Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X6dYg1F4WcpViZI9XksXju7XWzE.roa
File: X6dYg1F4WcpViZI9XksXju7XWzE.roa (raw, json)
Hash identifier: TLoeNdvSk6N9lHmxXmRxIT+i5xg51SMpQMCKnX4jA9Y=
Subject key identifier: 5F:A7:58:83:51:78:59:CA:55:89:92:3D:5E:4B:17:8E:EE:D7:5B:31
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF6BDD8785126287F0A709212B794
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X6dYg1F4WcpViZI9XksXju7XWzE.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 194.68.225.0/24 maxlen: 24
192.71.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f6:bd:d8:78:51:26:28:7f:0a:70:92:12:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa75883517859ca5589923d5e4b178eeed75b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:47:21:7c:f2:7a:6b:e2:9e:73:1c:79:22:
48:9e:95:f1:d1:08:dc:92:9c:e1:d3:89:ad:1b:8d:
ba:99:88:64:09:9e:95:a3:76:92:9c:91:1a:43:8a:
c2:b9:1c:fe:4b:97:4e:18:03:de:c5:2e:58:0e:2c:
9a:ff:43:9f:e1:8d:c9:4f:00:c5:5f:4c:c0:55:fb:
1e:61:c8:59:77:e4:be:39:b8:98:af:6f:8a:bc:c8:
60:ae:ab:48:37:1d:7f:5d:c2:fc:4f:e8:ec:4c:44:
cc:b0:8b:76:fd:b2:15:d6:d7:e6:67:7e:74:5b:c7:
36:3a:fd:22:75:45:0e:9e:e6:9c:32:41:79:60:40:
7e:36:61:a4:49:ed:94:43:9f:75:c6:33:f2:61:61:
7e:94:d2:8a:94:e9:a5:54:2d:46:df:6a:9c:49:91:
6a:44:99:1b:56:f2:c2:5c:ce:ea:ea:1c:f2:b0:93:
ee:37:48:d6:be:6e:17:78:8f:8f:4a:77:30:9c:5c:
f8:48:2a:52:bb:bd:99:2a:05:4e:5e:c5:43:7f:9f:
ff:cf:03:80:aa:ca:d9:0c:2c:f4:59:74:64:5b:89:
04:52:4c:9b:30:68:16:32:8f:b9:9e:17:23:d4:38:
22:26:e3:d6:91:96:68:fd:f0:71:fd:de:42:b0:bb:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:58:83:51:78:59:CA:55:89:92:3D:5E:4B:17:8E:EE:D7:5B:31
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X6dYg1F4WcpViZI9XksXju7XWzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.26.0/24
194.68.225.0/24
Signature Algorithm: sha256WithRSAEncryption
18:be:ea:29:16:81:0f:bb:02:13:ce:1b:16:1f:47:26:99:2a:
35:d0:3d:de:cd:60:e5:a3:92:22:c2:40:1e:77:db:50:09:a4:
ed:ed:57:bd:43:de:6b:9c:9c:80:61:f3:6c:cd:11:46:29:96:
8d:40:55:23:03:20:ba:f2:42:af:59:22:29:d4:cf:8b:15:99:
29:be:fb:36:79:48:8b:d5:39:09:59:96:cb:56:af:c6:60:37:
10:aa:c8:88:31:26:f8:dd:43:e5:3c:05:16:fb:d0:5c:54:8a:
46:2e:84:13:d2:06:7c:ec:07:43:09:13:72:04:e2:c7:0b:19:
3e:1d:40:92:27:cb:31:15:83:63:9d:ad:f8:18:8c:ee:5c:96:
29:cb:97:90:ff:c6:e3:8f:8b:ea:64:8d:37:52:22:79:c7:b7:
3e:a4:c7:e3:db:18:c7:a1:b1:19:8a:57:14:9a:0d:52:09:ab:
42:d2:81:6a:e5:ff:57:f2:84:2e:3e:ee:79:39:dd:da:43:a8:
de:5f:59:84:58:b3:9b:84:6f:7d:1a:7b:61:4a:30:6a:87:73:
69:81:3e:6e:2b:01:5e:dd:41:c4:3e:13:0f:fc:71:8e:47:a0:
33:67:33:7a:98:7c:0b:2a:05:15:67:df:d4:86:11:79:75:98:
42:e3:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:39 2025 by rpki-client