Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AUgqIwRAZIDSZaHDEkW9V9ZX5hE.roa
File: AUgqIwRAZIDSZaHDEkW9V9ZX5hE.roa (raw, json)
Hash identifier: KszpCTzyTHAtl6O/oxKIZEjvB/osGN6EmE1ooUQoWAw=
Subject key identifier: 01:48:2A:23:04:40:64:80:D2:65:A1:C3:12:45:BD:57:D6:57:E6:11
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0189016A180D3C0787E73E4F1E5706FE75BE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AUgqIwRAZIDSZaHDEkW9V9ZX5hE.roa
Signing time: Wed 28 Jun 2023 09:51:17 +0000
ROA not before: Wed 28 Jun 2023 09:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 192.71.233.0/24 maxlen: 24
192.121.163.0/24 maxlen: 24
192.71.26.0/24 maxlen: 24
192.71.247.0/24 maxlen: 24
192.121.171.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
192.36.56.0/24 maxlen: 24
192.36.61.0/24 maxlen: 24
194.68.225.0/24 maxlen: 24
194.71.107.0/24 maxlen: 24
192.36.38.0/24 maxlen: 24
192.36.39.0/24 maxlen: 24
192.36.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:6a:18:0d:3c:07:87:e7:3e:4f:1e:57:06:fe:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 28 09:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01482a2304406480d265a1c31245bd57d657e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:d8:81:da:86:9a:7f:c2:e0:88:35:d7:58:
ae:37:a0:6a:20:3b:53:28:a7:db:2c:f6:04:ec:bb:
89:e1:ff:7f:94:06:98:9c:35:0d:e8:ae:f3:1b:c6:
65:5f:2a:5b:53:c8:96:ea:71:1c:76:de:13:cc:78:
b8:83:8a:a9:c3:36:52:e4:7f:4c:f9:8e:90:88:26:
b6:c8:73:4f:63:4d:06:6e:79:8c:03:7b:b6:09:a1:
ff:60:d9:18:7c:04:0e:fb:cc:e5:4c:73:40:3a:f0:
6f:36:a7:ad:44:68:0e:9b:34:da:9e:52:71:7e:f3:
4d:fc:1c:9b:a1:e8:f5:bf:34:8b:32:4d:04:08:a9:
16:d3:3d:71:fc:74:7f:7c:b7:ea:0a:b0:52:5a:2b:
05:63:7a:3d:4e:16:ff:f9:4d:fe:46:80:92:16:35:
60:cf:45:dc:e5:b5:52:c2:fc:93:00:7b:16:70:48:
cc:32:ea:e5:7c:c3:a1:af:32:d8:d8:aa:cf:85:63:
cf:a4:27:44:63:ba:2c:8c:52:2c:ad:e2:5a:59:7e:
3c:fc:b5:7e:2b:a4:9f:c8:37:5b:a5:1d:24:7f:9a:
b9:9f:82:d0:68:53:28:89:b3:21:37:80:cb:5c:3e:
03:e9:47:21:23:58:0d:8d:d7:64:bf:10:69:07:86:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:2A:23:04:40:64:80:D2:65:A1:C3:12:45:BD:57:D6:57:E6:11
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AUgqIwRAZIDSZaHDEkW9V9ZX5hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.38.0/23
192.36.41.0/24
192.36.56.0/24
192.36.61.0/24
192.71.26.0/24
192.71.233.0/24
192.71.247.0/24
192.121.163.0/24
192.121.170.0/23
194.68.225.0/24
194.71.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:e1:b9:6a:9a:1f:fe:43:fd:c9:d9:6e:81:d5:e2:37:94:
2d:2c:3c:5b:f7:50:17:11:4e:ea:ec:9e:98:7d:51:92:a7:2a:
49:59:c6:40:ae:7c:f8:0e:6b:ec:c7:de:e0:8b:2f:61:44:fe:
55:f8:66:67:b5:6b:1b:72:5a:a7:c3:2f:6c:23:e5:a0:d2:8a:
29:77:e3:d5:8b:a4:2f:e1:22:34:13:8c:53:ed:c0:9e:8e:4c:
67:75:2a:ec:20:5e:d2:08:98:1e:94:a7:66:a0:ef:2e:4c:9b:
68:f2:04:b6:84:68:95:6c:e6:e9:b4:92:96:56:f9:16:a4:3a:
e9:7d:33:f1:88:0f:b7:7a:bf:a8:ce:d2:94:b4:11:70:b0:c4:
43:62:e4:6c:74:e0:30:8e:8b:f6:79:6e:10:63:90:92:f4:66:
81:c8:51:72:18:45:2c:76:6f:74:17:71:c9:70:9e:c8:a4:bb:
4c:79:b8:d0:bd:23:f7:ad:46:e5:43:50:61:34:1a:95:e9:0c:
42:7a:d6:de:65:e1:e8:8b:81:66:d4:de:f6:95:af:63:0b:54:
80:a8:7d:87:12:e7:67:3a:39:31:31:28:58:a3:07:96:ba:f7:
0b:bd:4f:db:2c:a6:91:9e:17:e0:7d:fb:7a:b3:f4:c6:fe:19:
79:54:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:18 2025 by rpki-client