Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xLu0F4300hpcx8Ht03mGmciprwI.roa
File: xLu0F4300hpcx8Ht03mGmciprwI.roa (raw, json)
Hash identifier: hhvO5E3po3SzmIb5SINhha3IwKqVQ9BSfirI5h9EnnQ=
Subject key identifier: C4:BB:B4:17:8D:F4:D2:1A:5C:C7:C1:ED:D3:79:86:99:C8:A9:AF:02
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01828B956D2883B3D4E3EB5CD70B03A17A0A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xLu0F4300hpcx8Ht03mGmciprwI.roa
Signing time: Thu 11 Aug 2022 06:26:41 +0000
ROA not before: Thu 11 Aug 2022 06:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 209.35.158.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/22 maxlen: 22
64.226.54.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:95:6d:28:83:b3:d4:e3:eb:5c:d7:0b:03:a1:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 11 06:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4bbb4178df4d21a5cc7c1edd3798699c8a9af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:d1:84:7a:d5:ea:3a:d6:7d:c9:d0:ee:1d:
cb:e9:de:82:aa:37:10:3f:d1:72:e5:d5:d1:2f:51:
eb:3f:5c:46:f6:cd:4a:87:21:55:e2:7d:d6:11:2a:
9a:69:b0:1b:76:09:5d:bb:15:fc:02:6c:36:25:55:
55:1c:5b:c7:a7:ef:6b:43:bb:e7:88:76:8d:f7:b5:
d5:e9:d8:9e:98:78:15:a5:c4:5a:a5:28:ef:e4:60:
ec:0c:65:ff:d2:5e:18:6e:54:fb:a9:77:39:46:8f:
01:28:d8:19:75:66:2c:5c:ee:48:40:98:78:de:95:
9a:89:54:4c:aa:b1:4e:cc:3a:9a:63:57:2c:2a:dc:
b2:01:09:71:f6:9d:55:b1:0e:c0:67:75:90:bb:ea:
7c:8f:12:aa:c9:33:a0:3f:d5:66:4c:08:19:07:cd:
06:9d:d5:fc:ce:19:cd:c7:d8:b4:dd:6d:e9:9b:81:
b5:0b:bd:67:3b:7e:e5:f0:b2:3b:27:37:b3:8a:48:
31:c8:e1:38:8c:b1:24:f4:b9:ad:7d:b4:55:65:74:
09:10:81:8d:1f:0b:b4:c5:73:07:11:d9:b2:cf:3c:
a6:c0:9a:36:1c:6c:3b:65:b6:23:ad:e5:6e:97:9e:
df:b9:10:b6:69:c7:44:df:58:f4:9d:69:07:48:44:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:B4:17:8D:F4:D2:1A:5C:C7:C1:ED:D3:79:86:99:C8:A9:AF:02
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xLu0F4300hpcx8Ht03mGmciprwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
209.35.158.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a7:d1:f2:2f:65:92:84:99:0e:41:8d:52:2c:71:64:d4:ee:
49:08:a8:e3:a1:5d:88:10:d1:84:9e:f1:17:6e:6d:6d:ca:b2:
13:39:1e:8c:63:4e:b4:5b:b2:fd:2e:b9:86:75:c6:48:ae:e9:
e3:10:81:94:5b:43:cd:ed:cf:44:40:5f:2d:84:ea:9f:d5:35:
87:51:08:42:07:9a:6b:66:ea:f3:10:b9:24:0d:b7:72:ab:4f:
a7:60:a1:2d:98:e9:96:8a:00:01:b9:d4:1c:be:d1:44:e0:1f:
8c:25:e4:88:92:74:03:88:ed:1b:9c:6d:81:87:16:b8:ad:9d:
03:54:09:83:cb:6e:df:74:7d:41:69:f4:5b:01:19:d9:14:24:
99:5d:9f:b5:46:7d:70:85:d6:83:2d:24:7b:a0:b7:15:62:05:
00:f8:62:02:38:d8:62:23:93:ac:b3:1b:43:b4:e5:ca:bb:85:
87:b2:83:71:65:c1:11:1f:b4:59:f6:17:9c:34:6e:9d:ef:c4:
27:5d:06:42:12:fa:6c:58:ea:2d:31:99:0a:8a:39:e4:00:08:
8a:a8:77:4c:06:19:16:ae:9d:da:00:57:98:72:a6:2e:b9:c4:
15:4d:db:80:bd:13:9c:ad:fe:cc:08:7e:5c:d1:8c:d2:58:ba:
bf:b8:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:03 2025 by rpki-client