Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/XLbwYJMXP96xhxgur28oH2EEUEg.roa
File: XLbwYJMXP96xhxgur28oH2EEUEg.roa (raw, json)
Hash identifier: AxJ4CM9GGKCnhtfiBKaUIo9+8BSulpGW3fux0v6U+AU=
Subject key identifier: 5C:B6:F0:60:93:17:3F:DE:B1:87:18:2E:AF:6F:28:1F:61:04:50:48
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 01856F02127808266EB530ABDEB5BFBE3EB8
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/XLbwYJMXP96xhxgur28oH2EEUEg.roa
Signing time: Sun 01 Jan 2023 20:24:44 +0000
ROA not before: Sun 01 Jan 2023 20:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202561
IP address blocks: 94.231.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:12:78:08:26:6e:b5:30:ab:de:b5:bf:be:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jan 1 20:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb6f06093173fdeb187182eaf6f281f61045048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:30:8b:55:74:41:71:14:ad:8d:a0:ca:b4:
6d:de:56:90:fc:dd:a2:07:1c:ef:7b:8f:f5:a7:7c:
ee:e6:24:85:ca:15:c7:2d:49:11:c9:3d:01:48:24:
49:b2:94:f8:27:a0:1d:58:a4:f3:2f:e7:b4:f5:61:
a2:4b:9f:75:20:c8:27:7b:1b:02:fb:52:a4:c5:e3:
8b:57:21:c2:e9:b6:d6:25:75:d3:76:94:fc:70:74:
42:bd:d1:38:d4:3e:a0:b7:0d:99:b2:80:58:fe:e1:
59:47:06:ac:2c:6c:6e:3a:9d:50:6d:ca:02:82:2a:
5e:1e:82:4b:4d:79:8f:14:68:4e:cc:11:db:6b:9b:
0b:66:52:61:97:1b:cc:ad:16:08:7e:c6:f7:01:0b:
31:31:05:d6:d0:cb:5e:1c:33:61:6a:86:cf:76:b0:
20:84:00:da:b4:af:eb:83:63:0d:84:55:d6:45:ed:
73:7c:f2:a4:aa:4b:99:31:2d:92:ff:fe:04:b2:40:
c5:b5:de:80:0f:a1:74:df:f9:d3:05:6e:01:01:e4:
07:09:34:7d:32:6d:97:c3:87:ca:60:15:f5:cb:b8:
36:84:88:ee:35:8b:a7:d9:67:c2:b5:05:32:b4:21:
56:8a:30:ce:11:a6:9b:cc:98:92:52:40:b5:51:c2:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:F0:60:93:17:3F:DE:B1:87:18:2E:AF:6F:28:1F:61:04:50:48
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/XLbwYJMXP96xhxgur28oH2EEUEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b3:2b:da:98:9f:59:09:34:70:66:ef:c1:ff:74:b7:2b:f9:
89:3b:27:53:e3:62:37:a5:a3:25:25:29:a7:d3:ee:33:53:45:
79:03:c0:b1:05:a5:c9:33:7a:c8:44:06:4f:4e:53:d2:91:91:
c6:bb:c6:1c:f7:c6:77:3c:49:15:ca:89:dc:91:2c:b0:a3:b6:
49:c2:94:e3:f8:9d:64:bb:3c:e2:98:e9:6f:dc:66:6d:5f:30:
16:75:63:e9:e7:77:6f:c9:63:d3:5a:cc:48:47:d9:a6:03:5b:
cf:bd:a1:80:e0:53:86:fe:8a:51:8b:b0:81:aa:9f:b2:a2:99:
9e:49:92:c8:19:d5:ab:a8:67:9b:0a:f8:05:8e:fd:fe:90:ac:
4a:af:b9:0a:ac:7a:31:7e:a2:c3:53:fb:29:03:7f:b4:6e:43:
d3:e0:ce:42:96:b8:c6:f1:97:af:65:2b:51:3d:f9:6a:d5:01:
f0:e0:33:0e:7f:b6:e4:a0:b3:7c:06:d6:e6:85:c7:c4:e4:5b:
0d:53:17:e9:0d:01:2d:85:99:84:29:3a:06:2e:2f:10:8d:1b:
2d:39:53:b2:47:93:06:01:3c:63:0c:ad:80:25:fb:e5:22:71:
c1:e9:e9:cf:d8:53:a3:96:61:ed:59:71:56:9d:83:02:de:4c:
ea:d9:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:13 2025 by rpki-client