Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/XC5JIAYYxXUMlLx0pFquHmDN3xI.roa
File: XC5JIAYYxXUMlLx0pFquHmDN3xI.roa (raw, json)
Hash identifier: wVCqpIYkv3bWRSQezGlsQawicEiseI/MDcxqRNBr5nY=
Subject key identifier: 5C:2E:49:20:06:18:C5:75:0C:94:BC:74:A4:5A:AE:1E:60:CD:DF:12
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 01856F2FDF8E8D548060FD265B963EC034DB
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/XC5JIAYYxXUMlLx0pFquHmDN3xI.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57498
IP address blocks: 91.227.42.0/24 maxlen: 24
91.221.74.0/23 maxlen: 23
194.187.30.0/23 maxlen: 23
194.187.30.0/24 maxlen: 24
194.187.31.0/24 maxlen: 24
2001:678:b8c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:df:8e:8d:54:80:60:fd:26:5b:96:3e:c0:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c2e49200618c5750c94bc74a45aae1e60cddf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:f9:e2:27:4d:17:d5:c2:3d:91:c1:ff:a5:
17:bb:ea:ac:4a:31:5d:47:03:ba:d3:f5:d5:c2:d1:
52:50:0d:00:eb:96:a7:42:64:2c:2a:73:4c:86:89:
a3:9d:8e:05:ec:ef:3e:c4:93:bc:40:5b:7c:8a:83:
06:0e:2b:3e:49:13:e2:83:9c:2d:8d:e8:49:64:91:
58:7d:77:b9:82:36:83:7b:79:3e:d2:66:c0:67:84:
f3:62:f6:99:2b:c7:1d:c5:9d:ef:68:c4:83:a1:f2:
01:f9:14:c5:59:5d:06:85:c5:53:dd:3b:df:10:03:
55:db:0c:47:c0:f6:77:a3:35:cc:2b:2f:cb:d7:2f:
26:b5:de:52:2e:9e:c6:bf:39:2c:82:87:c2:98:a8:
70:4a:8d:b4:f2:1f:50:e9:f3:5d:c6:23:72:85:81:
a4:72:70:43:74:b9:04:a4:f4:b8:38:4c:b9:7b:59:
74:27:2c:3b:74:67:74:3e:d8:f1:1c:64:71:a0:c0:
99:b2:3b:49:05:06:26:c6:8f:55:a5:42:d8:e2:8a:
ef:48:d4:95:37:65:16:ca:b2:c7:4c:85:43:7e:d2:
93:6d:f4:df:18:cc:4b:f8:69:d0:5c:58:27:f3:28:
4b:05:48:e2:57:1a:d9:b6:86:31:8c:5f:80:0f:16:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:49:20:06:18:C5:75:0C:94:BC:74:A4:5A:AE:1E:60:CD:DF:12
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/XC5JIAYYxXUMlLx0pFquHmDN3xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.74.0/23
91.227.42.0/24
194.187.30.0/23
IPv6:
2001:678:b8c::/48
Signature Algorithm: sha256WithRSAEncryption
21:c1:44:77:12:51:aa:04:15:fd:31:5f:a1:70:ad:79:7f:75:
e7:21:bf:63:53:13:70:47:7a:86:17:73:35:f2:d1:01:8a:37:
d8:ad:2a:94:10:e0:1c:bf:9b:dd:08:30:6d:e6:f4:64:74:e5:
18:3e:7f:b7:b1:26:c2:91:c1:ec:88:16:22:56:af:33:65:d9:
f8:77:13:6f:39:55:29:a4:e1:e7:d9:85:26:db:c8:3c:ce:cb:
60:48:f0:f1:b3:70:46:64:f0:50:8d:b0:02:df:2f:3d:b4:52:
99:cf:18:d2:70:2a:70:01:35:dd:c5:9b:40:9e:36:07:37:8b:
1d:1e:c9:68:c7:77:2d:20:79:68:e5:7a:7b:2c:72:0b:e9:44:
30:0d:2e:a3:25:64:4f:a1:6a:42:24:91:56:26:2c:fa:4a:d7:
2e:e5:0b:0e:64:58:e3:dd:7e:26:cc:d6:12:a4:9a:d1:7a:0e:
a7:e3:31:4b:56:0a:2a:a9:8d:98:f2:3b:5f:98:ea:1c:45:5c:
d5:38:5b:38:07:9d:2f:84:3c:39:8a:a7:3a:bf:b4:59:1e:52:
25:22:90:c9:00:b7:02:d8:e2:65:de:a9:8d:6e:2c:fe:a8:0c:
61:e0:75:f3:6b:e2:5c:a7:4a:a9:f2:5a:23:e2:2d:92:12:b1:
ac:d3:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:39 2025 by rpki-client