Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/xehlr_N-pJ1iaOIv_IbHwVEmw9g.roa
File: xehlr_N-pJ1iaOIv_IbHwVEmw9g.roa (raw, json)
Hash identifier: UG13fAbLuCbPtD7JyDDyuV54uTHng5eou8ScQ2EBNts=
Subject key identifier: C5:E8:65:AF:F3:7E:A4:9D:62:68:E2:2F:FC:86:C7:C1:51:26:C3:D8
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E718528C345A30D71FF40D02950B5
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/xehlr_N-pJ1iaOIv_IbHwVEmw9g.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:71:85:28:c3:45:a3:0d:71:ff:40:d0:29:50:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5e865aff37ea49d6268e22ffc86c7c15126c3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:39:e7:3d:43:04:a2:03:0c:96:e3:4e:2d:
3c:6e:e6:37:f6:e0:f2:1f:82:a1:1d:39:e8:2d:e9:
3f:e6:68:72:40:62:f7:c6:d7:69:1b:27:1d:7f:21:
96:ac:10:6b:33:34:8a:c5:71:3b:78:d2:17:6a:7e:
64:01:46:e9:63:7c:3d:bd:4e:79:bf:97:e4:ef:b8:
81:7e:2a:30:da:39:37:6b:3e:81:42:b2:94:c1:b3:
8e:ad:e2:a2:3f:61:30:ab:21:38:67:85:10:56:3d:
02:60:c4:98:3a:24:b2:4d:e9:84:72:ed:67:83:f9:
e7:79:4d:f1:45:ae:77:5b:92:44:03:27:36:f4:5b:
6f:84:0f:ea:b2:5c:7e:49:bf:ed:21:5d:12:3f:44:
a6:fb:d7:ce:cf:18:7b:75:9e:4e:f0:61:1e:3f:d5:
d3:d6:88:84:7d:4b:bd:4f:da:80:2a:56:13:b3:cf:
fd:2f:1e:3e:d9:ed:01:6f:35:e6:0c:20:c6:03:3c:
d1:b1:46:11:de:6d:27:ff:cd:ef:ff:99:18:ce:e0:
67:12:08:a8:52:ee:74:be:7e:fb:7b:ae:3e:ff:c4:
d9:07:32:a5:91:fa:e7:18:3d:7d:2f:1f:52:4e:35:
3e:2b:ee:79:51:eb:d0:39:55:ae:02:eb:a3:e5:df:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:65:AF:F3:7E:A4:9D:62:68:E2:2F:FC:86:C7:C1:51:26:C3:D8
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/xehlr_N-pJ1iaOIv_IbHwVEmw9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.198.0/24
79.120.200.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f3:c9:3c:89:d3:c0:59:dc:d4:5f:a2:41:04:08:9d:4b:ab:
ab:57:77:b4:4e:ef:cb:06:64:da:78:de:38:46:98:f9:f2:87:
22:bd:8d:79:a4:8a:7d:9c:76:4b:c0:12:2c:d9:d7:51:f2:fc:
67:2a:14:15:8e:9c:65:39:47:9f:75:8d:55:41:25:2a:a8:e2:
28:76:62:e6:51:ac:2c:31:29:ff:cc:6e:62:9d:d2:cd:3e:0b:
0d:a3:fc:96:c0:55:f1:6e:47:1f:fb:b5:1f:1c:4a:1a:a4:21:
8b:f1:67:3c:00:d5:ed:e9:cc:8c:85:ea:f2:c0:c3:25:8d:41:
44:39:6e:05:a4:fd:7b:97:96:e8:b4:e4:60:bb:37:81:05:76:
06:28:b8:77:19:e1:be:fc:f6:3a:c8:1a:2f:d0:61:e8:20:82:
58:11:20:a6:0e:12:b5:01:8e:29:00:34:42:46:32:a2:b2:e9:
45:4d:08:38:c8:8c:9e:4b:09:3e:02:1b:38:bd:44:e6:70:0a:
34:48:84:f9:77:4f:a2:9b:44:1a:df:c1:f9:7a:ba:17:26:57:
bf:b5:bf:6f:69:b4:29:fb:e9:c2:0a:52:eb:75:e5:44:e9:bf:
b9:6c:e9:54:7a:f6:38:6d:26:47:fb:23:96:d5:97:86:af:e6:
70:77:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:24 2025 by rpki-client