Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/TsxXTFeFRMGNSAaCHXjFHceClvI.roa
File: TsxXTFeFRMGNSAaCHXjFHceClvI.roa (raw, json)
Hash identifier: d1lCDR/ngsUkynhbbOgBQ24etCChOjHgL9zgRHV6RaE=
Subject key identifier: 4E:CC:57:4C:57:85:44:C1:8D:48:06:82:1D:78:C5:1D:C7:82:96:F2
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 0185701EEEA9CBDE73975785647A8FBE41B5
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/TsxXTFeFRMGNSAaCHXjFHceClvI.roa
Signing time: Mon 02 Jan 2023 01:35:53 +0000
ROA not before: Mon 02 Jan 2023 01:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204741
IP address blocks: 185.242.24.0/22 maxlen: 22
185.242.24.0/23 maxlen: 23
185.242.24.0/24 maxlen: 24
185.242.26.0/23 maxlen: 23
185.242.27.0/24 maxlen: 24
185.242.26.0/24 maxlen: 24
185.242.25.0/24 maxlen: 24
2a0c:ba80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:ee:a9:cb:de:73:97:57:85:64:7a:8f:be:41:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Jan 2 01:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ecc574c578544c18d4806821d78c51dc78296f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:25:91:db:09:d6:12:f0:2f:fe:71:02:d0:
a1:22:42:33:0c:85:00:15:77:bc:92:a4:da:1e:64:
c3:84:df:c5:e6:67:87:a2:21:07:2e:80:36:fd:53:
9a:f2:19:5c:0e:c5:5d:fc:ff:2e:fe:63:99:d2:b9:
74:7a:89:48:68:dd:ed:eb:58:7d:35:4f:f8:8b:78:
9f:3f:db:18:63:87:47:de:81:ab:ee:3e:98:15:23:
7f:14:d1:89:c8:2a:29:81:ad:40:7e:86:bd:68:56:
33:cb:9a:dc:50:8b:3f:15:f0:ce:89:43:c6:10:05:
07:10:a4:bf:f9:af:c4:a1:4f:db:56:2c:0e:5c:1c:
44:19:70:28:f1:60:86:32:a9:e0:28:06:a4:24:c5:
55:21:81:d1:7b:9c:27:c9:80:3d:2f:5b:f3:80:d8:
ee:e3:4d:37:7d:1c:63:0d:6c:37:0e:9d:83:cd:68:
29:86:53:d9:dd:e6:a8:6a:2f:a3:7d:d7:ed:13:03:
55:10:10:8b:a1:8d:ad:6a:c8:d2:3a:98:4f:cb:4d:
db:d4:e2:07:23:fe:88:c3:a7:77:81:6b:39:f9:5f:
a7:80:9c:d7:02:fa:0e:06:04:ec:80:13:1f:0f:3f:
e4:40:e7:2b:f2:94:0f:ad:3b:0d:72:2c:c0:28:ea:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:57:4C:57:85:44:C1:8D:48:06:82:1D:78:C5:1D:C7:82:96:F2
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/TsxXTFeFRMGNSAaCHXjFHceClvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.24.0/22
IPv6:
2a0c:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
39:b7:56:ae:90:97:7a:c2:a0:5a:de:fb:2c:9b:a2:fe:9d:a4:
a4:06:c7:ec:9b:03:b1:8a:37:a6:9f:bd:80:27:70:b4:7f:0a:
fa:4f:5b:76:3d:5a:95:35:7d:6f:26:03:09:3d:fa:5f:78:0e:
1c:78:ce:7f:16:0f:35:1f:1f:20:6a:71:16:df:97:33:05:b2:
2e:16:a9:15:e4:96:f3:11:7e:83:91:91:51:24:e9:53:23:7c:
73:13:21:65:71:62:fc:e9:df:7a:7b:49:56:e8:90:42:95:a7:
de:4c:22:c7:e4:32:ef:b9:e3:3a:b5:9f:8d:1b:06:82:b3:b1:
8d:d3:81:3c:8b:e8:a6:cf:f5:7f:53:69:5c:bf:67:db:9a:15:
09:d2:57:c6:5a:06:ef:7e:4a:b5:82:e5:a5:38:53:77:e5:ca:
57:dc:2a:c7:a3:6e:a3:5a:7c:c3:88:8a:f0:57:1e:da:cc:1e:
97:eb:0d:a5:79:d8:34:1c:a6:86:86:e4:d0:1d:37:46:20:6c:
94:56:bc:5d:f0:9e:ae:b8:cd:33:2f:e1:28:51:72:7f:77:26:
78:72:f7:12:47:c6:9f:14:44:8b:2c:de:0a:b5:74:5a:bc:53:
fe:a9:1a:ef:f1:24:90:62:c8:02:5d:49:09:b1:a9:d7:69:49:
3f:70:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:27:12 2025 by rpki-client