Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/Xvx9MpNeDXaYKxE2t3tSglTiNH0.roa
File: Xvx9MpNeDXaYKxE2t3tSglTiNH0.roa (raw, json)
Hash identifier: V6kdfcswHPyVrYB95m6Ly/kw524UnbeSTekwYhF62zM=
Subject key identifier: 5E:FC:7D:32:93:5E:0D:76:98:2B:11:36:B7:7B:52:82:54:E2:34:7D
Certificate issuer: /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial: 01856C0142A2A9E65EAB5469A55DBE019F4B
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/Xvx9MpNeDXaYKxE2t3tSglTiNH0.roa
Signing time: Sun 01 Jan 2023 06:24:59 +0000
ROA not before: Sun 01 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15923
IP address blocks: 193.41.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:42:a2:a9:e6:5e:ab:54:69:a5:5d:be:01:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Validity
Not Before: Jan 1 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efc7d32935e0d76982b1136b77b528254e2347d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:d2:5d:a5:1c:83:62:c8:c3:13:93:bc:52:
a9:c1:c5:66:4a:e2:24:fd:34:85:21:7a:40:8e:82:
03:63:fe:d2:cd:10:51:0f:ab:7e:22:0d:8d:65:2a:
83:97:55:b0:3b:cb:ef:25:ac:0e:95:07:60:3f:57:
0f:05:5d:64:a3:ce:0c:e8:91:a9:0a:4d:f4:34:fc:
5d:23:27:24:89:f5:77:10:34:dd:91:1f:63:40:c9:
a2:87:20:6c:86:72:83:db:69:a1:3c:37:68:bc:ce:
c1:85:28:06:0a:57:55:29:be:ea:1e:26:e2:a7:07:
95:70:0e:b7:bd:bc:0d:b5:8c:19:60:4a:73:93:3a:
8f:ab:8a:2e:0a:2f:55:47:b8:2f:d8:8a:94:36:9d:
3c:22:46:7b:93:60:27:b0:41:e3:05:f6:16:6d:35:
da:b1:81:33:1e:b5:b1:50:26:19:e3:c3:11:44:5a:
f7:75:c7:1a:ec:54:a9:a3:0e:72:c8:7a:b3:ee:f9:
44:54:03:17:7f:5f:28:31:22:47:c0:7b:fe:a7:c7:
ed:e2:23:79:20:f1:75:dc:b5:db:81:3f:b6:57:57:
e0:a2:92:94:cc:9e:90:5b:a0:9e:e6:eb:cc:a7:e5:
94:f0:ea:ab:ee:80:4e:6d:b4:7c:5b:0e:03:29:51:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:7D:32:93:5E:0D:76:98:2B:11:36:B7:7B:52:82:54:E2:34:7D
X509v3 Authority Key Identifier:
keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/Xvx9MpNeDXaYKxE2t3tSglTiNH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:7b:02:22:41:cf:7e:60:83:fb:db:6e:b4:8c:a1:35:ec:e5:
aa:93:dd:ac:1c:94:15:4f:94:15:c3:38:c5:83:9f:1b:79:f7:
79:0a:58:a4:d2:de:94:4f:67:b1:23:27:e7:3d:c0:7d:0f:dc:
8c:61:e5:2f:da:6a:3e:3d:31:60:09:c6:b1:72:45:81:41:b4:
3b:0e:81:cc:1e:96:01:b4:9a:10:5f:78:c8:ce:ee:75:b5:d6:
55:02:70:a0:1a:69:89:cc:c1:c7:f7:12:ca:3a:19:72:89:3e:
28:41:94:cb:bd:67:b3:c3:f1:f2:14:db:4a:76:c1:b1:20:86:
53:c1:25:53:b0:ab:ed:62:40:f9:99:74:ad:e0:5f:f0:99:af:
db:3c:07:29:9e:ef:db:16:98:00:7b:28:26:17:33:e9:4b:e4:
35:52:d6:8a:e3:21:67:58:3d:7e:ba:2f:6b:c7:bb:da:aa:43:
54:46:63:91:f6:e3:32:c0:91:aa:b7:25:c0:e4:f3:af:25:2f:
c0:6e:ad:45:58:e7:ee:6f:b7:01:38:6f:5e:15:79:18:cb:cc:
6e:63:e1:27:87:25:fc:f4:89:51:51:b8:1d:9a:a7:37:ea:d1:
fa:76:93:46:fe:7d:61:0a:8d:18:d2:a8:67:9c:28:6f:22:40:
9b:a3:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:28:29 2025 by rpki-client