Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xj56Eiq1zunNW5oeIUt_vzUYoZI.roa
File: xj56Eiq1zunNW5oeIUt_vzUYoZI.roa (raw, json)
Hash identifier: 9wbDHeEfJeaCa18zwEJ0DjMKK8K2psCCQpDSROn8mJk=
Subject key identifier: C6:3E:7A:12:2A:B5:CE:E9:CD:5B:9A:1E:21:4B:7F:BF:35:18:A1:92
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0189AB60D408A782991418F9A32F483C4D19
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xj56Eiq1zunNW5oeIUt_vzUYoZI.roa
Signing time: Mon 31 Jul 2023 09:56:36 +0000
ROA not before: Mon 31 Jul 2023 09:56:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.180.224.0/22 maxlen: 22
195.180.232.0/22 maxlen: 22
195.180.228.0/22 maxlen: 22
194.163.192.0/20 maxlen: 22
195.180.196.0/22 maxlen: 22
62.138.64.0/22 maxlen: 22
195.180.200.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:60:d4:08:a7:82:99:14:18:f9:a3:2f:48:3c:4d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 31 09:56:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63e7a122ab5cee9cd5b9a1e214b7fbf3518a192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:83:18:d0:37:32:f2:78:cc:01:7e:67:49:
6c:1a:21:08:eb:81:ea:83:4f:e0:0c:d2:9a:66:5e:
ba:35:01:db:31:80:f9:32:e7:c7:14:97:88:64:ff:
30:b1:c3:dc:92:11:0e:d9:16:2a:c6:f0:43:17:f2:
cd:39:60:be:bc:ee:8a:1d:ca:3f:12:05:56:f7:c4:
a0:27:3f:59:08:8a:63:6d:ec:60:8d:76:56:cd:7b:
ba:ae:20:40:02:dc:4f:2e:8e:72:50:e6:fe:06:bb:
d8:12:04:94:24:da:26:b7:cb:da:bb:1d:6f:57:42:
fe:cd:f3:d8:ba:47:e9:7f:33:42:9b:b9:ef:ca:51:
03:39:86:1f:77:f1:14:e8:2a:76:60:fa:fc:13:28:
04:1b:a1:cf:04:88:e9:f7:8b:82:c2:3e:96:48:c4:
9f:30:3a:09:81:5c:44:3a:2a:f5:84:9d:68:dd:e7:
f1:10:89:45:58:e0:11:9a:4f:ff:67:3f:b0:b9:28:
98:14:c1:0a:4f:9e:a7:a9:c4:c7:00:70:17:ea:c9:
f3:96:92:91:35:af:09:e0:ed:c7:08:09:0c:4d:e2:
0d:23:9b:83:ad:a9:f8:8b:04:7a:5f:c0:c3:ca:09:
e2:a5:31:0e:1d:ab:24:cc:c8:c5:8d:af:27:06:6c:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:7A:12:2A:B5:CE:E9:CD:5B:9A:1E:21:4B:7F:BF:35:18:A1:92
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/xj56Eiq1zunNW5oeIUt_vzUYoZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.152.0/22
194.163.192.0/20
195.180.196.0-195.180.203.255
195.180.224.0-195.180.235.255
Signature Algorithm: sha256WithRSAEncryption
0f:89:18:5c:1e:b9:4a:8d:b5:2a:ac:ae:49:25:4f:c5:e0:bc:
11:bd:67:83:d2:82:1b:6b:23:43:fe:d7:c5:9b:bb:16:de:20:
28:f7:5e:3a:df:67:e7:fb:f5:d9:f4:d0:68:be:04:76:37:97:
f7:1b:29:ff:f9:42:6d:52:a0:db:e4:be:14:d5:9b:0d:4d:9e:
43:de:a2:7b:ad:03:ee:db:3d:fb:ad:c5:8c:1b:dd:10:dd:8d:
48:52:a7:44:73:7d:23:19:b7:dc:a2:f6:3d:ef:15:15:71:b2:
01:57:a2:a6:11:a5:96:d6:6e:6a:46:fb:46:be:3d:ea:e2:d6:
7f:0d:11:44:c8:5a:62:55:bc:c3:17:45:96:fa:1f:69:47:70:
50:7a:e4:65:bd:ff:b4:58:80:3f:2d:3a:1a:ea:18:01:df:e4:
e2:ab:e6:20:1b:87:80:6f:a1:e0:a3:06:51:00:8b:86:69:04:
96:88:76:ba:ba:2f:ae:2c:5f:cf:78:48:3b:68:55:85:af:61:
a8:46:e6:2d:cc:77:a3:8b:c0:a9:cd:45:73:8b:92:76:ea:3f:
85:ce:06:9c:ee:3b:c9:e4:e5:26:ad:82:e2:4c:7d:97:04:6a:
81:77:27:34:68:a7:53:5d:79:d9:9d:7c:fd:09:94:cb:ec:05:
8d:90:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:00 2025 by rpki-client