Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ElTzlJw9VZ6SDp7Gg0cmatXRLOU.roa
File: ElTzlJw9VZ6SDp7Gg0cmatXRLOU.roa (raw, json)
Hash identifier: NrEXSMTziWXmNJA4NhoNDLdO29l+0uCmH3AMepppKXc=
Subject key identifier: 12:54:F3:94:9C:3D:55:9E:92:0E:9E:C6:83:47:26:6A:D5:D1:2C:E5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAC5E9DA92EC678F7B75D85AB1EB0A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ElTzlJw9VZ6SDp7Gg0cmatXRLOU.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.235.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c5:e9:da:92:ec:67:8f:7b:75:d8:5a:b1:eb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1254f3949c3d559e920e9ec68347266ad5d12ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:5e:0e:b8:6b:79:79:10:a5:bf:af:52:98:
17:35:95:68:2f:17:55:d6:e6:03:4d:21:73:26:b2:
df:03:e2:bd:a0:0b:7f:76:07:d9:7d:2b:a9:ba:4f:
bc:6b:74:21:bf:9d:cb:83:49:2d:9d:d2:13:66:7b:
70:4f:bd:35:c0:65:ff:fc:4e:d0:ba:61:fa:e9:6a:
21:94:a6:3d:34:8a:97:c2:cd:a9:a5:9a:78:e6:4c:
45:73:48:8e:20:e3:99:b6:ab:2a:de:12:87:ad:45:
37:e4:9b:b8:ee:70:53:97:0b:f6:d1:1a:0d:45:7b:
0a:f7:a0:b8:07:68:d5:94:f2:71:0f:22:0d:c8:8d:
d6:c4:57:77:57:9b:74:61:5b:8f:2f:99:b3:cc:3e:
3f:c8:16:d6:65:cd:62:c8:12:60:90:45:d3:44:ad:
5f:6f:48:56:32:70:6e:dd:ab:52:f2:7d:8a:4e:87:
05:75:f6:16:ce:3a:d3:69:7d:f2:61:30:12:ac:6f:
30:04:eb:40:c9:dc:42:8c:b9:27:6a:13:37:60:10:
6f:d5:2a:a5:fe:23:9c:ca:83:0b:26:b9:bf:08:d8:
a1:62:dd:0f:c5:f2:ea:4f:09:33:24:d1:75:cd:18:
7d:f7:b0:dc:8c:8c:15:60:8e:50:9e:8e:44:ca:00:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:F3:94:9C:3D:55:9E:92:0E:9E:C6:83:47:26:6A:D5:D1:2C:E5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ElTzlJw9VZ6SDp7Gg0cmatXRLOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.207.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ea:2c:40:f7:fa:a2:ed:47:a7:d4:85:17:0b:67:62:5f:c4:
98:89:c3:43:a3:d2:83:9e:21:90:84:c6:f9:17:80:87:55:03:
38:18:28:59:cc:a3:2f:78:79:42:61:85:7f:27:6a:ec:39:15:
9e:21:c7:15:b9:c2:59:eb:00:8b:e9:df:93:6b:e6:3d:b0:4a:
32:bf:27:73:20:f7:09:86:f7:77:9b:96:39:c8:95:45:46:24:
f5:2d:85:f2:41:f9:35:78:a9:01:62:30:a8:7a:78:c0:b2:f4:
9a:79:4f:ff:49:c2:6c:8f:76:01:8c:46:46:aa:2c:c3:a9:9d:
51:96:b2:82:c3:b9:cf:27:3e:88:36:b1:94:c8:dd:93:db:ef:
31:f3:62:c1:69:b8:80:42:7b:a9:11:6f:32:25:e3:4a:4b:e4:
22:01:df:6d:51:17:5a:cf:09:cd:b4:f8:f3:54:21:a3:a0:f8:
bf:7e:10:26:48:58:7f:56:54:f9:24:8c:f5:d7:a2:e9:41:5b:
b4:49:f5:80:bb:44:0a:18:2e:ef:a2:d9:8a:84:43:76:be:4f:
77:42:e1:99:3a:ff:8e:bf:4e:91:02:98:20:c6:5e:d6:3a:f7:
a6:06:c3:5f:cb:0f:45:76:17:7a:6d:4f:5e:28:b0:61:7c:3d:
7d:2c:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:06 2025 by rpki-client