Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xgN-_ewGIaEdWjLXGlhC9H1C7Ac.roa
File: xgN-_ewGIaEdWjLXGlhC9H1C7Ac.roa (raw, json)
Hash identifier: ogoFQP2N1farEyqnym68rybrHOTALlmjpp0ohqKs93U=
Subject key identifier: C6:03:7E:FD:EC:06:21:A1:1D:5A:32:D7:1A:58:42:F4:7D:42:EC:07
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01876C74BBC679BCB9F9B89421BFCC69F13D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xgN-_ewGIaEdWjLXGlhC9H1C7Ac.roa
Signing time: Mon 10 Apr 2023 18:36:42 +0000
ROA not before: Mon 10 Apr 2023 18:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212708
IP address blocks: 185.235.164.0/24 maxlen: 24
45.155.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6c:74:bb:c6:79:bc:b9:f9:b8:94:21:bf:cc:69:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 10 18:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6037efdec0621a11d5a32d71a5842f47d42ec07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:63:e9:b8:fe:85:31:08:64:a6:53:75:8f:
d7:90:e0:34:7b:fb:b3:1b:35:95:77:70:49:2e:8e:
2c:0b:df:e5:8c:27:f7:a9:88:af:8f:d2:9f:0d:f4:
f4:35:fb:39:02:26:77:39:3e:4f:e5:5f:b5:68:19:
ce:da:b2:80:5d:5f:ab:6b:22:2d:59:51:eb:d9:01:
2f:12:9e:17:55:bc:e2:97:1a:a6:28:a6:da:49:81:
50:8e:c0:1d:e2:d9:17:70:d8:26:9c:d4:f2:44:82:
8f:5c:ac:fd:ab:6d:c2:30:dc:73:e2:b8:31:9a:22:
69:3b:08:57:a0:30:cd:c1:40:32:ce:02:2f:a0:b5:
82:e1:9f:52:9b:58:02:f2:6d:09:63:b7:54:d2:4f:
00:06:3c:8a:6f:74:8f:e2:73:33:ff:2d:53:ca:9a:
5f:b2:9d:3b:c3:77:0c:d7:ea:26:92:cc:41:36:cb:
bf:12:9d:76:86:67:32:1d:7c:5b:ef:ab:6d:98:f9:
4e:26:1b:0c:d5:8e:7b:63:09:48:30:7a:44:ca:24:
5d:7d:f9:9c:b1:f1:f7:9d:d9:67:df:6f:85:dc:a6:
87:cd:82:32:17:5c:e8:bf:1c:00:b8:7d:f6:56:2a:
29:2d:65:af:e4:77:eb:0e:73:5a:2c:9c:12:d2:f8:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:7E:FD:EC:06:21:A1:1D:5A:32:D7:1A:58:42:F4:7D:42:EC:07
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xgN-_ewGIaEdWjLXGlhC9H1C7Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e1:53:b7:e0:8a:26:7b:74:a2:7e:16:de:41:d4:b0:cb:67:
fd:f5:93:6a:7a:db:b6:83:63:7b:fc:f1:6e:e5:83:a3:7e:46:
89:b8:92:1d:a4:78:da:3e:36:78:93:db:48:1c:50:fb:43:2c:
49:a9:de:6f:bc:c5:f1:20:1e:ae:e3:92:20:55:7e:31:29:8a:
5d:50:c0:59:f2:28:8b:3c:f7:29:7e:0f:3c:1a:90:47:df:0f:
29:b1:e1:ac:6b:f2:26:6a:97:06:19:61:3e:fc:9d:c1:49:5e:
f9:f3:d4:f2:cb:d9:60:a3:f7:c3:e9:21:86:08:13:63:a8:27:
d6:01:91:3f:26:a2:16:d3:cb:98:a6:a4:5d:5c:20:b7:f1:22:
ef:fb:76:22:2a:9e:6e:91:ef:e6:65:bf:43:8d:8b:d3:d8:96:
eb:8c:e4:7d:93:99:ac:16:2d:0d:22:b3:98:e0:61:e4:52:e1:
4e:9b:74:11:df:e6:06:53:97:59:17:5e:f1:db:84:ae:c2:44:
87:58:72:e5:b7:e1:cc:42:db:6a:50:4e:d0:4f:7e:3b:ac:7e:
57:14:75:a7:54:16:2a:41:7c:95:3a:cf:72:6a:13:d9:00:b3:
b9:36:0e:a1:52:fb:17:c2:08:a9:19:20:23:59:e4:a3:d3:6e:
de:5d:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:33 2025 by rpki-client