Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Tjd1lOFgpD2uBGYxM2UJwH_21JI.roa
File: Tjd1lOFgpD2uBGYxM2UJwH_21JI.roa (raw, json)
Hash identifier: lg6uOrcun+CR+HuBZVi8urq5oR1Gtp1ef6Y7ePMuGR0=
Subject key identifier: 4E:37:75:94:E1:60:A4:3D:AE:04:66:31:33:65:09:C0:7F:F6:D4:92
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 08907026
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Tjd1lOFgpD2uBGYxM2UJwH_21JI.roa
Signing time: Sat 01 Jan 2022 03:51:00 +0000
ROA not before: Sat 01 Jan 2022 03:51:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58328
IP address blocks: 188.123.96.0/21 maxlen: 21
188.123.104.0/23 maxlen: 23
188.123.106.0/23 maxlen: 23
188.123.108.0/22 maxlen: 22
188.123.116.0/23 maxlen: 23
188.123.118.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143683622 (0x8907026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:51:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e377594e160a43dae046631336509c07ff6d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:38:9b:e7:55:2d:17:91:50:d6:8b:24:06:
ba:95:a2:bd:14:14:6a:03:9f:65:cf:4c:04:22:ab:
b5:a8:89:04:79:55:ca:08:36:e9:9b:84:c5:e9:3e:
22:96:75:06:08:a1:d7:d1:d5:1f:9b:af:ae:dc:ba:
08:b0:b2:31:af:1f:77:a0:c4:5c:36:7a:a1:77:b9:
6c:b7:74:0a:ae:30:96:23:4f:23:f9:34:31:2a:c8:
8c:bc:13:34:0c:c6:f5:57:49:8f:49:ed:46:f1:cc:
9e:d1:d7:a7:fc:a5:3b:da:6b:ed:08:76:a2:fe:d0:
84:dc:df:ff:ec:f2:07:e8:65:69:61:bb:86:bf:5d:
a4:4e:e9:bf:5c:f5:c8:20:15:7b:08:43:8a:ee:25:
2c:1d:3e:62:96:10:08:7f:f7:49:d0:76:4b:b8:fe:
d2:bb:f1:22:b8:4f:b5:09:45:8e:0f:77:df:fc:6b:
31:d6:9f:77:34:8d:47:06:b8:9d:2e:e0:ac:b5:96:
27:61:c8:0b:72:57:ca:de:c3:e5:f0:18:06:39:d1:
bc:da:32:da:90:61:8c:a9:b2:87:92:72:1b:57:65:
d4:5f:50:71:92:47:00:68:e3:fd:b1:f4:60:93:cd:
5f:e2:b3:d3:05:6e:20:bd:70:9f:04:06:fa:76:3b:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:75:94:E1:60:A4:3D:AE:04:66:31:33:65:09:C0:7F:F6:D4:92
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Tjd1lOFgpD2uBGYxM2UJwH_21JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.96.0/20
188.123.116.0/22
Signature Algorithm: sha256WithRSAEncryption
60:6d:e1:27:bb:b9:56:a0:b3:23:a5:a5:a4:33:77:62:9f:0e:
86:d0:9c:40:3e:b6:1d:94:40:8a:21:ad:79:9c:27:f3:6f:fc:
32:19:85:89:b3:a3:cd:a5:52:ce:77:11:3f:85:bc:e1:3d:f3:
c0:e7:7e:b9:be:f7:19:0a:5e:07:bc:e9:a6:7b:e3:01:66:59:
d3:52:ce:f6:6e:09:64:21:fa:5f:78:21:55:31:fc:a4:1e:5d:
1c:29:c1:44:cf:38:0b:ca:b1:d1:a4:c5:db:4c:de:be:25:41:
3c:b1:61:13:e5:e9:6e:11:02:24:79:92:3f:14:92:1a:93:91:
ac:59:35:2a:5a:a0:df:91:bc:e5:a4:1b:71:07:93:c7:99:2b:
ad:41:3e:6a:45:68:d1:7d:0e:4e:1f:5f:f2:2a:d1:27:ff:91:
d4:44:6f:19:3f:3d:06:e2:24:29:73:a3:15:a5:30:2f:79:7f:
fc:c1:16:c9:ec:09:69:1e:3c:26:35:5d:df:e0:a2:45:53:f9:
1d:fe:15:13:db:ac:13:7b:14:2d:61:0c:ba:9f:b2:59:ae:b5:
fa:c9:5d:cb:18:17:7e:c4:c0:d3:ac:63:f7:e5:e3:20:3b:f7:
77:38:46:06:49:52:dd:b9:ae:25:d0:e6:1c:85:40:65:cc:d8:
78:83:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:28:14 2025 by rpki-client