Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/xXhKX-m1HxQI0JEOo6XGNZicSk8.roa
File: xXhKX-m1HxQI0JEOo6XGNZicSk8.roa (raw, json)
Hash identifier: 9AVvR7FOLH3QbW36qbWVo1sxycnPLQnwvirNR6+1oUM=
Subject key identifier: C5:78:4A:5F:E9:B5:1F:14:08:D0:91:0E:A3:A5:C6:35:98:9C:4A:4F
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 08588F3E
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/xXhKX-m1HxQI0JEOo6XGNZicSk8.roa
Signing time: Sat 01 Jan 2022 15:06:29 +0000
ROA not before: Sat 01 Jan 2022 15:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35008
IP address blocks: 194.246.109.0/24 maxlen: 24
2001:67c:760::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140021566 (0x8588f3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jan 1 15:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5784a5fe9b51f1408d0910ea3a5c635989c4a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:0c:4e:29:2b:90:59:8a:48:d6:2e:e2:f1:
c6:f8:ff:6f:0a:38:2e:86:37:59:e9:11:88:df:df:
ce:5b:e0:3a:9b:3e:10:f5:31:5f:e1:5c:39:1c:12:
79:b9:c6:05:7a:f3:64:ae:ae:01:37:11:37:36:ff:
8e:ff:82:fb:0d:c7:1f:19:f5:43:2c:6e:f3:05:bb:
39:de:63:30:df:99:44:5b:60:e1:7b:ee:8d:b9:c9:
1d:42:a1:de:49:66:a1:55:e0:6d:e6:88:db:60:46:
1d:1e:ab:ce:bc:68:b3:8f:ca:81:3a:e2:6d:f6:ce:
75:80:2d:48:f4:53:0b:49:0e:e4:4c:2d:4f:bf:5c:
d3:66:ab:9a:1c:27:bc:bb:ee:fc:97:87:0a:54:8f:
e5:0d:15:f5:b8:f5:a6:27:0d:f7:f8:e4:44:f7:de:
58:81:dc:9c:39:fd:a5:d7:5b:1e:af:0d:63:ed:ef:
0f:22:80:54:8c:8f:9b:ed:75:58:a9:78:09:12:26:
0c:e6:17:29:48:ed:ea:fc:9f:39:19:9c:60:6b:e4:
60:71:52:bf:a5:10:4c:bd:91:0c:83:5d:f0:39:32:
25:5d:7a:9e:ea:e4:3d:3c:af:ee:82:c6:ac:d5:bc:
20:02:42:f2:d8:a2:8b:fd:37:20:87:1e:46:7d:7d:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:4A:5F:E9:B5:1F:14:08:D0:91:0E:A3:A5:C6:35:98:9C:4A:4F
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/xXhKX-m1HxQI0JEOo6XGNZicSk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.109.0/24
IPv6:
2001:67c:760::/48
Signature Algorithm: sha256WithRSAEncryption
52:b9:b2:03:91:5e:d2:93:bc:8b:92:ee:3a:1b:b0:f2:fa:32:
94:79:b0:b9:be:fb:83:65:e0:0f:6e:b9:f5:15:c8:44:0d:29:
02:86:ef:66:a2:a3:8f:78:11:02:54:ce:20:13:5d:2d:58:fb:
90:57:34:fe:bb:d0:ad:b7:a5:b7:5a:30:be:d9:ba:d6:c9:70:
84:80:1a:15:8d:51:9f:63:f9:d3:6e:85:db:77:95:a7:17:54:
05:e8:d9:6d:3a:ed:14:7b:f2:05:84:21:ce:1c:fc:dc:ad:cd:
5c:95:ff:cf:26:36:96:87:83:83:ea:92:47:5d:3e:f9:b5:b8:
ac:12:53:06:6d:70:28:18:72:f1:ad:5f:f1:f1:38:11:63:92:
42:8a:31:5b:ad:e6:c9:ad:b5:4f:4c:2c:bd:fb:d1:27:1a:70:
fd:01:ef:51:0a:7e:6d:69:9f:a7:da:a0:22:0f:16:c5:e9:3c:
39:58:e5:dc:20:ef:32:b9:89:08:4c:47:ab:3f:c6:27:a4:3c:
f6:ba:fa:06:29:64:9b:06:aa:4e:84:a2:f3:d8:06:a0:12:a0:
77:57:00:92:16:bc:e2:a5:c5:fd:af:e6:0a:7a:61:49:7a:46:
a0:ee:46:b9:3e:db:c6:e5:2b:a8:f8:74:22:d8:f6:d5:b1:a9:
66:7a:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:28 2025 by rpki-client