Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/xP-MWglqqw4nAQoolixx2ft945M.roa
File: xP-MWglqqw4nAQoolixx2ft945M.roa (raw, json)
Hash identifier: pc/x1F7hlfptA3ne33Bw6wB0K+GleMoyqZ3q1sSCi5g=
Subject key identifier: C4:FF:8C:5A:09:6A:AB:0E:27:01:0A:28:96:2C:71:D9:FB:7D:E3:93
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0185719565D02F905FB6CE7ED1E50565D176
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/xP-MWglqqw4nAQoolixx2ft945M.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59877
IP address blocks: 185.61.176.0/22 maxlen: 24
193.39.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:65:d0:2f:90:5f:b6:ce:7e:d1:e5:05:65:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4ff8c5a096aab0e27010a28962c71d9fb7de393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:be:74:c0:ff:cb:52:29:1b:2d:df:59:27:
2d:7d:16:26:68:db:b4:f5:45:ee:a1:2f:f3:87:49:
04:8d:78:75:90:48:f0:68:57:fe:02:49:f2:8d:4d:
1d:b3:da:a2:38:45:d8:4a:75:ba:b8:71:35:90:c4:
bd:4c:41:f0:b4:e5:a0:e8:b6:bb:7d:f0:81:e3:b8:
1f:a1:20:50:f5:30:b3:84:8c:98:06:c8:8b:e4:96:
3d:36:db:a4:e6:5d:87:05:98:e5:73:52:ea:fc:71:
7a:48:4e:3d:50:29:e7:81:36:0a:b7:f5:93:37:16:
5b:3e:5f:5f:ff:be:10:ab:d3:2c:29:55:da:b2:62:
35:34:7b:68:1c:3f:e0:af:8d:56:22:c0:80:b5:09:
cb:e8:cc:09:c4:bd:00:43:aa:77:ba:98:c0:35:31:
24:3f:46:cc:5f:5e:28:9a:62:fb:15:f7:d8:e8:d3:
35:a6:ee:e0:29:5b:e2:79:d0:0e:22:cb:c4:30:2a:
df:ea:53:13:36:17:d3:b8:c2:73:4a:de:81:68:de:
c8:cd:df:ab:bb:8a:49:88:57:73:f1:4d:4f:57:81:
bf:75:da:d4:ab:46:e4:3e:03:22:8e:bb:05:45:c6:
d0:c8:fb:88:9b:33:4e:f5:56:9a:bf:68:78:b8:a9:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:8C:5A:09:6A:AB:0E:27:01:0A:28:96:2C:71:D9:FB:7D:E3:93
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/xP-MWglqqw4nAQoolixx2ft945M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.176.0/22
193.39.0.0/22
Signature Algorithm: sha256WithRSAEncryption
37:a1:c7:4b:11:68:19:1b:d1:c1:ec:ae:a4:74:8f:38:ea:1f:
6d:5e:ba:97:b7:f1:1d:5d:41:01:2a:03:5a:f4:ee:fe:92:bb:
df:7d:05:87:9c:d4:fe:c4:aa:f8:5c:74:b8:d7:4f:30:2d:c5:
af:f3:b7:8c:3a:82:7f:6e:91:ad:a1:8a:71:f6:3f:f1:95:54:
f9:d9:d1:90:19:2d:9b:20:44:5b:43:14:80:17:ad:f4:53:cd:
94:98:f7:4f:19:ac:3f:f5:53:0b:a5:53:15:1e:70:f3:ef:60:
44:41:a6:73:f0:d5:b3:c3:b0:fb:89:4c:bf:d5:62:cb:29:78:
83:b6:46:14:14:25:5d:18:21:bf:8f:fa:4f:9e:eb:ba:b5:c8:
50:d2:8a:e2:36:3a:c4:35:c9:74:95:ee:a4:ea:68:f9:4c:f1:
fe:24:87:3b:1f:2c:d9:2f:07:1f:32:52:fe:a2:35:e4:f9:76:
91:e2:7a:2a:63:d4:93:8d:7f:0e:9e:72:03:0f:40:f5:be:e3:
ee:7e:45:e4:7d:1d:52:26:a1:84:a4:95:7d:86:70:9c:2f:9c:
08:b3:68:b5:c4:4a:c3:2b:31:eb:35:51:6e:5f:3c:b2:85:5e:
1c:94:05:4a:a8:6b:97:14:91:b6:a3:f9:2d:eb:29:f6:49:30:
93:b1:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:08 2025 by rpki-client