Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpC4BYwf1ri7sPK2j3NNMRZRKF8.roa
File: XpC4BYwf1ri7sPK2j3NNMRZRKF8.roa (raw, json)
Hash identifier: qcGAx9hDsgvx8ziOHx4wjHgK2yZKrXoWkXqnrV4FAW8=
Subject key identifier: 5E:90:B8:05:8C:1F:D6:B8:BB:B0:F2:B6:8F:73:4D:31:16:51:28:5F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4278F1F9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpC4BYwf1ri7sPK2j3NNMRZRKF8.roa
Signing time: Sat 01 Jan 2022 14:03:19 +0000
ROA not before: Sat 01 Jan 2022 14:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56946
IP address blocks: 193.181.52.0/24 maxlen: 24
193.181.54.0/24 maxlen: 24
193.181.53.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.181.52.0/22 maxlen: 22
194.103.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115222521 (0x4278f1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e90b8058c1fd6b8bbb0f2b68f734d311651285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:02:49:dd:87:64:92:2d:43:73:dc:06:65:
ce:f0:2d:49:22:f5:4c:a3:45:19:6e:75:98:0c:e8:
d7:99:0b:5e:9a:de:59:ae:0c:9d:65:ea:dd:dc:07:
00:b7:90:5e:88:4b:8c:d8:42:93:b3:f4:af:34:c5:
05:23:98:e0:66:0e:98:8b:01:e0:23:f4:4c:36:47:
02:5f:3a:08:19:4c:00:a8:ec:9a:07:5a:8f:d1:db:
32:34:b4:a3:47:19:69:71:a3:34:43:12:e0:df:39:
d6:a5:c1:ae:0b:f1:62:4e:9a:37:55:ca:56:cb:5f:
b5:de:38:c3:e1:d2:04:3b:df:04:98:5e:10:0b:cf:
62:f1:94:2f:ff:f8:63:e2:be:84:5c:3b:8b:5c:e6:
bd:5e:22:dd:11:ea:23:b7:32:25:3b:d4:14:5d:29:
31:74:6e:88:42:16:8d:c9:49:31:51:20:30:a5:89:
93:2b:9f:48:8c:69:80:3c:44:27:0a:de:50:37:0d:
1f:00:bc:e8:5b:f3:6a:0b:e8:6b:18:9d:df:45:72:
f5:a8:ee:55:c6:7a:47:f6:d3:19:64:06:1d:33:98:
23:ca:3b:ed:65:5a:62:a6:f1:83:00:81:a1:5e:29:
e3:43:12:4c:56:26:e4:9a:cd:d1:12:75:e7:7b:0e:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:B8:05:8C:1F:D6:B8:BB:B0:F2:B6:8F:73:4D:31:16:51:28:5F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpC4BYwf1ri7sPK2j3NNMRZRKF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.52.0/22
194.103.88.0/24
Signature Algorithm: sha256WithRSAEncryption
44:80:93:10:5c:d7:c2:0c:a4:a6:cd:5c:40:ac:e6:b7:d7:01:
a7:1d:ea:51:a3:75:44:73:78:23:0c:58:fc:70:85:76:02:b6:
c2:ce:54:19:b5:cd:d9:ce:76:9e:bc:b7:86:f1:de:c2:8b:fd:
29:ff:40:6f:b4:65:b5:66:b7:f7:10:bd:a3:40:a0:6d:4b:15:
ab:55:18:de:e2:88:0a:54:41:f1:84:07:23:bb:56:ce:8f:22:
48:b1:5a:1b:90:b8:d9:b1:e2:81:8f:44:2d:02:65:ce:ab:20:
a6:f3:e9:6c:1d:96:c9:b1:a1:be:c1:ae:7f:96:1c:95:f9:3d:
fa:78:f5:8d:ef:c9:05:d9:fd:e9:93:26:dc:ef:c7:21:7d:35:
12:6d:08:ab:c8:d6:20:89:ce:54:2b:68:b7:ee:7e:e5:39:88:
09:c6:4c:33:89:b8:90:27:3b:47:d8:7f:03:c7:cf:95:f6:44:
1e:14:4c:94:15:f7:69:58:1f:fc:94:c3:5a:67:bd:53:99:7c:
d4:2b:3c:09:5d:ff:9c:6a:43:f7:42:31:81:bd:a2:a1:6d:0e:
d2:83:b3:63:f5:b2:1c:c8:3f:93:1e:0e:16:2e:7c:ab:14:87:
09:95:18:5e:f4:d9:36:aa:22:18:9a:2d:56:5e:b0:94:bc:c9:
f6:82:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org