Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa
File: xgWJLezdeBYDeETgY3KpK_OlRsU.roa (raw, json)
Hash identifier: BW+ArwcxtoJ7Z4yD9eP0bcdC4YaY2L7QVFTFxfquDFM=
Subject key identifier: C6:05:89:2D:EC:DD:78:16:03:78:44:E0:63:72:A9:2B:F3:A5:46:C5
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01870DA3B56ECF0DEE058C38F2E7760FC441
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa
Signing time: Thu 23 Mar 2023 08:44:05 +0000
ROA not before: Thu 23 Mar 2023 08:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208726
IP address blocks: 195.77.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:a3:b5:6e:cf:0d:ee:05:8c:38:f2:e7:76:0f:c4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 23 08:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c605892decdd7816037844e06372a92bf3a546c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:b7:0a:95:d5:d0:10:2d:57:d9:c8:b0:e9:
08:2b:04:65:8f:a6:90:f4:57:11:c7:bf:97:86:de:
29:af:bd:fe:79:e6:41:1a:bd:d1:5c:0f:10:12:10:
42:88:8c:cc:8e:ec:ff:77:2c:40:ec:10:4f:a9:ea:
ad:ad:70:4b:ed:f1:5c:29:40:3e:c6:a4:08:5d:83:
0f:47:1a:29:a5:ee:28:d8:e7:9d:58:ad:3d:60:e5:
96:78:70:c8:1f:53:23:e7:60:7d:11:2f:d1:eb:c3:
d9:55:44:e3:40:0e:30:c3:d4:94:a1:6b:83:91:55:
d4:e1:ad:c3:c3:0e:fe:01:a9:42:d2:b2:64:7b:d6:
c1:a1:40:70:18:92:20:61:87:63:cc:f0:73:1b:77:
c4:e0:b6:8d:1a:52:95:a0:b3:22:1f:4e:9d:97:6e:
8b:04:4c:77:79:4f:ce:f0:1b:c2:72:08:ff:01:bc:
77:db:50:0a:8b:13:6d:1c:23:65:74:80:35:85:6d:
d3:dd:8e:b4:7c:01:ec:b2:fa:9b:79:75:3a:45:2d:
76:5f:31:23:46:81:2f:3a:b0:fc:4d:6c:d6:9c:d8:
cd:29:d1:36:f8:df:6a:61:0d:bb:10:f4:d2:02:47:
ce:5b:c3:c9:f9:91:fa:16:5b:24:72:4c:c2:f9:93:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:89:2D:EC:DD:78:16:03:78:44:E0:63:72:A9:2B:F3:A5:46:C5
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/xgWJLezdeBYDeETgY3KpK_OlRsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.242.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:88:e4:30:50:db:7e:af:06:6e:3f:04:11:dc:cc:7f:0b:e2:
40:26:73:dc:9b:61:f6:fa:98:94:ff:44:d4:46:b6:0e:21:64:
bb:2b:f3:47:b7:81:87:53:68:75:17:27:3f:7a:f4:33:93:3a:
db:42:74:7e:fe:56:65:6e:8d:46:6a:05:2f:68:95:85:20:7e:
96:ec:55:ec:f1:05:04:03:e7:3c:16:85:0b:55:78:59:9e:9b:
c1:8c:9c:23:00:b0:d2:76:84:3b:9f:70:e7:d8:fd:c3:05:a0:
e3:02:d3:94:d2:ed:15:7a:fa:cc:04:7d:23:a2:19:dc:07:0d:
79:ef:ad:72:e0:ac:4c:fa:3b:33:8d:db:4e:e6:30:2a:46:2e:
47:c8:8c:d8:36:7c:63:bc:56:a3:67:3c:c8:16:80:b8:2b:37:
7c:2f:a5:82:c2:db:e7:48:d8:8d:3d:13:4e:16:96:5d:33:75:
a1:d3:73:2c:3c:c0:dd:bc:a1:45:bb:01:aa:cd:3b:6f:07:9f:
bc:24:a0:80:df:a7:d1:27:f1:56:52:d1:de:e6:cb:6c:bb:ee:
34:47:2f:4f:13:7a:42:6d:f6:71:37:5e:89:3e:96:6b:e3:09:
c6:27:d0:85:4d:cc:81:6c:02:31:01:d8:36:11:d4:ff:f5:c4:
2b:9f:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:10 2025 by rpki-client