Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XFCx7X_I5inbIysXFIEbVtt9zj4.roa
File: XFCx7X_I5inbIysXFIEbVtt9zj4.roa (raw, json)
Hash identifier: +qB6xoc28KvhB0ZqNpozoZ74lEalJaiwoledmsCHKb8=
Subject key identifier: 5C:50:B1:ED:7F:C8:E6:29:DB:23:2B:17:14:81:1B:56:DB:7D:CE:3E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01879EF7A23BB64FCFA112BC905FB7B14505
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XFCx7X_I5inbIysXFIEbVtt9zj4.roa
Signing time: Thu 20 Apr 2023 14:00:41 +0000
ROA not before: Thu 20 Apr 2023 14:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199902
IP address blocks: 192.121.120.0/24 maxlen: 24
192.121.3.0/24 maxlen: 24
192.71.191.0/24 maxlen: 24
192.36.97.0/24 maxlen: 24
192.71.190.0/24 maxlen: 24
192.71.188.0/24 maxlen: 24
2a01:280:301::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:f7:a2:3b:b6:4f:cf:a1:12:bc:90:5f:b7:b1:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 20 14:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c50b1ed7fc8e629db232b1714811b56db7dce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:68:f5:3a:f7:c9:61:b3:34:fb:28:19:0b:
eb:00:3b:1f:b9:59:db:22:df:a9:eb:7b:dd:98:c0:
7b:4c:15:96:ba:b8:e6:85:53:17:c6:c6:c9:38:03:
04:35:46:d8:4f:a4:b8:88:b8:8a:78:f9:46:91:46:
6c:af:07:67:fe:95:70:9f:36:5d:12:f7:01:44:27:
4b:4e:9f:a8:74:e5:a1:84:92:b9:ec:18:ff:eb:f3:
72:0c:69:f6:68:ff:e0:6a:73:2f:28:9d:4c:d8:50:
55:c9:ff:1c:0d:1e:c8:45:8a:14:39:bd:46:88:dc:
6c:83:44:b8:8d:09:27:22:ac:f4:8d:90:b6:64:f8:
f5:9c:72:4e:33:d2:4a:6a:a9:7f:1c:29:da:8c:3a:
a3:5e:f8:78:17:50:e6:a0:5d:0d:42:3f:8c:0f:6c:
f1:4d:cb:44:2d:cf:26:d6:79:fd:65:e9:98:93:f0:
95:7c:3b:90:5e:9a:c7:f7:05:48:65:f3:8e:1f:ce:
18:0e:60:78:4e:4c:86:1a:b0:75:5b:f8:d9:b5:c0:
d5:23:8f:13:1d:aa:66:d7:07:b7:37:26:1a:c3:98:
15:a8:53:75:fc:85:9e:e0:30:11:5d:68:9a:e2:89:
24:cb:15:8d:70:4e:35:05:db:d8:d4:37:58:e1:66:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:B1:ED:7F:C8:E6:29:DB:23:2B:17:14:81:1B:56:DB:7D:CE:3E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XFCx7X_I5inbIysXFIEbVtt9zj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.97.0/24
192.71.188.0/24
192.71.190.0/23
192.121.3.0/24
192.121.120.0/24
IPv6:
2a01:280:301::/48
Signature Algorithm: sha256WithRSAEncryption
85:8d:98:08:e2:61:90:87:d2:33:87:46:eb:49:c4:04:60:fe:
c7:48:9d:ae:01:63:18:93:5b:1d:15:99:29:c0:57:eb:82:4f:
8c:51:bb:15:f2:01:f8:21:23:05:d4:e6:19:a0:03:50:fa:1e:
b5:e7:67:a2:d6:2b:9b:b3:e4:33:4a:23:8f:b0:01:bb:93:1e:
cc:fb:18:af:a4:68:86:a0:01:ec:c4:6e:8c:9b:5b:f5:2c:fa:
26:9a:6c:b2:3e:69:af:2f:0a:b8:82:8b:e1:4d:b5:ab:e6:c4:
50:e5:2a:63:d7:af:e4:21:94:e1:fb:44:f5:8a:9c:d1:99:32:
c5:c6:8c:01:a5:ac:51:6d:45:44:e3:aa:35:b8:df:6c:60:e0:
56:e4:b5:d2:d2:eb:de:6a:5f:67:c1:99:04:fe:50:f5:4a:84:
81:8d:ff:dc:40:9c:7c:60:a8:4d:91:54:cb:b8:dc:10:e1:e4:
06:8a:01:a5:07:5a:6b:cf:e3:6f:9e:f6:ef:c5:f3:ac:6c:ee:
16:08:40:ed:32:9e:cc:48:eb:bf:24:45:80:92:db:86:83:87:
14:98:c0:55:57:b1:ab:65:2d:3c:67:8b:08:74:71:dd:33:d7:
7d:06:0c:41:75:ec:0f:8a:a6:5b:65:f0:02:25:3b:d6:08:f6:
c5:41:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:47 2025 by rpki-client