Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xfdZlw-WW564dS6H1oFjnKqBr_c.roa
File: xfdZlw-WW564dS6H1oFjnKqBr_c.roa (raw, json)
Hash identifier: XXfNOIhkVW/MW/jOYEX8BjJPIyeroEXx3KPDzQNCGfo=
Subject key identifier: C5:F7:59:97:0F:96:5B:9E:B8:75:2E:87:D6:81:63:9C:AA:81:AF:F7
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0181D8EDFA659C8190C7A2F9EDE4E2033AA9
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xfdZlw-WW564dS6H1oFjnKqBr_c.roa
Signing time: Thu 07 Jul 2022 13:51:23 +0000
ROA not before: Thu 07 Jul 2022 13:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 194.233.56.0/22 maxlen: 22
195.179.240.0/22 maxlen: 22
195.179.244.0/22 maxlen: 22
195.179.252.0/22 maxlen: 22
195.179.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:ed:fa:65:9c:81:90:c7:a2:f9:ed:e4:e2:03:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 7 13:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f759970f965b9eb8752e87d681639caa81aff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:52:bb:1a:9c:d0:ab:13:02:44:38:7b:ae:
f2:4c:65:ea:43:d3:72:c6:c6:42:b2:b3:a8:74:34:
e1:be:04:33:78:04:67:f7:ca:36:30:68:5b:3e:9d:
9f:85:49:c3:dc:3a:16:9f:17:1f:d7:59:be:ba:82:
73:ac:d4:05:d0:a8:c7:0a:2d:0b:ee:03:79:e9:4d:
e9:3b:29:de:0d:73:c4:57:81:99:6e:54:de:3c:33:
cd:a4:69:98:e0:2e:d4:fa:cd:c9:fa:4b:c0:17:de:
7c:f0:41:38:7d:37:1b:5b:b4:2c:1d:6b:a3:e8:1f:
cc:e5:b7:93:84:13:a5:c6:98:5d:08:e6:1a:25:1b:
76:99:35:0a:29:59:b9:e9:b3:d2:20:22:e9:43:52:
8d:42:7f:82:8d:c3:15:e9:60:da:7a:2d:98:35:39:
3d:da:cf:7e:54:5e:8c:30:0b:b9:3c:0d:f8:15:a0:
48:b8:14:33:94:24:3f:9f:b8:02:79:c4:60:f8:ae:
ab:6d:4f:7f:04:3d:aa:ba:f9:18:20:26:10:04:d0:
df:f0:fb:0b:9d:2e:ee:0d:71:ac:07:12:f3:bb:21:
34:ca:ba:41:c9:d6:ca:dc:74:46:ee:f9:4d:e4:41:
9a:7a:07:f2:9a:e6:c2:d1:84:a1:ae:5d:e6:01:ea:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:59:97:0F:96:5B:9E:B8:75:2E:87:D6:81:63:9C:AA:81:AF:F7
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xfdZlw-WW564dS6H1oFjnKqBr_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.56.0/22
195.179.240.0/20
Signature Algorithm: sha256WithRSAEncryption
09:7c:8b:88:a7:13:97:89:fc:aa:78:5f:ae:5f:6f:ce:1f:81:
ed:d7:ee:83:3e:10:6b:ff:f9:00:81:6d:29:fb:8e:45:79:64:
a6:ba:52:10:92:31:cc:1a:8d:0e:b1:05:16:26:22:d3:11:b2:
73:ae:55:b9:e9:23:80:4e:a1:28:b1:87:97:2f:08:07:52:bd:
89:b9:1b:f3:8b:2f:d8:32:84:4f:67:d3:25:ff:79:73:00:01:
14:e7:a2:01:9f:85:ff:13:e8:b1:c3:b5:87:20:59:1f:1a:5c:
dc:2c:93:c3:60:f8:5a:0a:1e:9d:a2:72:75:53:82:cf:b8:63:
88:e4:35:6b:a6:f0:06:f8:cb:56:e5:df:c7:9c:2b:8c:ee:14:
ee:ce:79:93:c4:d3:b7:53:5b:12:62:b8:54:c1:12:b7:df:28:
3f:3b:fe:c8:ff:a0:a3:cb:26:dc:28:38:21:9e:90:0d:8f:97:
d0:5d:d1:e3:97:57:dd:f9:bf:03:1a:69:52:af:38:8c:e4:e9:
d6:8c:82:6a:1d:93:3d:cf:67:d5:81:8e:ab:70:ba:72:01:0c:
56:31:0c:38:9e:7c:1e:72:19:b8:d2:e5:3f:7a:48:32:d9:45:
6d:f6:1b:9a:2d:ac:43:3c:e5:15:85:a5:b4:c9:cf:41:d2:79:
d4:c0:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:39 2025 by rpki-client