Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5NiwjNV2RRUq9Tur7PXaZ0YHFjQ.roa
File: 5NiwjNV2RRUq9Tur7PXaZ0YHFjQ.roa (raw, json)
Hash identifier: TGujXpaHRlrFQRHs+E3WZe/WAAVu6yi83ZUDwjXafGU=
Subject key identifier: E4:D8:B0:8C:D5:76:45:15:2A:F5:3B:AB:EC:F5:DA:67:46:07:16:34
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB11008966A39667FED0C5CB04C41B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5NiwjNV2RRUq9Tur7PXaZ0YHFjQ.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209797
IP address blocks: 192.71.208.0/24 maxlen: 24
192.71.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:11:00:89:66:a3:96:67:fe:d0:c5:cb:04:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4d8b08cd57645152af53babecf5da6746071634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:3d:20:7e:7d:47:2d:e5:9e:05:ab:cb:b1:
c7:aa:66:ff:3c:53:39:b8:cc:c8:1b:ce:15:b9:01:
76:66:1f:32:8e:02:77:5b:2c:a3:6a:10:ee:bc:27:
4e:f0:7f:3c:fd:9d:f3:65:27:49:3a:42:0e:f9:a0:
e3:bb:b6:3e:40:b4:28:49:24:ec:70:7a:94:9b:b3:
7c:be:72:95:56:2f:35:40:b7:87:ac:a3:b3:fc:5c:
e2:99:38:8a:91:42:4e:48:ce:4b:99:31:f6:e0:a5:
d4:ea:cd:b7:13:98:80:5e:6f:c4:85:0e:1e:0a:2b:
bc:25:0a:34:54:b5:d5:36:25:a6:34:6c:fb:5b:37:
2f:bf:0f:bf:4c:f8:a5:23:fe:19:07:1b:bb:06:b1:
36:b2:75:96:bd:44:48:11:88:f4:37:bd:8d:d3:f8:
60:c6:6e:53:f7:17:67:04:10:a8:85:ac:81:8b:35:
46:33:78:ba:53:cc:2b:85:9c:3a:07:82:25:e4:14:
9f:4b:d8:da:1c:21:c1:b9:ca:bc:e0:35:29:c3:21:
80:cb:c5:03:01:65:f9:33:7d:a5:70:33:b5:15:76:
73:d6:68:a1:90:4d:6b:98:aa:b2:1f:01:47:ce:92:
8a:84:2d:cc:bf:73:47:6c:ec:f7:d1:4a:6e:95:c4:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:B0:8C:D5:76:45:15:2A:F5:3B:AB:EC:F5:DA:67:46:07:16:34
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5NiwjNV2RRUq9Tur7PXaZ0YHFjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.207.0-192.71.208.255
Signature Algorithm: sha256WithRSAEncryption
2e:51:21:7e:77:0a:f1:00:76:0d:f1:1d:bf:bd:76:81:08:07:
a4:a0:08:1e:16:a3:67:bd:64:11:3e:a7:61:9f:d0:36:d0:17:
45:76:e2:08:a1:c9:6a:8d:65:8f:81:8d:0a:c9:51:32:62:92:
75:ba:a1:a1:9d:72:b2:d9:dd:6f:bb:5e:86:ee:16:f4:d4:28:
fa:83:82:56:d0:a5:44:d4:0d:49:f9:69:93:5e:3a:57:73:ae:
48:0e:4b:6b:81:12:7c:68:71:24:5e:8e:04:6c:6c:0a:d2:cf:
f7:d0:7d:db:b1:85:4b:98:04:87:9b:77:33:14:e9:1c:32:27:
52:47:72:b5:7a:fe:1f:36:99:48:63:b5:7e:ae:0b:62:57:8c:
48:49:6e:6a:a3:b0:76:a0:38:ae:70:d4:31:41:26:f8:6c:77:
b6:fe:01:c1:a1:c5:c0:e4:29:70:7a:f3:02:99:62:f4:7b:50:
c8:70:33:ca:2b:b7:d8:30:b7:df:ea:05:d3:d0:f5:d0:a3:e1:
ff:99:7e:a6:80:54:98:08:b4:e9:b0:52:37:cf:8d:df:ab:81:
fc:8a:0c:bf:e3:91:7b:6f:b7:b5:0a:ed:93:9a:10:f9:38:0b:
7f:15:2c:43:b6:7a:cf:d8:b8:e6:ca:18:ad:e0:90:cd:c6:84:
e7:5b:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:23 2025 by rpki-client