Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sxnnJpYfPqLwllrAeI9PNZyZx9w.roa
File: sxnnJpYfPqLwllrAeI9PNZyZx9w.roa (raw, json)
Hash identifier: TWFknzOjF10AnU2yNr/83oUddewhCCLdOlTcOyYwxAU=
Subject key identifier: B3:19:E7:26:96:1F:3E:A2:F0:96:5A:C0:78:8F:4F:35:9C:99:C7:DC
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 3949F9ED
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sxnnJpYfPqLwllrAeI9PNZyZx9w.roa
Signing time: Sat 01 Jan 2022 08:05:37 +0000
ROA not before: Sat 01 Jan 2022 08:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61209
IP address blocks: 194.225.82.0/23 maxlen: 24
194.225.84.0/23 maxlen: 23
194.225.80.0/23 maxlen: 23
194.225.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961149421 (0x3949f9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b319e726961f3ea2f0965ac0788f4f359c99c7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:f4:2b:7a:6d:a2:47:31:af:d8:ff:8c:a9:
3e:b7:f9:a6:75:24:a8:5f:0a:12:df:d4:f0:78:97:
0a:c0:1a:b1:e3:b8:15:b6:4a:b1:50:04:1f:4d:56:
6f:18:c3:e1:c9:4f:73:2e:f1:a2:1f:f0:35:11:d9:
60:54:de:cf:c9:bb:89:ab:fd:9b:9e:20:36:4c:cc:
f3:2f:06:65:d8:70:d7:ec:5f:6e:a8:f5:0a:17:3a:
1f:e2:44:3c:20:7d:97:14:b2:47:86:8a:74:1a:3b:
b9:79:4a:7b:78:32:cc:2c:a7:e2:35:27:b3:b6:d0:
81:b5:3c:9f:29:d0:bb:12:67:1d:44:f9:c5:c2:af:
c8:56:96:0d:87:f5:fc:8e:49:5f:7e:22:bd:40:a5:
ef:cd:ad:f9:10:cc:5b:2c:00:67:2f:57:da:d6:af:
61:bc:e7:ab:fc:cd:6c:9a:ee:96:cb:59:e5:bf:04:
6e:70:78:9a:c9:38:dc:e3:a8:ec:f8:27:b9:27:90:
6c:4f:95:4a:bc:a2:18:91:f0:f1:b2:3c:f8:cc:9e:
73:a1:1a:d9:6f:42:2b:56:db:c3:71:f8:9d:2f:2d:
44:98:2f:27:77:55:2c:e0:ef:21:05:79:62:09:c9:
fe:ce:22:f8:d5:c3:ce:ca:d0:f6:76:6d:ab:ab:55:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:E7:26:96:1F:3E:A2:F0:96:5A:C0:78:8F:4F:35:9C:99:C7:DC
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sxnnJpYfPqLwllrAeI9PNZyZx9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.80.0-194.225.85.255
Signature Algorithm: sha256WithRSAEncryption
7c:df:4b:b6:a2:4f:7e:96:c4:9e:ea:e5:f3:74:a4:7a:bf:84:
34:08:e9:54:6d:99:50:13:4b:79:95:6b:9a:c6:3c:09:28:b3:
32:8b:65:3b:e6:8d:8d:aa:ab:62:04:a0:00:09:24:a5:2b:f8:
dd:ea:e1:56:e3:c9:5b:c4:00:ac:a6:5c:ae:50:69:bc:7f:5e:
ac:fd:44:e7:e8:89:73:1b:54:e1:25:5c:1d:b4:8d:a9:b2:39:
52:25:41:7f:a9:a9:41:0d:1c:9e:84:a3:69:55:cf:69:f1:eb:
78:b2:d1:9e:48:25:fd:80:08:20:0d:98:0c:74:df:92:22:da:
37:ec:fe:27:3e:da:a0:0a:51:b1:43:e7:23:9e:08:1e:c0:2a:
22:79:ad:41:59:ea:89:b0:d5:43:b0:d2:6a:12:98:7c:c0:c6:
7f:9d:21:6c:7a:c2:5f:a2:fa:f4:b9:fc:30:e9:ca:8d:c0:f2:
e9:0f:00:c0:c4:d3:e4:1a:5a:a2:09:45:79:bc:17:be:0e:20:
1c:94:61:a0:44:fd:e1:c7:09:dc:89:ce:46:3d:40:84:93:16:
50:d0:df:fa:ce:bd:5c:85:e6:4b:29:08:e7:5a:0e:01:12:9c:
4c:4b:07:af:e5:c7:a6:36:2d:e9:5e:8e:b8:22:48:a3:09:2a:
7d:b7:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:01 2025 by rpki-client