:ed:9a:4b:06:
e6:05:0d:b2:69:1d:48:33:7f:d8:d7:d7:a0:cc:59:
ab:b2:51:cf:77:49:64:99:ea:8e:fe:80:eb:88:cc:
10:78:16:86:be:66:73:47:a5:1c:17:9d:24:f4:7c:
fa:37:8c:cf:27:55:78:73:c3:1c:ff:91:1f:06:79:
ed:52:1e:b8:07:d9:cc:42:48:79:13:e2:72:95:34:
3b:6e:a4:0f:31:25:22:87:20:0d:2b:38:3d:ab:3f:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:B7:4E:26:0B:2B:68:38:62:62:C4:B2:E8:C5:89:EB:81:B8:80
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/TQK3TiYLK2g4YmLEsujFieuBuIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:c2:2a:02:50:fe:75:e4:82:19:ab:72:20:9d:20:40:e4:41:
66:f9:88:a9:a1:89:d9:e0:e1:23:4f:a0:b4:f7:43:4d:d7:ff:
48:5b:8e:ca:b3:f6:4c:b9:11:cc:bb:11:11:62:37:6c:15:2a:
cb:ee:72:cf:3b:67:5d:a4:7d:34:8b:12:3a:91:e9:1a:2f:fd:
69:d1:9e:d5:8a:62:a7:02:7c:4f:59:2e:83:b4:52:a2:69:59:
c6:69:38:31:4e:bd:41:90:92:c2:bc:e1:88:e0:73:63:06:1b:
b5:2b:d7:65:99:1f:89:46:88:b8:85:2f:57:1b:1d:70:b2:0c:
31:75:c0:a8:15:00:67:00:00:50:c4:c5:a5:be:f1:86:96:d6:
10:9a:71:70:64:28:96:51:82:cd:e8:9a:92:f8:93:53:70:f4:
38:ed:c1:91:d9:e5:68:31:de:97:47:3e:db:47:33:61:8e:73:
ad:54:4a:c0:45:2a:d9:4e:d6:bc:f8:a0:b9:b5:5c:1a:72:98:
84:be:07:6d:cb:e1:4b:67:04:a6:cd:de:47:ab:37:9a:39:9b:
4f:41:6b:14:a6:a3:d6:66:04:e0:f2:13:60:30:0c:0b:75:9c:
9b:8b:9e:21:77:78:4e:fc:4c:a7:33:6f:22:a9:6e:2d:7a:a9:
2c:ea:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net