Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/Xtda-BOYkMOGaWHHYE8mJZBM0DQ.roa
File: Xtda-BOYkMOGaWHHYE8mJZBM0DQ.roa (raw, json)
Hash identifier: qmoKmipxsivTVepcfKBSdnWZ4LZAH0NdyVIbBxxwBtg=
Subject key identifier: 5E:D7:5A:F8:13:98:90:C3:86:69:61:C7:60:4F:26:25:90:4C:D0:34
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 93B7BD
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/Xtda-BOYkMOGaWHHYE8mJZBM0DQ.roa
Signing time: Sat 01 Jan 2022 03:55:36 +0000
ROA not before: Sat 01 Jan 2022 03:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52177
IP address blocks: 194.26.208.0/24 maxlen: 24
2a12:5800::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9680829 (0x93b7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Jan 1 03:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed75af8139890c3866961c7604f2625904cd034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:72:4b:38:20:e4:28:43:f1:db:a5:bb:57:
d0:57:b0:03:16:94:2a:ce:d3:69:42:32:77:e4:9f:
d0:30:ea:ec:3c:ef:bb:67:30:c9:9e:7b:37:2d:d6:
8d:b7:58:a6:2b:c5:78:e0:85:21:6b:58:94:78:49:
42:18:e3:bd:d6:88:61:e7:20:8a:de:6a:38:57:a7:
62:9c:4d:55:e0:68:c6:c7:35:f8:29:71:d5:34:b2:
ac:13:80:9c:41:f0:c6:81:ac:02:94:63:08:fd:a6:
b6:a6:c9:11:36:02:7b:42:ca:b3:21:5c:28:ec:d8:
54:89:23:95:4e:d8:1f:1a:18:1a:0c:8c:58:c0:82:
35:7d:24:aa:88:9d:6c:96:f0:c8:b4:ab:c9:ad:26:
80:eb:ec:90:14:ea:25:59:9d:64:ad:46:97:8f:3e:
9b:f2:14:a5:f1:d0:6b:00:b4:58:41:0e:0a:b7:bc:
4e:33:40:57:12:b3:08:aa:06:b9:fe:5a:87:53:43:
38:19:a5:39:66:86:ae:9f:25:76:14:e3:b0:0e:01:
a2:3d:a7:c2:c0:3a:ce:6c:a1:79:ee:0d:2c:09:16:
61:81:fc:a1:a3:98:ed:96:83:5a:f1:53:07:f1:3f:
5f:dc:ce:df:6d:4d:d4:94:74:46:e5:32:cf:d5:fc:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:5A:F8:13:98:90:C3:86:69:61:C7:60:4F:26:25:90:4C:D0:34
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/Xtda-BOYkMOGaWHHYE8mJZBM0DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.208.0/24
IPv6:
2a12:5800::/29
Signature Algorithm: sha256WithRSAEncryption
2d:1b:d7:eb:5b:29:78:ee:05:41:10:86:04:e8:24:82:f7:24:
72:f9:20:64:f8:35:ee:14:83:8a:93:ae:13:b6:25:5e:1c:01:
27:dc:71:ee:4b:d4:fa:fa:ab:b1:08:60:8f:6d:6e:fb:4a:d5:
3b:d3:03:44:1a:d4:d8:5a:43:ea:53:6d:26:b4:33:50:3f:38:
0d:e8:79:15:99:8d:1e:f5:4a:19:4e:d1:86:1a:04:80:42:05:
0c:f5:cd:d5:c4:b0:37:cf:c1:b6:4b:eb:59:2f:54:59:1d:86:
98:23:92:69:78:bb:e1:18:45:4e:bd:42:98:60:60:49:73:13:
37:79:c5:6c:ee:7d:1c:c1:15:01:04:50:da:7e:d1:71:2c:89:
19:c7:a8:02:78:0f:fa:cf:cf:1b:a0:0d:ff:ac:64:45:9e:11:
1d:d0:74:d8:d1:22:64:cd:7e:2b:ff:78:2d:42:6b:1f:0b:a7:
2a:e4:00:02:8c:fb:87:21:52:1f:22:90:0b:ce:25:59:33:d3:
3b:49:f9:c4:2b:bd:27:30:a7:9b:6d:dc:be:35:c4:de:03:d4:
92:ad:93:68:52:06:46:da:6d:2a:75:e2:4b:ff:f2:e3:78:9b:
e8:71:c2:c3:fb:ba:7a:91:7e:3c:64:53:9f:a8:ab:ac:69:82:
95:4f:70:2d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAJO3vTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjU4NzNhZTIzNTBkMGUzZThjMzU1M2JmOTA2NDYxMTI3NjRlMWMwMB4XDTIyMDEw
MTAzNTUzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVkNzVhZjgxMzk4
OTBjMzg2Njk2MWM3NjA0ZjI2MjU5MDRjZDAzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfrcks4IOQoQ/HbpbtX0FewAxaUKs7TaUIyd+Sf0DDq7Dzv
u2cwyZ57Ny3WjbdYpivFeOCFIWtYlHhJQhjjvdaIYecgit5qOFenYpxNVeBoxsc1
+Clx1TSyrBOAnEHwxoGsApRjCP2mtqbJETYCe0LKsyFcKOzYVIkjlU7YHxoYGgyM
WMCCNX0kqoidbJbwyLSrya0mgOvskBTqJVmdZK1Gl48+m/IUpfHQawC0WEEOCre8
TjNAVxKzCKoGuf5ah1NDOBmlOWaGrp8ldhTjsA4Boj2nwsA6zmyhee4NLAkWYYH8
oaOY7ZaDWvFTB/E/X9zO321N1JR0RuUyz9X8v5ECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRe11r4E5iQw4ZpYcdgTyYlkEzQNDAfBgNVHSMEGDAWgBQmWHOuI1DQ4+jD
VTv5BkYRJ2ThwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0psaHpyaU5RME9Qb3cxVTctUVpHRVNkazRjQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvNjNjMzQ0LWI1MGUtNGFmMC05ZTllLWZjZDRmNzk3ZDM1Ni8x
L1h0ZGEtQk9Za01PR2FXSEhZRThtSlpCTTBEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
NjNjMzQ0LWI1MGUtNGFmMC05ZTllLWZjZDRmNzk3ZDM1Ni8xL0psaHpyaU5RME9Q
b3cxVTctUVpHRVNkazRjQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMIa0DANBAIAAjAHAwUDKhJYADAN
BgkqhkiG9w0BAQsFAAOCAQEALRvX61speO4FQRCGBOgkgvckcvkgZPg17hSDipOu
E7YlXhwBJ9xx7kvU+vqrsQhgj21u+0rVO9MDRBrU2FpD6lNtJrQzUD84Deh5FZmN
HvVKGU7RhhoEgEIFDPXN1cSwN8/BtkvrWS9UWR2GmCOSaXi74RhFTr1CmGBgSXMT
N3nFbO59HMEVAQRQ2n7RcSyJGceoAngP+s/PG6AN/6xkRZ4RHdB02NEiZM1+K/94
LUJrHwunKuQAAoz7hyFSHyKQC84lWTPTO0n5xCu9JzCnm23cvjXE3gPUkq2TaFIG
RtptKnXiS//y43ib6HHCw/u6epF+PGRTn6irrGmClU9wLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:28 2024 by rpki-client on console-fra.rpki-client.org