Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/xySyQS5g-vWlr71W70RV84ZL-c8.roa
File: xySyQS5g-vWlr71W70RV84ZL-c8.roa (raw, json)
Hash identifier: PPHqo9rdhobBRXdJA2ZPhZekAnwcGZZ7PJf0kXRWlsk=
Subject key identifier: C7:24:B2:41:2E:60:FA:F5:A5:AF:BD:56:EF:44:55:F3:86:4B:F9:CF
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 075CA31F
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/xySyQS5g-vWlr71W70RV84ZL-c8.roa
Signing time: Sat 01 Jan 2022 12:01:07 +0000
ROA not before: Sat 01 Jan 2022 12:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198024
IP address blocks: 185.127.72.0/22 maxlen: 22
2a06:c7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123511583 (0x75ca31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jan 1 12:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c724b2412e60faf5a5afbd56ef4455f3864bf9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:9c:f4:d7:86:eb:97:ba:2e:ab:c9:69:ba:
5e:28:ef:20:5d:61:5c:34:f5:c7:09:31:18:5e:00:
3d:3c:88:20:e8:5d:7e:95:04:cc:87:e0:0a:df:13:
e1:86:9d:8a:01:6f:23:b3:60:dd:87:40:33:a8:64:
59:29:f7:ec:b6:12:3e:70:4d:65:7b:ae:ed:90:87:
73:9a:55:24:5b:ab:2b:6e:60:fd:b4:fa:d0:b4:0c:
3c:b2:8c:d7:bb:83:90:86:58:0d:39:2d:cf:30:ed:
28:79:b7:92:f0:94:80:a6:81:20:99:39:de:f4:dd:
2d:65:5c:2a:46:4a:61:f4:b7:e7:2a:ad:34:9a:f7:
8b:9c:b0:43:8d:61:3a:e2:0f:3a:15:b2:ac:11:cf:
c1:02:94:e2:de:96:bb:6b:53:8d:e0:b5:8d:51:d8:
c8:a3:56:83:5e:b1:95:5d:b0:b1:9d:88:fd:b5:54:
77:31:f1:89:b0:e7:40:66:49:26:8b:73:22:bb:4c:
82:42:0f:b0:73:d3:40:cf:d3:d2:44:73:f8:21:4e:
ae:6b:4c:0d:c8:51:64:e7:7f:7a:56:fb:27:69:fc:
e4:97:91:b6:1f:2d:0e:3a:ad:90:45:0e:c8:af:3b:
bc:88:80:5c:f6:82:5b:02:10:61:72:c3:81:b5:73:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:B2:41:2E:60:FA:F5:A5:AF:BD:56:EF:44:55:F3:86:4B:F9:CF
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/xySyQS5g-vWlr71W70RV84ZL-c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.72.0/22
IPv6:
2a06:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:1f:8f:02:c3:96:71:7d:89:33:a0:73:15:3a:92:5e:b6:5a:
3b:b2:e7:53:4b:39:7d:61:86:d0:22:10:10:00:c2:3a:cf:55:
bf:5f:a4:f8:bc:44:1c:4b:53:70:58:6b:6f:40:92:8f:fd:47:
82:ac:7c:f7:94:3e:71:c7:d8:af:0e:df:a5:39:a9:0f:b1:48:
97:84:f5:21:b4:63:8c:54:61:0c:07:35:e6:be:30:fa:e0:db:
c5:da:7b:73:e9:c8:b5:82:c3:bf:8b:73:12:ac:c2:f6:a7:d6:
dd:bd:a2:a0:9c:e2:f2:da:1c:4f:c1:d8:09:fb:30:97:b3:6f:
ad:91:20:eb:35:b8:42:f0:81:70:ab:11:fd:b3:6f:a9:ac:fb:
76:53:77:cf:f9:4a:c3:4f:bf:41:53:b5:2b:f9:5a:74:86:30:
77:41:6e:cc:6e:66:97:73:cf:be:fc:b5:55:c2:52:26:77:93:
96:1d:fd:10:5b:11:79:2b:11:2a:53:a2:59:e9:a3:be:f0:cc:
e8:e0:78:db:16:5f:59:51:62:60:86:1f:f1:64:3a:b3:e9:a7:
51:ad:da:7a:6a:0b:b8:36:36:97:1c:a3:ab:3c:03:b0:bc:c2:
94:cf:06:38:a6:a3:52:58:74:dc:ce:c0:30:6c:26:4b:a3:4a:
31:9f:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:58 2025 by rpki-client