Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/xIL_ufsfWp3qtmfHQiTNx_6Q6-I.roa
File: xIL_ufsfWp3qtmfHQiTNx_6Q6-I.roa (raw, json)
Hash identifier: du8lx2Ao9xNUbLN5jUNwB9iwQFloo4zsrhW1Fyt5zRM=
Subject key identifier: C4:82:FF:B9:FB:1F:5A:9D:EA:B6:67:C7:42:24:CD:C7:FE:90:EB:E2
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 01856DD4039378EEDFD1FEA295CC35D70119
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/xIL_ufsfWp3qtmfHQiTNx_6Q6-I.roa
Signing time: Sun 01 Jan 2023 14:54:49 +0000
ROA not before: Sun 01 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42084
IP address blocks: 176.107.40.0/21 maxlen: 21
91.189.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:03:93:78:ee:df:d1:fe:a2:95:cc:35:d7:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jan 1 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c482ffb9fb1f5a9deab667c74224cdc7fe90ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:57:1d:99:6a:26:46:7a:aa:1f:30:d0:04:
bc:00:ee:df:4e:b1:d4:05:23:e5:c9:bf:ea:b9:d4:
77:76:df:12:11:0f:02:57:7f:88:c0:75:b6:72:38:
ef:69:af:43:04:37:ab:a3:83:bf:49:32:9a:2b:97:
9c:a8:e8:4d:93:21:e4:f3:7c:e5:a1:3f:64:93:8b:
b9:b9:11:16:b5:7b:a8:35:b0:c5:df:ff:f9:64:a3:
93:02:ad:fe:10:fd:c5:65:0a:f1:1d:fb:4b:75:14:
dd:79:70:c3:78:83:b9:df:94:5a:25:b5:e3:e7:e8:
a5:2b:e5:61:64:55:59:bc:89:4b:94:f2:00:0b:a9:
08:61:87:78:83:1c:41:a5:fa:ec:54:ae:d8:a4:f0:
72:8e:be:2f:ab:cb:0e:90:85:00:a8:12:88:ac:aa:
7f:98:8a:b0:38:5a:ae:5e:7d:d8:b0:b5:5a:f8:c3:
e1:2b:f2:9c:cc:19:1a:5b:13:aa:19:ab:07:4e:37:
d5:60:45:e9:ce:71:71:2c:0c:7e:9c:f1:b4:a7:1d:
14:64:97:69:7c:2d:3f:b5:a3:71:f1:24:0d:48:4c:
06:74:6c:c1:f9:78:e7:66:86:e6:c8:69:69:8a:cc:
50:91:45:0a:16:e0:4a:89:48:f7:fa:18:fa:61:5f:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:FF:B9:FB:1F:5A:9D:EA:B6:67:C7:42:24:CD:C7:FE:90:EB:E2
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/xIL_ufsfWp3qtmfHQiTNx_6Q6-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.0.0/21
176.107.40.0/21
Signature Algorithm: sha256WithRSAEncryption
24:cc:8e:8c:cd:b5:ea:5a:b7:3e:a8:a0:b2:fb:aa:09:b4:a4:
16:bc:b2:fb:7b:81:9c:0e:1a:85:85:7f:80:ec:90:f9:35:08:
1e:2f:22:dd:88:2c:51:d5:93:39:0c:c9:06:49:a6:e6:e0:64:
1c:d9:41:4a:0d:dd:b4:e7:16:42:0e:94:2b:cf:62:0c:af:01:
b0:93:08:6f:fb:d0:e0:01:34:ee:ed:62:08:0b:bb:f6:26:54:
03:19:d0:66:44:b3:98:e2:5b:05:58:76:71:73:2b:f0:a0:e8:
ae:85:9f:56:09:d4:34:e2:83:06:6f:e8:3d:15:10:da:0e:d4:
8a:b5:a3:12:9e:f9:5e:55:90:ec:ff:37:44:d1:c9:75:11:72:
a9:81:a1:e5:cd:ed:4b:da:0e:56:ae:3c:1f:8f:6d:1e:42:c5:
6c:9b:29:06:23:64:61:4f:07:34:f8:5c:d0:d8:b0:cc:17:da:
3a:04:e1:c6:55:e6:9d:64:f0:0b:1b:33:f2:cb:d1:46:f3:f0:
87:6b:46:28:aa:cd:92:07:7d:38:a4:c1:3f:ad:49:bd:e9:73:
23:f3:18:32:14:d4:9a:c6:7f:7b:7c:f6:44:d4:57:0d:28:c8:
d5:f2:67:97:5e:eb:78:c3:7d:91:66:37:00:52:d0:9b:f0:ff:
10:ad:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:30 2025 by rpki-client