Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/xwL7S4M6hYrBKzQ1VcvTa-tQIvY.roa
File: xwL7S4M6hYrBKzQ1VcvTa-tQIvY.roa (raw, json)
Hash identifier: c1qcw0oNBXQuGFCF+dcE3CNVj7sMQxh+SG8ChOJqKx4=
Subject key identifier: C7:02:FB:4B:83:3A:85:8A:C1:2B:34:35:55:CB:D3:6B:EB:50:22:F6
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 01856E82163EBA627125C13D9C3FEF0F5AD8
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/xwL7S4M6hYrBKzQ1VcvTa-tQIvY.roa
Signing time: Sun 01 Jan 2023 18:04:57 +0000
ROA not before: Sun 01 Jan 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 906
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:16:3e:ba:62:71:25:c1:3d:9c:3f:ef:0f:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 1 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c702fb4b833a858ac12b343555cbd36beb5022f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:53:88:2d:62:ff:fd:33:82:6d:b7:79:e4:
3f:d1:c6:ac:0f:6a:59:a4:e2:e8:af:cc:26:70:30:
a2:5c:58:b0:24:c4:58:93:af:50:31:42:02:f2:d4:
01:cf:48:a1:95:d2:0d:6f:88:b9:93:69:21:71:6c:
62:58:ca:37:58:01:9d:88:f0:12:4b:1e:56:7d:b9:
46:02:88:0f:a2:dc:81:fc:59:4c:94:2f:91:18:19:
af:54:f1:c1:fe:a7:fc:96:ed:70:5b:70:1d:ce:ff:
c6:64:fc:80:18:a2:a8:45:da:44:d1:1a:12:dc:6b:
08:27:ed:a8:d7:3f:35:43:26:dd:70:08:19:db:27:
aa:d6:93:49:80:95:88:bd:45:43:e1:f5:fd:70:f7:
10:6c:3c:97:da:b6:a9:9c:6b:34:e6:5a:2d:6f:be:
22:ff:e5:5b:28:75:4b:8b:65:51:5f:0f:2c:64:36:
02:ad:c3:14:47:55:1d:03:49:20:72:a0:61:94:6e:
60:22:45:c8:0a:ce:ec:cc:14:42:9d:4f:9b:f1:91:
7f:3b:36:cd:e4:61:90:05:b6:c9:f8:f6:f5:29:89:
05:cf:5a:cd:1c:1d:d5:b8:41:c6:8a:e4:9b:53:80:
a5:09:3d:b5:d8:96:c8:10:26:a3:36:e2:82:f5:fb:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:FB:4B:83:3A:85:8A:C1:2B:34:35:55:CB:D3:6B:EB:50:22:F6
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/xwL7S4M6hYrBKzQ1VcvTa-tQIvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:01:d0:86:0f:1d:35:6c:c8:13:f9:df:5e:b1:e8:20:40:67:
e7:07:44:e4:9b:e1:1f:ef:34:b4:1c:d4:fd:18:12:c0:9b:27:
d3:7c:df:ac:2e:c7:8b:38:16:89:bd:8f:be:85:c4:f8:7c:41:
8d:c9:04:e6:81:ed:bd:2b:a2:11:b2:08:22:8c:f2:d5:ca:e8:
0c:97:7f:11:66:e8:70:21:83:91:7c:41:cd:5e:eb:7b:35:43:
90:bb:ee:bd:ec:d7:e9:c2:cf:dc:9d:57:a2:d2:1e:37:74:8a:
3f:a9:f1:91:71:30:e8:9a:4c:b8:5d:d4:f3:22:b8:f0:9d:40:
20:8d:eb:92:04:9d:d1:c2:91:c4:1b:c9:87:81:c8:98:b3:ad:
72:8c:b6:e0:2c:53:64:16:39:9e:fd:8f:2a:5d:93:1c:37:c8:
dd:66:9f:3f:74:29:28:fc:36:f1:9d:e2:24:c5:8f:f4:7c:54:
39:7d:04:d5:45:d3:bf:64:ca:32:ab:0c:a0:50:ff:fb:8c:b6:
19:79:7a:11:1b:8a:35:0b:1a:8d:ac:7e:d3:4b:bb:de:a5:c1:
45:a9:b5:62:73:83:71:68:5f:b9:4d:38:84:d7:7e:c9:86:32:
0f:c7:54:24:ee:3b:7b:f2:13:09:26:4c:9f:65:13:7c:b9:e4:
ab:f5:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:13 2025 by rpki-client