Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2shbUNuBTIbGduxWs-fyLhO-W5k.roa
File: 2shbUNuBTIbGduxWs-fyLhO-W5k.roa (raw, json)
Hash identifier: 8/fauye0o/JaXiYIBCIU3pP3EOCL/h1oSK612BnZUqw=
Subject key identifier: DA:C8:5B:50:DB:81:4C:86:C6:76:EC:56:B3:E7:F2:2E:13:BE:5B:99
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0FC13D7554676007CF3738C81688
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2shbUNuBTIbGduxWs-fyLhO-W5k.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209454
IP address blocks: 194.132.58.0/24 maxlen: 24
193.181.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0f:c1:3d:75:54:67:60:07:cf:37:38:c8:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dac85b50db814c86c676ec56b3e7f22e13be5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:32:e7:11:20:50:ae:b0:6c:5d:c6:6a:5d:
3f:e8:3d:9b:27:67:6d:07:0d:b0:ef:73:af:d6:e6:
2a:e7:b5:84:af:a3:47:fd:9c:bd:5e:64:a6:7a:12:
78:01:62:57:3f:46:06:52:8f:11:a7:da:a7:cd:dd:
8a:0d:a5:97:82:74:17:86:79:30:23:47:81:28:fc:
5f:2c:b6:ef:94:99:1b:22:20:ee:25:31:df:67:8c:
7e:d5:7f:d2:68:a0:51:af:50:7c:7a:64:bd:a2:12:
04:02:22:5d:c1:8f:27:34:2b:6b:4d:b1:57:13:22:
64:b7:9e:74:e0:44:3d:33:fe:7d:d8:38:1e:96:a2:
59:e6:06:74:aa:df:b6:70:f4:ef:b8:5f:21:01:a2:
63:69:de:71:f1:19:17:2c:40:bc:54:42:27:f0:22:
98:44:0b:e5:60:64:13:ae:32:8d:19:9e:95:bb:f6:
31:fe:92:08:71:12:81:3a:d2:1c:f3:6e:bb:d7:a8:
af:8d:c0:ce:cd:8e:47:26:9f:ae:c8:7a:76:a4:4d:
19:26:6b:b3:5a:bf:31:32:8b:37:10:96:5c:5c:a9:
fb:ae:15:8a:a4:7b:78:7c:ae:9f:68:b4:51:5c:50:
6d:2a:2b:8c:38:c9:b3:dd:79:20:c9:85:47:4f:28:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C8:5B:50:DB:81:4C:86:C6:76:EC:56:B3:E7:F2:2E:13:BE:5B:99
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2shbUNuBTIbGduxWs-fyLhO-W5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.26.0/24
194.132.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c8:28:30:d3:d7:39:b0:c0:65:75:1a:0b:77:b0:b3:96:1c:
cc:d9:7e:d7:87:df:a4:60:ee:b8:ec:31:52:d9:a3:e5:e8:2f:
22:19:74:dd:7a:f4:eb:ba:22:8d:39:cd:3a:4d:b4:93:ca:ae:
a8:8b:c8:80:ba:35:fd:17:71:8e:fd:22:ab:53:21:03:24:24:
ef:64:9b:0c:83:7b:a6:07:2f:39:4b:53:b7:41:7d:e5:96:5d:
81:ee:ab:86:ed:06:72:ed:4b:d8:bf:10:73:8e:b1:ae:cc:a2:
f8:8e:3e:39:c5:fa:28:7a:a0:8f:ff:8b:45:35:eb:04:d1:85:
2c:52:db:8d:ed:7d:cd:3d:48:30:80:18:a2:20:d5:9f:ea:06:
78:a9:58:da:82:7a:85:fa:3b:7e:55:a0:5c:e3:3a:cd:f2:87:
3e:0b:f7:bb:7b:57:7d:45:54:3c:3a:0d:a9:40:86:83:00:0d:
dd:0e:18:b9:8e:07:3e:fb:8b:49:35:13:6f:fa:00:ae:b5:00:
e1:7c:8c:27:40:2d:6b:c6:82:cc:50:9d:03:43:8b:9d:a5:d8:
f7:56:5c:4e:23:6e:12:ee:c7:c5:20:01:bd:75:c9:54:84:b2:
3a:88:f1:d9:20:6b:fc:18:58:00:ad:43:fc:73:84:b7:a5:65:
65:34:29:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsyw/BPXVUZ2AHzzc4yBaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWM4NWI1MGRiODE0Yzg2YzY3NmVjNTZiM2U3ZjIyZTEzYmU1Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQy5xEgUK6wbF3Gal0/6D2bJ2dt
Bw2w73Ov1uYq57WEr6NH/Zy9XmSmehJ4AWJXP0YGUo8Rp9qnzd2KDaWXgnQXhnkw
I0eBKPxfLLbvlJkbIiDuJTHfZ4x+1X/SaKBRr1B8emS9ohIEAiJdwY8nNCtrTbFX
EyJkt5504EQ9M/592DgelqJZ5gZ0qt+2cPTvuF8hAaJjad5x8RkXLEC8VEIn8CKY
RAvlYGQTrjKNGZ6Vu/Yx/pIIcRKBOtIc826716ivjcDOzY5HJp+uyHp2pE0ZJmuz
Wr8xMos3EJZcXKn7rhWKpHt4fK6faLRRXFBtKiuMOMmz3XkgyYVHTyi2hwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNrIW1DbgUyGxnbsVrPn8i4TvluZMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvMnNoYlVOdUJUSWJHZHV4V3MtZnlMaE8tVzVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbUaAwQA
woQ6MA0GCSqGSIb3DQEBCwUAA4IBAQBcyCgw09c5sMBldRoLd7CzlhzM2X7Xh9+k
YO647DFS2aPl6C8iGXTdevTruiKNOc06TbSTyq6oi8iAujX9F3GO/SKrUyEDJCTv
ZJsMg3umBy85S1O3QX3lll2B7quG7QZy7UvYvxBzjrGuzKL4jj45xfooeqCP/4tF
NesE0YUsUtuN7X3NPUgwgBiiINWf6gZ4qVjagnqF+jt+VaBc4zrN8oc+C/e7e1d9
RVQ8Og2pQIaDAA3dDhi5jgc++4tJNRNv+gCutQDhfIwnQC1rxoLMUJ0DQ4udpdj3
VlxOI24S7sfFIAG9dclUhLI6iPHZIGv8GFgArUP8c4S3pWVlNCmE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:17 2025 by rpki-client