Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/XLjwyFLztw_EJeK79o1Y83YKCag.roa
File: XLjwyFLztw_EJeK79o1Y83YKCag.roa (raw, json)
Hash identifier: d8XpcfY1z8iYOLk2SYFpons/+ym2a6hkBl+n005ahqc=
Subject key identifier: 5C:B8:F0:C8:52:F3:B7:0F:C4:25:E2:BB:F6:8D:58:F3:76:0A:09:A8
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 01856BAEC2C8D7A02176D76B4032E994E579
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/XLjwyFLztw_EJeK79o1Y83YKCag.roa
Signing time: Sun 01 Jan 2023 04:54:53 +0000
ROA not before: Sun 01 Jan 2023 04:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 193.161.96.0/22 maxlen: 22
193.161.100.0/24 maxlen: 24
193.161.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c2:c8:d7:a0:21:76:d7:6b:40:32:e9:94:e5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jan 1 04:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb8f0c852f3b70fc425e2bbf68d58f3760a09a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:4e:d1:06:16:c5:0c:50:40:75:3e:ec:b8:
fd:53:2f:cb:c9:a0:50:8f:c2:3f:07:8f:94:7e:2c:
7a:44:f3:79:ca:2a:32:5b:7a:95:45:73:44:cc:5b:
ef:0e:ff:09:2c:5d:8a:31:47:0f:8d:b9:f2:04:14:
08:ab:2e:25:2e:dc:4b:3f:0d:8c:10:ac:b7:a7:fa:
2e:35:7a:32:22:cc:61:6d:42:33:12:3f:cd:da:1a:
a3:1b:a0:df:26:3f:1f:c9:48:7d:b1:cf:08:a9:43:
bc:6c:27:22:a0:fe:f1:4b:5c:ac:5e:9e:c6:4e:21:
47:a5:40:96:c5:0d:55:b0:84:c9:26:2b:1d:d7:54:
a4:bd:d3:8a:68:b4:e8:44:fc:1d:02:a5:2d:a8:3c:
92:16:4d:fa:8a:06:16:98:40:51:01:fc:96:e3:fc:
97:b5:70:5a:a3:f2:6b:cb:b6:d8:28:af:59:bb:f3:
b1:d7:9d:90:40:40:45:9d:14:d8:d7:e5:52:45:9a:
69:50:62:cb:be:f9:58:bc:b5:59:fc:86:0f:6c:89:
77:bc:22:15:3c:4f:4f:f1:75:4d:7a:ec:d4:61:78:
fd:94:fb:96:af:ff:e7:67:bc:f0:90:95:32:1b:5f:
6a:3e:c7:6a:a5:42:d0:f0:ba:cd:59:ca:ff:26:0c:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:F0:C8:52:F3:B7:0F:C4:25:E2:BB:F6:8D:58:F3:76:0A:09:A8
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/XLjwyFLztw_EJeK79o1Y83YKCag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.96.0-193.161.100.255
193.161.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:41:9b:7c:3b:9f:55:2f:0a:2e:30:95:29:7b:9d:d8:09:7d:
06:f8:e0:1b:98:0a:29:fd:85:4c:b5:24:45:2d:62:e6:db:ce:
6f:24:15:a2:d0:2a:63:f0:06:f5:5f:c4:0a:85:c7:a1:09:74:
d9:46:97:98:70:d4:de:f2:5e:2f:75:4f:a4:c2:08:41:7f:ff:
14:f4:d7:a3:c9:c5:e6:f2:1a:9f:52:df:9e:19:97:53:02:6c:
df:47:83:f5:5c:e0:08:2c:05:f2:e4:a6:3f:38:bf:4b:31:a0:
ec:a0:44:c8:58:6b:74:ea:c1:05:24:21:ab:19:60:54:05:9c:
61:84:14:c3:ef:4e:7c:a5:f8:91:39:9e:f5:43:bb:ed:96:c3:
e8:de:cc:bb:88:91:a9:23:94:44:f1:9e:5b:bb:6c:d7:81:72:
9c:25:5b:cb:e9:d5:e6:62:24:e7:60:73:70:51:2e:07:91:c1:
d2:c9:9b:d2:55:91:9d:48:58:cf:77:7a:c0:1b:8b:d8:a9:2a:
e9:ca:ce:a8:de:a7:cf:63:90:a6:e8:8d:3e:93:2c:b6:52:76:
b0:5a:ef:df:b6:b2:cb:bd:c1:f8:ce:b9:27:09:e3:0a:90:17:
b2:88:cd:0b:9e:98:67:b0:7b:51:e8:ab:ab:5f:c0:40:87:92:
c3:cb:d3:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:51 2025 by rpki-client