Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/TJlQ-cfFdGn0b1wdSI-t8H_7kfM.roa
File: TJlQ-cfFdGn0b1wdSI-t8H_7kfM.roa (raw, json)
Hash identifier: 0cRRjMXQuuhcZ66rjym0uonc3Hc8yffeGFtzN8bYL/o=
Subject key identifier: 4C:99:50:F9:C7:C5:74:69:F4:6F:5C:1D:48:8F:AD:F0:7F:FB:91:F3
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 1051FD06
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/TJlQ-cfFdGn0b1wdSI-t8H_7kfM.roa
Signing time: Sat 01 Jan 2022 04:57:05 +0000
ROA not before: Sat 01 Jan 2022 04:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60350
IP address blocks: 195.189.178.0/23 maxlen: 24
185.45.180.0/22 maxlen: 24
193.148.6.0/23 maxlen: 24
91.221.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273808646 (0x1051fd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 1 04:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c9950f9c7c57469f46f5c1d488fadf07ffb91f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:0a:96:0f:5a:d6:53:e3:5d:05:de:7f:b3:
f3:94:72:ff:cb:2d:ce:59:1b:fa:56:d7:ef:3e:fd:
7d:64:5e:99:47:f4:8a:05:2f:06:76:9d:bf:64:95:
db:ad:dd:49:6e:88:e3:79:8c:ea:37:1f:f6:75:b9:
0e:67:3f:e4:a0:29:b0:83:47:f2:fc:a4:7e:c6:dd:
05:e3:07:aa:b6:70:4d:47:b5:cc:4a:cb:74:ce:b1:
7e:20:f6:f3:41:4f:71:93:39:0e:0a:d3:57:e7:8f:
ce:2f:3d:83:4c:b9:c6:f3:3d:b1:08:66:a5:aa:29:
05:f3:d2:e5:36:f9:09:fd:da:c6:8f:fb:46:9f:28:
02:78:9c:4a:03:2a:42:6a:c3:e0:64:8f:ac:89:dc:
34:fa:12:74:cc:f9:a6:49:88:c2:40:ed:19:39:53:
b5:b1:8c:66:50:f0:6b:ac:f7:15:9e:80:27:6e:22:
0e:53:e7:c8:be:2a:e0:10:44:eb:06:7c:45:20:fc:
23:a6:17:bd:2d:79:73:30:5d:ff:36:b3:2d:ef:4c:
e8:c0:67:ef:30:c2:d4:ec:9a:e9:d8:4a:98:6f:2f:
e0:7b:d6:00:95:59:aa:b6:9d:78:ce:22:40:87:6e:
b9:84:bf:8f:2a:22:08:d1:e9:b3:16:9e:07:9f:d8:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:50:F9:C7:C5:74:69:F4:6F:5C:1D:48:8F:AD:F0:7F:FB:91:F3
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/TJlQ-cfFdGn0b1wdSI-t8H_7kfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.146.0/23
185.45.180.0/22
193.148.6.0/23
195.189.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:24:4c:53:c3:74:15:2f:83:2d:88:9e:95:bc:60:c5:0a:9f:
4e:eb:13:14:cd:ba:47:08:b2:f8:88:53:b2:92:59:7c:a0:43:
0a:49:0c:19:be:6b:dc:bf:a9:5c:cc:ea:c4:0f:d5:5b:bf:06:
ce:95:f2:b8:5b:de:f0:d6:17:09:97:17:a7:e7:14:20:00:e9:
8a:37:3e:46:b3:6c:f6:39:e4:a4:b7:91:57:8d:f7:17:a0:1a:
52:c7:08:f5:c6:53:95:e6:66:b5:b9:83:ee:86:6a:52:df:5b:
c3:94:eb:2a:18:4b:08:ae:2b:85:5a:83:72:7a:ee:f6:f4:70:
c2:00:0a:fe:ea:50:bc:b0:fb:2d:35:66:57:65:62:9e:98:4b:
5e:ad:b8:b3:ba:44:0d:4a:9e:fb:be:61:16:20:be:58:d7:ff:
95:2a:6d:7a:cd:52:6d:fd:c5:fc:cf:10:79:66:51:8d:59:78:
dd:4d:b0:97:65:2e:1e:8c:8d:c3:df:d7:1b:3e:7c:80:8b:0f:
5f:dd:0b:19:12:1b:ba:e6:f6:c5:92:dd:6d:15:ba:ed:a1:82:
93:e7:99:1e:d6:c7:24:9a:34:bf:a7:2f:63:f4:de:d3:26:99:
e2:f9:a1:a3:06:c9:2b:df:3c:46:32:0b:83:60:be:0a:4f:94:
a7:51:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net