Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/XPe7YjTnZZgo6NBLlgoROqHdUF4.roa
File: XPe7YjTnZZgo6NBLlgoROqHdUF4.roa (raw, json)
Hash identifier: 1I7qbUxvoBmz92p9c14Tp1uc+UP3nWndTtEa/t1azpY=
Subject key identifier: 5C:F7:BB:62:34:E7:65:98:28:E8:D0:4B:96:0A:11:3A:A1:DD:50:5E
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 021AE07A
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/XPe7YjTnZZgo6NBLlgoROqHdUF4.roa
Signing time: Sat 01 Jan 2022 06:57:41 +0000
ROA not before: Sat 01 Jan 2022 06:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211434
IP address blocks: 193.163.184.0/24 maxlen: 24
2a10:e540::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35315834 (0x21ae07a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Jan 1 06:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cf7bb6234e7659828e8d04b960a113aa1dd505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:3f:41:0a:3e:c2:9a:bf:75:bd:4b:5e:de:
d2:57:69:16:5f:1d:13:e7:5a:40:13:48:c1:b1:0d:
94:ff:9b:04:1f:70:a1:7f:ad:81:14:6b:19:9f:09:
f8:71:81:7b:1a:a2:45:47:99:e2:6b:e9:94:9c:1c:
3b:6a:02:b4:04:a0:92:08:77:ee:7c:0a:5f:d2:d0:
87:77:c5:d4:03:7e:72:7e:77:a2:69:30:c3:bf:2a:
8b:03:98:f5:4d:87:a6:39:8d:21:e3:4b:74:a2:80:
5f:af:46:56:5c:e9:8d:81:58:c0:e7:2e:85:fc:ac:
67:b9:9d:b0:a4:79:33:bc:32:35:ac:c1:4b:97:55:
f6:70:86:97:fb:07:a1:ea:f6:3d:bf:b1:10:a3:c5:
32:e9:4d:ad:e4:7a:54:b9:74:d1:c6:9f:64:bc:01:
ba:df:68:0a:8d:00:47:dc:19:53:6b:b2:fd:a4:94:
52:d4:47:ba:45:ee:f1:ac:46:d7:7d:4f:bb:d6:e7:
c7:5a:92:14:5b:8f:39:fd:eb:a6:21:94:d6:b2:2e:
36:98:4b:bc:3f:de:c7:dd:66:57:a3:ec:72:89:52:
f9:10:8c:94:eb:7b:b8:28:f3:7e:d5:16:52:77:b6:
c3:ed:f3:fa:98:fe:14:f9:9e:4d:15:59:cc:8c:40:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F7:BB:62:34:E7:65:98:28:E8:D0:4B:96:0A:11:3A:A1:DD:50:5E
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/XPe7YjTnZZgo6NBLlgoROqHdUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.184.0/24
IPv6:
2a10:e540::/29
Signature Algorithm: sha256WithRSAEncryption
09:7b:a6:4b:97:a1:5c:87:39:a0:f7:82:cf:8d:b8:5c:08:59:
07:b5:42:d7:92:7e:6d:91:f4:09:81:d1:92:84:02:85:2a:87:
ca:a7:72:a5:f8:b6:93:b8:0b:5c:b9:18:85:97:82:54:75:f0:
55:2e:25:5e:67:39:95:7a:84:8e:5a:d3:26:33:e2:22:ff:ee:
7a:b3:e0:f0:6d:5c:43:ce:f8:72:88:e5:97:06:d7:79:ab:88:
24:ae:f5:23:48:2b:07:ba:03:3d:db:75:87:b7:80:0a:dc:e0:
bb:62:ae:88:0f:a1:af:55:bc:6f:3e:14:49:b6:c7:33:ce:13:
9b:f4:1d:a1:26:aa:4e:4c:d1:e0:c5:6f:8e:b3:56:ba:70:77:
dd:5c:93:fb:1a:b2:b6:4e:9a:64:0f:51:bf:a8:83:65:c1:db:
6c:93:60:ca:bc:9d:7e:e7:5e:e3:59:b8:b7:f5:66:8b:71:83:
9f:0b:7b:ee:d3:f6:34:2b:02:6f:8c:ff:59:8d:db:4b:f9:7d:
ec:3d:4d:ad:94:af:f7:fd:17:d0:b2:b6:fe:bd:98:c0:c4:75:
ac:11:d0:eb:fe:d1:e8:f0:09:41:bb:38:17:3e:42:ef:61:f0:
6b:74:ae:a2:c0:4e:2c:39:64:fa:d8:dd:11:a7:32:fb:f5:ab:
87:cb:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:20 2025 by rpki-client