Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/xln_132p81Cx_s3x58ltuAj8kpk.roa
File: xln_132p81Cx_s3x58ltuAj8kpk.roa (raw, json)
Hash identifier: txITnPwi/bhcXglpxlsFLccHeI4xaUnFQsl9eW9qCwQ=
Subject key identifier: C6:59:FF:D7:7D:A9:F3:50:B1:FE:CD:F1:E7:C9:6D:B8:08:FC:92:99
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 03A557B6
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/xln_132p81Cx_s3x58ltuAj8kpk.roa
Signing time: Sat 01 Jan 2022 04:53:11 +0000
ROA not before: Sat 01 Jan 2022 04:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196906
IP address blocks: 193.105.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61167542 (0x3a557b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Jan 1 04:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c659ffd77da9f350b1fecdf1e7c96db808fc9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:a7:be:26:b7:b8:e8:0c:b6:22:8f:c6:80:
3a:63:7a:84:44:15:bb:28:39:1e:6a:70:57:09:28:
9a:50:de:3f:05:fb:7f:ba:26:10:75:f7:f2:8a:cd:
54:bb:74:1c:82:08:16:bb:cc:ba:12:57:c9:9c:48:
f3:e9:d2:c1:65:a0:0a:5b:66:17:7a:8a:9f:24:2f:
9e:f0:55:54:2b:c5:cd:a0:8f:2e:6d:17:82:b1:15:
ce:b8:74:0f:94:72:98:8f:c3:73:ce:de:52:59:0c:
d0:c6:1f:80:1a:3a:b3:4d:e7:50:d9:29:a9:39:c5:
55:0d:2d:1e:46:0b:10:5b:70:83:19:22:68:31:ed:
6a:2d:ef:f4:28:82:81:1f:58:4f:77:1a:53:12:ac:
4e:0d:f1:cf:07:61:4f:53:d3:6f:91:b2:a7:53:5b:
88:91:ee:a6:7b:72:eb:54:88:18:25:7a:b4:e5:8e:
d4:49:2f:03:fd:5d:fd:c9:0b:0d:79:f4:77:54:2c:
4a:15:4d:65:f0:61:25:74:25:30:b6:ef:80:00:6b:
22:bb:10:9a:59:77:71:08:b6:eb:75:54:6a:39:43:
51:23:e5:00:f2:11:54:17:e9:e3:66:04:1d:44:45:
69:63:48:64:5d:72:13:4b:8d:f9:eb:ac:46:30:15:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:FF:D7:7D:A9:F3:50:B1:FE:CD:F1:E7:C9:6D:B8:08:FC:92:99
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/xln_132p81Cx_s3x58ltuAj8kpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:09:15:f0:60:63:cc:b8:9d:71:f3:09:f9:50:6c:fa:df:a4:
87:85:5c:52:84:3e:9e:0e:cb:98:0a:99:8f:65:03:72:ae:ab:
78:f0:3a:db:28:9e:a6:f3:9b:e7:9c:6b:31:7f:04:43:1c:e2:
26:f9:a3:cf:11:67:9c:ba:50:f4:d6:bb:c2:8e:44:46:07:99:
d1:50:e6:f6:3f:ad:b7:0e:23:d8:41:d8:b5:92:69:7e:70:ac:
fc:6a:7d:1c:4a:db:58:fd:12:69:48:35:d3:6d:8d:e3:34:98:
26:00:9d:31:c8:2e:f6:a1:b0:7b:cd:dd:d5:20:07:07:a2:91:
80:a9:8c:27:4e:c7:73:ff:67:d6:b6:0c:58:52:55:55:9e:6c:
fd:39:8a:48:64:4c:53:4a:3e:fe:f8:bd:f1:e6:a2:c5:38:6a:
5a:c5:c0:05:df:54:a6:c3:a3:c9:8d:cc:2a:42:85:39:74:90:
46:fa:c8:ee:71:11:46:87:21:88:9c:3c:2a:42:39:46:74:5c:
7b:1b:5c:b3:3f:5d:c1:4c:a3:21:d1:48:91:bd:19:33:00:77:
88:26:7c:22:6c:50:16:cc:dc:ec:80:d2:0f:20:68:e2:34:6b:
08:ec:c8:80:97:96:0c:97:16:c3:29:48:7f:53:b1:02:19:ea:
a8:32:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:18 2023 by rpki-client on console-fra.rpki-client.org