Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/TBauLaWV7V_eAJDC_KjKOETWLpg.roa
File: TBauLaWV7V_eAJDC_KjKOETWLpg.roa (raw, json)
Hash identifier: +E+Ja1ZfISguyZR3CHiE227mwbUVYtOaAjKUOt8T6BQ=
Subject key identifier: 4C:16:AE:2D:A5:95:ED:5F:DE:00:90:C2:FC:A8:CA:38:44:D6:2E:98
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 02964CA6
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/TBauLaWV7V_eAJDC_KjKOETWLpg.roa
Signing time: Sat 01 Jan 2022 04:57:28 +0000
ROA not before: Sat 01 Jan 2022 04:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207147
IP address blocks: 130.0.88.0/22 maxlen: 24
185.194.120.0/22 maxlen: 24
185.237.40.0/22 maxlen: 24
185.164.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43404454 (0x2964ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jan 1 04:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c16ae2da595ed5fde0090c2fca8ca3844d62e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:ec:ec:51:0b:21:c7:39:83:3e:5d:59:e0:
29:37:3b:70:33:ac:dc:6a:86:2d:1c:1b:ec:e8:57:
43:5a:a3:46:38:80:2d:c4:07:2a:e3:91:df:5b:1b:
d1:cc:7e:68:82:94:e3:47:eb:70:d7:78:2e:8a:a6:
9a:bb:86:85:85:e5:64:2e:7c:f5:ae:e1:d8:76:c3:
aa:f7:58:8d:2c:3d:1c:85:1c:ef:6b:4d:8d:c8:58:
e9:9d:af:01:fe:1c:88:74:6c:07:e5:47:1e:fb:2b:
cf:10:07:a8:21:8c:69:04:78:48:a2:f6:55:a0:ed:
69:e2:b7:d0:43:d7:27:12:15:52:87:6e:2a:f3:d7:
39:38:02:ff:e1:bd:85:85:85:f0:85:ae:c7:3b:98:
38:5b:07:14:9a:2d:b7:5d:ed:7e:d4:b1:2b:77:a3:
10:98:12:91:bf:99:90:58:49:91:a3:10:9f:3a:4b:
c1:5b:b9:f9:14:c9:31:41:53:41:ca:18:8e:6d:fc:
7f:52:d0:0c:d9:7a:1b:07:5c:6b:26:03:09:6e:1a:
3f:6e:43:d2:f6:e9:d7:2f:27:a8:53:7f:4f:ed:fd:
69:b3:ab:f0:53:d7:c1:34:c4:f0:1d:3a:42:bf:a1:
88:db:99:55:a8:93:55:80:b9:32:19:ae:a3:eb:d6:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:AE:2D:A5:95:ED:5F:DE:00:90:C2:FC:A8:CA:38:44:D6:2E:98
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/TBauLaWV7V_eAJDC_KjKOETWLpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.88.0/22
185.164.212.0/22
185.194.120.0/22
185.237.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:37:1f:45:cf:51:dc:f2:39:4f:09:52:03:a9:82:71:d3:19:
94:72:4c:9a:59:9e:e0:4e:f9:29:b6:01:b2:c0:5e:81:18:6d:
e2:6f:95:21:58:c4:12:16:3f:36:98:9b:a4:48:1b:95:8e:4a:
ae:5d:c0:54:ae:ba:8b:d9:a3:23:37:85:cc:99:93:48:6d:f9:
b3:ff:10:ce:6e:d4:d2:52:18:f9:3a:43:a4:98:5c:62:89:dd:
51:f6:e8:57:5c:d8:a2:ee:80:96:db:23:45:d5:84:44:25:37:
6b:9f:e8:17:bb:88:27:af:0e:91:2b:a1:76:b8:e2:7c:0f:ae:
80:f2:b1:18:61:3b:2d:fe:a4:fe:eb:69:83:93:ab:3c:b0:c8:
e3:b3:0a:d5:8f:35:ef:3c:4d:3f:a6:d5:2c:f5:24:87:7d:31:
39:5a:c3:25:b6:6d:b7:4a:1f:63:70:9c:96:60:d2:ea:b7:14:
02:f6:07:ba:65:31:6a:5d:cb:02:d8:30:b7:26:21:ce:93:a6:
8f:de:35:ab:b7:13:23:cd:49:e8:15:e2:34:47:c3:f1:a0:d5:
f3:77:7d:ef:43:42:82:f0:58:87:48:fc:7e:24:a9:7a:35:a9:
fc:c9:bf:3e:ee:3b:08:e7:27:6f:35:2c:b8:68:05:98:3d:ac:
09:fb:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net