Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DE71OEcOFv6SNH9Eh-Q6zLRIMaM.roa
File: DE71OEcOFv6SNH9Eh-Q6zLRIMaM.roa (raw, json)
Hash identifier: WuY/wjyjiIr9bHtr/nS9F5+XmI5ozf65x/AMPY/Ecx8=
Subject key identifier: 0C:4E:F5:38:47:0E:16:FE:92:34:7F:44:87:E4:3A:CC:B4:48:31:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF826EA9E20C57C64DE732AA0F9D6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DE71OEcOFv6SNH9Eh-Q6zLRIMaM.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 192.71.233.0/24 maxlen: 24
192.36.38.0/24 maxlen: 24
192.36.39.0/24 maxlen: 24
192.71.247.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
192.36.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f8:26:ea:9e:20:c5:7c:64:de:73:2a:a0:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c4ef538470e16fe92347f4487e43accb44831a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:aa:53:1c:28:0b:48:40:dc:58:1c:81:d0:
4f:c5:11:fe:57:7e:f1:d7:68:7b:2f:44:bc:57:a4:
a7:dc:32:75:27:b0:75:2f:21:8b:4e:5e:ff:e9:c7:
91:59:dd:f9:5f:bf:60:fc:43:07:55:ba:28:13:89:
f7:43:ad:52:42:f2:3e:9a:cf:0a:4d:c0:eb:9d:d8:
3c:c8:1f:c3:4e:97:33:62:67:2b:49:4e:d6:da:47:
1a:aa:a6:69:32:69:b3:18:e5:b3:dd:ea:4d:ac:d5:
d7:c2:67:d5:c2:b2:a0:e9:c8:42:d6:2c:16:8c:a2:
d8:a9:0e:e5:37:c3:2c:eb:ee:12:c5:3f:4b:3f:6d:
13:cf:54:31:ad:e9:b5:dd:9c:93:8f:19:23:4b:59:
8e:eb:df:48:cc:88:9b:04:1a:45:30:7f:7f:4e:89:
30:2a:a8:50:e5:da:0b:28:c0:60:88:6a:7c:63:f9:
a7:3c:ea:9c:94:2e:57:38:2c:87:38:7d:61:e9:ad:
4f:6f:89:51:50:f2:c7:31:86:18:71:5d:75:f9:88:
23:c0:b8:7c:17:97:dd:0e:ca:f3:7c:7b:2b:65:e6:
5d:3b:b8:1a:b5:40:ec:cd:35:53:26:02:ed:b2:ac:
82:2d:98:54:36:ce:03:bc:06:70:19:9d:53:33:7e:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:F5:38:47:0E:16:FE:92:34:7F:44:87:E4:3A:CC:B4:48:31:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DE71OEcOFv6SNH9Eh-Q6zLRIMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.38.0/23
192.36.56.0/24
192.71.233.0/24
192.71.247.0/24
192.121.170.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ff:9c:02:d0:9c:68:84:85:7a:d8:42:dd:10:2c:ba:22:be:
4e:75:9d:48:35:89:1f:7b:7d:69:80:d0:12:5e:92:fa:85:ba:
f8:11:bb:02:a4:62:e7:0e:0d:b8:dd:9e:0f:82:aa:f2:9e:a5:
32:f6:4b:97:d1:66:75:8d:64:f9:83:6a:80:4f:1b:35:6b:72:
4b:83:53:5b:62:6c:2b:78:85:03:32:8c:97:fe:d9:15:a6:f0:
0b:a4:3d:ba:bf:7f:b1:eb:f7:b5:62:1c:f3:8a:45:0e:1d:d4:
94:cb:11:93:b8:4e:07:c0:fd:c2:0f:d1:bc:c2:53:80:cb:62:
8a:f3:d2:7b:13:6b:2a:4e:77:83:db:50:00:4d:1f:1c:45:f1:
f0:97:e1:39:19:a5:3a:a1:fa:b6:6e:04:d7:07:79:d3:8c:82:
bc:16:84:24:1c:1c:19:c9:b2:bc:d2:52:34:81:69:2c:2f:81:
33:ce:f1:f6:aa:00:6e:a4:58:23:b4:17:89:b0:07:fb:64:3a:
fc:62:b0:6c:ea:ed:f6:19:bb:84:6e:96:df:5b:bc:c8:b1:99:
6d:f3:6c:2d:a2:2f:32:c3:22:9a:1a:b5:e6:c2:65:6c:56:15:
d7:93:64:57:96:fa:59:ff:af:ef:b7:8c:7e:08:c7:dd:62:dd:
88:c5:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:49 2025 by rpki-client