Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/XCJf5-6GmBtEZMYrNDNUharFeFE.roa
File: XCJf5-6GmBtEZMYrNDNUharFeFE.roa (raw, json)
Hash identifier: HQPPghu3s/5Rjvzm2vATiY9g77ee8BBXUefI2T7tCKE=
Subject key identifier: 5C:22:5F:E7:EE:86:98:1B:44:64:C6:2B:34:33:54:85:AA:C5:78:51
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 01856EB903F77BBE504B325A493504B814BD
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/XCJf5-6GmBtEZMYrNDNUharFeFE.roa
Signing time: Sun 01 Jan 2023 19:04:56 +0000
ROA not before: Sun 01 Jan 2023 19:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35574
IP address blocks: 194.187.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:03:f7:7b:be:50:4b:32:5a:49:35:04:b8:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jan 1 19:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c225fe7ee86981b4464c62b34335485aac57851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:1a:22:cf:9a:68:4f:7d:3f:c4:3e:05:8d:
c7:63:ce:aa:5e:39:1b:ed:55:e5:24:13:a3:3f:c5:
fb:22:0c:70:40:21:92:69:1a:3f:d3:3a:37:8a:ce:
7e:6e:65:49:c9:41:6d:32:77:df:c7:80:15:2a:76:
dc:95:e5:84:38:fc:8a:81:8a:05:41:ab:52:ac:9d:
dd:86:fa:cf:e7:10:01:d9:c9:4c:e3:89:b6:26:da:
bc:53:3a:92:47:3a:03:81:0a:5f:4f:7d:78:dc:ec:
a5:f1:f3:49:42:7d:53:b5:10:b2:1f:49:84:e3:d2:
8e:68:67:97:7c:18:5b:73:47:5e:1f:e3:33:88:46:
9d:61:e1:f1:5c:ca:2e:76:89:5a:24:f7:39:75:80:
c8:eb:dd:cd:1f:14:99:89:e6:bf:be:31:22:0e:5e:
14:6c:f6:65:9e:39:ab:13:f8:6b:cf:b3:54:ba:ab:
79:fe:dd:92:05:cd:4f:af:fe:07:ce:35:88:de:d5:
4a:5f:c8:e3:8f:9e:90:92:e4:0a:6e:36:df:11:14:
c5:47:ab:6f:9a:35:a5:65:16:6d:64:de:f3:93:4c:
35:03:fe:05:fa:25:3e:07:58:2a:5f:97:bf:56:99:
66:20:e8:d1:24:8d:06:66:2e:0a:b4:cc:e8:bc:7b:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:5F:E7:EE:86:98:1B:44:64:C6:2B:34:33:54:85:AA:C5:78:51
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/XCJf5-6GmBtEZMYrNDNUharFeFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:8b:35:4c:3f:d9:26:a9:74:7a:45:2f:4f:90:b6:25:4c:82:
3d:55:d9:1e:a4:34:ec:ca:f0:2e:81:a4:ff:b4:06:ab:23:a2:
34:97:09:65:59:79:d3:28:ac:c5:8c:ab:be:9e:01:31:67:05:
53:ad:6f:d5:d3:40:cd:b7:03:c0:71:b0:4b:d3:bc:82:40:6c:
6b:35:72:82:27:b0:13:88:2c:0b:bd:26:ef:ef:63:89:50:59:
89:e5:de:52:cc:bd:66:4e:28:7e:7f:a1:12:ea:22:89:12:08:
9d:46:22:c2:76:67:bd:75:34:30:32:dd:2e:ec:0d:75:7b:a7:
8e:af:9b:d2:65:79:93:c4:1b:77:41:d6:31:39:1f:47:ae:c8:
21:c0:ce:ac:b0:b4:f8:9b:71:8b:65:e7:21:dc:7c:19:47:98:
70:f5:ec:59:b3:a4:97:ce:90:f8:c0:06:9c:70:e5:58:c5:23:
a3:8a:1d:98:9c:4e:9f:e4:99:b7:c6:e9:b7:86:8d:fe:61:ff:
50:50:55:97:b9:50:38:1d:7d:eb:6b:3d:45:c7:e6:87:ee:7f:
d2:f8:15:5e:57:95:ed:2b:3c:dd:9b:2b:c5:56:e7:e6:1b:70:
87:46:8c:5b:e0:f1:79:c8:30:1a:d2:e9:65:72:63:b1:a4:a1:
a8:bb:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:39 2025 by rpki-client