Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/XcUn_JfRSnRcqbnaOzzhKybVcrY.roa
File: XcUn_JfRSnRcqbnaOzzhKybVcrY.roa (raw, json)
Hash identifier: jZrevmYLt0phATAoBbNKHY5Gp+vOH2HduawaW/IX/JE=
Subject key identifier: 5D:C5:27:FC:97:D1:4A:74:5C:A9:B9:DA:3B:3C:E1:2B:26:D5:72:B6
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018400953F4178280D3582B814F9EE998BE3
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/XcUn_JfRSnRcqbnaOzzhKybVcrY.roa
Signing time: Sat 22 Oct 2022 16:44:51 +0000
ROA not before: Sat 22 Oct 2022 16:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 45.129.15.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.47.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:95:3f:41:78:28:0d:35:82:b8:14:f9:ee:99:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Oct 22 16:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc527fc97d14a745ca9b9da3b3ce12b26d572b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:a6:f4:89:9b:8e:5e:22:60:3c:58:de:44:
f7:b7:c5:0f:65:e5:70:1e:c6:9b:56:66:3b:c1:32:
e5:03:d7:8d:1e:73:ca:68:96:0f:4f:f4:32:f3:61:
b4:84:70:f0:a8:16:35:b6:db:cf:31:f5:e8:e5:60:
9f:91:b5:7f:bd:66:e0:fa:88:bd:32:7d:e3:58:32:
c8:79:12:69:ec:3e:04:d6:7e:18:76:5d:0b:00:73:
e0:1f:b9:f1:dc:26:57:db:73:07:22:ce:69:1c:b3:
c4:a6:9c:4b:fe:d5:30:35:4d:6e:e4:73:0e:59:17:
26:37:e0:81:1d:8c:9f:63:88:4e:15:37:20:98:23:
b4:57:84:e4:d9:20:f9:a6:27:c8:12:aa:57:99:b8:
07:59:85:c9:30:d1:df:4b:84:24:74:56:f3:c1:bc:
3f:ef:09:59:23:4a:d0:2c:68:84:9a:6c:04:fc:20:
f2:a1:36:e5:7a:d8:24:c8:5d:08:2f:85:18:0c:47:
a1:66:08:5a:00:8e:0b:af:dc:61:34:a7:bf:3d:64:
45:0f:76:3d:0e:5e:68:2a:af:7b:a9:7b:1f:34:ac:
ed:ff:32:d4:96:b8:90:26:76:a8:63:e3:06:7e:eb:
35:de:d4:ee:56:cd:e8:ba:03:12:cc:55:e4:75:1a:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:27:FC:97:D1:4A:74:5C:A9:B9:DA:3B:3C:E1:2B:26:D5:72:B6
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/XcUn_JfRSnRcqbnaOzzhKybVcrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.212.0/23
45.129.15.0/24
45.142.192.0/24
193.32.162.0/24
193.47.68.0/23
Signature Algorithm: sha256WithRSAEncryption
10:a4:50:c8:eb:36:19:32:a1:ea:a7:11:cc:32:53:fb:ec:66:
21:3d:a4:83:9b:f5:f0:f5:6e:d3:41:28:b7:15:33:f0:14:bc:
ae:88:30:ec:f2:fd:7e:4d:a9:be:09:17:bd:b9:14:c8:ca:73:
3e:59:47:32:ad:e3:bc:d8:39:aa:fc:d7:23:3b:0d:27:11:96:
7e:a6:23:0c:75:b6:80:6d:98:61:af:e7:4c:1c:ff:4f:4e:6f:
dd:2e:ee:b2:f1:f5:4c:98:c2:19:e3:a7:1f:e3:9e:61:5d:c8:
b3:81:d9:f2:b6:c8:cb:c3:a6:90:51:51:bd:8f:66:e1:fe:fe:
2c:db:b4:b1:3e:9f:93:dd:41:92:b0:a7:8e:8d:5b:0c:97:f7:
b5:c1:29:b2:e7:80:31:6d:46:2a:6d:50:67:85:d0:6d:6f:76:
4e:ae:af:94:ea:c3:6c:80:1b:56:78:2e:bb:84:80:7e:13:9f:
18:87:ec:57:44:d3:ae:40:d7:c6:e1:a7:5d:56:d9:dd:ae:a4:
c8:f4:b2:a5:be:61:5a:97:eb:e0:e5:99:b0:c2:e0:3f:95:ab:
76:64:31:7e:9e:b6:9d:d8:bd:6e:d4:e8:e2:cc:8d:47:53:57:
db:82:03:8f:60:69:15:46:15:9c:94:52:6f:1f:f1:69:8e:76:
2f:1a:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:28 2025 by rpki-client