Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYM7b49-omyskZJC3npdjGELt4c.roa
File: XYM7b49-omyskZJC3npdjGELt4c.roa (raw, json)
Hash identifier: fsEUKDMz8tMfJRP7zg8MB5w5mjR00qoieBWdRdetLdU=
Subject key identifier: 5D:83:3B:6F:8F:7E:A2:6C:AC:91:92:42:DE:7A:5D:8C:61:0B:B7:87
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 43F9B406
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYM7b49-omyskZJC3npdjGELt4c.roa
Signing time: Fri 20 May 2022 09:51:07 +0000
ROA not before: Fri 20 May 2022 09:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8674
IP address blocks: 192.165.72.0/24 maxlen: 24
194.68.132.0/24 maxlen: 24
192.36.144.0/24 maxlen: 24
192.71.53.0/24 maxlen: 24
192.71.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140438022 (0x43f9b406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 20 09:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d833b6f8f7ea26cac919242de7a5d8c610bb787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:fb:53:35:10:a3:bf:ba:9b:7c:97:1d:52:
ad:89:6b:91:78:d3:c4:6e:5e:80:1b:bc:16:d6:aa:
03:dd:60:55:da:af:ce:36:15:3f:a3:a9:47:90:13:
ec:78:a4:92:75:f3:6e:63:db:bf:9c:d2:8b:46:78:
17:b5:c0:1e:47:7b:21:bf:f5:e1:8a:29:54:c8:2c:
7e:6d:69:70:82:cf:6b:ba:22:4c:b3:46:0e:78:6f:
01:d7:4c:d4:ee:d9:e9:9d:9a:5c:b4:1d:f8:d0:a0:
52:b0:4e:21:f7:10:ad:c6:70:07:6b:e4:61:bf:8c:
42:8b:dc:9d:91:2b:8d:ee:72:c8:02:c1:65:1e:4a:
78:e9:d2:f6:f3:71:9f:a8:f3:79:28:c2:31:43:98:
af:b1:7a:98:95:20:1e:bf:e6:ea:ec:f8:8f:c7:ef:
76:9b:ca:f2:60:2a:bc:37:08:15:fe:9b:49:a2:27:
bb:0b:11:1b:a6:1c:b6:e9:b1:d4:89:68:91:54:f3:
d7:3d:aa:1f:45:fe:b6:69:4c:89:1e:8a:3c:8d:eb:
22:46:ee:5b:39:ee:1d:b8:20:1f:ca:f2:6c:79:26:
cd:c1:57:a7:ce:f1:e5:d5:93:73:51:6e:43:06:9a:
2b:70:cd:ca:77:c1:66:8c:24:22:80:68:97:ea:67:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:3B:6F:8F:7E:A2:6C:AC:91:92:42:DE:7A:5D:8C:61:0B:B7:87
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYM7b49-omyskZJC3npdjGELt4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.144.0/24
192.71.53.0/24
192.71.80.0/24
192.165.72.0/24
194.68.132.0/24
Signature Algorithm: sha256WithRSAEncryption
84:02:21:b5:22:4a:31:30:58:7c:56:70:2a:8b:7c:9f:d3:df:
c2:dc:6c:2f:6f:61:cb:8c:b3:32:11:01:b9:51:55:96:17:c4:
54:66:be:7b:51:41:4b:72:83:43:c4:dc:cd:f7:4f:64:fc:ef:
c1:87:09:fd:82:fb:6e:f0:b8:c0:19:2f:66:41:ab:57:a5:c3:
0a:8e:83:9a:6a:fc:96:53:69:a5:d3:4c:f5:ee:8a:8b:05:45:
26:2f:a0:24:69:d9:bf:02:f7:7a:7f:97:95:25:09:06:4e:1c:
c6:50:c6:e3:76:68:e6:1a:e1:9d:f2:de:79:75:e8:de:bc:87:
5a:fc:79:b3:6f:ef:82:6e:f8:f9:73:c9:06:fa:2f:9b:bc:e5:
57:8b:3d:33:91:15:2d:ad:cb:51:b9:e2:fe:97:21:54:3d:05:
16:9c:a2:33:46:8d:48:98:cd:8c:9e:a0:8b:39:78:10:11:db:
37:9b:cf:c3:4d:ee:24:10:e3:32:30:75:28:00:c9:67:69:ee:
e0:82:5c:6c:fd:13:83:c3:85:b3:f0:64:86:4a:c1:d7:da:fa:
79:df:20:f9:d2:83:cf:1d:71:78:df:85:62:45:fc:04:84:58:
fd:a1:5b:c0:32:9d:da:b9:fc:6d:56:73:53:43:4f:9c:86:d2:
ed:1f:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:05 2025 by rpki-client