Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jsi8EJcFBuF5lhVxy3b6nkX-iNU.roa
File: Jsi8EJcFBuF5lhVxy3b6nkX-iNU.roa (raw, json)
Hash identifier: aLim3MIsfDGPS62rdX6XDeAtZJ/2PudAykB5T5SNcps=
Subject key identifier: 26:C8:BC:10:97:05:06:E1:79:96:15:71:CB:76:FA:9E:45:FE:88:D5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE4F70A2F8F8E3DB3CF241BB5CFA1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jsi8EJcFBuF5lhVxy3b6nkX-iNU.roa
Signing time: Sun 01 Jan 2023 10:05:14 +0000
ROA not before: Sun 01 Jan 2023 10:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39651
IP address blocks: 193.234.87.0/24 maxlen: 24
193.180.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e4:f7:0a:2f:8f:8e:3d:b3:cf:24:1b:b5:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c8bc10970506e179961571cb76fa9e45fe88d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:30:83:7b:72:24:ea:5b:31:8e:c6:22:d0:
21:1f:70:96:64:7e:55:12:64:66:89:8e:06:63:1c:
8a:50:c4:53:fa:1b:91:c9:d1:6c:71:bd:a4:3f:d3:
09:b7:57:62:e4:28:d3:53:76:56:cd:6b:bb:d1:e2:
4b:4f:ef:28:11:af:2d:1d:1a:f5:7b:f6:62:94:ad:
42:22:51:24:c8:1d:0a:18:bc:f3:00:e3:2e:c0:89:
2f:ca:8c:34:19:11:e4:04:23:16:d1:14:73:9c:f8:
d4:46:d5:00:84:ea:8f:8d:9c:3c:11:0f:5d:06:6d:
17:7a:ba:7c:38:5a:93:ff:9b:9d:d5:55:3e:b0:6e:
2b:08:6b:dd:7e:9a:72:10:c8:61:c4:f9:a3:44:bc:
b6:8d:75:63:32:a8:56:40:c5:4f:00:c1:42:ef:3c:
58:f3:38:99:60:d5:b1:72:a1:9e:8b:66:0b:1d:0d:
69:f0:22:19:f5:5c:a6:35:00:cd:cf:b0:9e:36:06:
73:81:c3:78:76:31:4c:2c:ed:ab:c7:1b:b1:ad:5c:
75:99:83:22:53:b6:7f:c4:34:54:fe:d5:68:9f:3b:
94:65:d5:05:3c:ad:13:5a:52:51:9a:24:75:26:f7:
f7:75:2c:35:7f:2d:11:7d:bb:16:84:00:5c:57:b8:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:BC:10:97:05:06:E1:79:96:15:71:CB:76:FA:9E:45:FE:88:D5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jsi8EJcFBuF5lhVxy3b6nkX-iNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.247.0/24
193.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:93:24:e6:a7:bd:b9:0e:06:87:0f:c7:65:29:9a:66:1f:2e:
2a:e4:d1:1e:aa:dc:52:14:a2:28:fc:bc:14:0a:ea:64:65:b9:
9c:b2:7c:dd:31:a8:ad:34:50:b8:1a:07:26:fc:08:20:ab:2e:
de:07:fc:b3:e4:03:93:1c:9c:55:84:8b:16:f0:53:a0:62:4f:
da:83:e6:77:0d:46:20:ae:47:93:62:fd:6d:50:3b:45:87:e7:
a8:32:10:36:63:79:98:93:b7:22:0a:e1:a7:45:1c:72:6b:7e:
85:04:e6:07:82:77:2e:c8:c8:d1:2d:cb:57:c3:44:fc:3b:38:
cc:01:ff:9c:d9:68:08:31:4e:59:b6:9a:0f:56:3b:84:ae:85:
af:2c:66:99:15:f7:f5:69:55:f7:d0:1d:44:05:21:1d:7f:aa:
c2:8d:2c:2d:55:a4:46:ef:06:fe:f7:13:99:06:0e:5f:16:9f:
2e:99:7c:a4:47:23:50:ba:ec:44:ff:10:53:95:21:66:68:b7:
c4:0e:a9:af:06:98:b0:18:30:91:38:29:71:5d:96:6f:e6:10:
83:e0:4e:55:bc:e0:0f:63:c7:d2:6d:78:cf:a5:04:9f:c5:bb:
0f:01:2d:d1:42:a4:0b:1b:16:b0:ff:ca:ea:38:5b:e9:cf:43:
3a:83:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:52 2025 by rpki-client