Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IXbtHMeaRP_PPqj2es37WxtcOCQ.roa
File: IXbtHMeaRP_PPqj2es37WxtcOCQ.roa (raw, json)
Hash identifier: wnexTRqDmEeevq/Vkg8F/2PPsvdN9+pJK+U9JB4veoA=
Subject key identifier: 21:76:ED:1C:C7:9A:44:FF:CF:3E:A8:F6:7A:CD:FB:5B:1B:5C:38:24
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01828740C34A5EE9FC1DD4C1EB863B2D4FCE
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IXbtHMeaRP_PPqj2es37WxtcOCQ.roa
Signing time: Wed 10 Aug 2022 10:15:44 +0000
ROA not before: Wed 10 Aug 2022 10:15:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.76.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:40:c3:4a:5e:e9:fc:1d:d4:c1:eb:86:3b:2d:4f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Aug 10 10:15:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2176ed1cc79a44ffcf3ea8f67acdfb5b1b5c3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:c7:4a:f5:2b:e8:db:bd:0b:c3:e5:bc:c2:
d3:f5:c3:e8:8c:e6:a5:cb:c7:fd:28:43:21:d0:f9:
64:04:af:1f:fa:22:26:79:ef:64:00:11:e5:de:8c:
86:6a:21:81:09:af:d4:8a:12:f8:05:23:54:21:13:
82:cf:35:2b:c5:6f:f3:29:35:cb:f8:13:6e:e3:22:
28:f6:a8:dc:50:41:d4:aa:44:66:42:0b:fb:dd:02:
63:4b:c3:57:45:59:ec:85:79:63:65:af:f9:fb:f2:
93:77:d1:19:ce:0b:c2:dd:15:e9:d9:da:3a:c1:34:
90:6e:42:39:9b:d4:38:14:72:39:b7:ad:54:b7:2c:
db:4c:da:18:8a:57:f9:60:f0:9d:8c:d9:bf:97:04:
b5:49:03:c7:1a:40:c9:96:d7:fe:67:4a:bb:c9:3a:
9b:70:16:cc:54:95:87:40:a4:29:71:53:b8:56:98:
aa:26:5d:9e:25:e0:47:2d:c4:a8:ab:55:68:32:86:
01:bc:70:d5:7b:3c:7b:0a:77:f7:1d:b5:7b:83:d9:
d9:d0:58:cd:79:be:d6:54:41:7d:2a:6f:5e:54:79:
05:21:9c:cb:9d:ef:84:06:d1:5e:2f:8c:70:59:47:
71:ac:92:b7:15:14:27:0d:fd:89:55:c8:d7:4c:06:
79:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:ED:1C:C7:9A:44:FF:CF:3E:A8:F6:7A:CD:FB:5B:1B:5C:38:24
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/IXbtHMeaRP_PPqj2es37WxtcOCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:6e:da:8f:a0:ff:22:aa:36:0e:1b:3b:f7:6e:ca:fe:e4:5d:
b0:61:cd:61:c7:ad:d8:29:13:1c:98:2f:92:f1:6a:15:57:1c:
a8:ea:57:00:73:8e:e5:bb:60:66:7e:c3:e9:73:63:85:9d:33:
4b:ff:86:5a:96:01:a4:08:bb:3f:74:53:0a:c9:66:51:e3:c9:
0d:16:73:7a:9c:1f:8c:03:e9:4b:01:12:c2:ec:fd:c7:28:83:
6d:fb:db:86:38:f5:c8:69:9e:89:6e:22:4c:f7:a4:e3:ff:33:
64:10:94:a0:f9:c9:8a:26:a3:6a:c5:bb:19:6b:b0:81:80:47:
bf:dc:b0:75:23:51:b5:b3:b0:dd:a4:11:58:ad:b6:bb:4e:07:
2e:fa:a8:71:86:00:5e:a8:bc:2f:98:11:44:a2:a6:f4:17:6b:
a6:6d:a8:9e:c5:20:ae:4a:64:43:8d:2f:20:11:4b:99:21:aa:
37:a4:f3:c9:64:4c:2e:00:0c:39:4c:2d:15:b3:05:e1:d9:24:
f9:b8:1e:40:3d:ae:b5:7a:5d:28:bc:b9:c5:e9:87:b5:28:9d:
34:3f:b8:15:13:43:d8:b9:0d:6a:42:f0:31:b6:c6:6a:16:2e:
df:52:cc:e2:da:4b:aa:03:ab:4b:80:db:95:ef:af:22:fc:b5:
c1:84:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:48 2025 by rpki-client