Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_VoSzhXXY26nnlulm9gNhzDqPZA.roa
File: _VoSzhXXY26nnlulm9gNhzDqPZA.roa (raw, json)
Hash identifier: GbWrFbtCSiZMbO4PjLl2BTdiunUx3RkpOuysL+GWCKc=
Subject key identifier: FD:5A:12:CE:15:D7:63:6E:A7:9E:5B:A5:9B:D8:0D:87:30:EA:3D:90
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4263CE16
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_VoSzhXXY26nnlulm9gNhzDqPZA.roa
Signing time: Sat 01 Jan 2022 14:03:06 +0000
ROA not before: Sat 01 Jan 2022 14:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34950
IP address blocks: 192.165.101.0/24 maxlen: 24
194.68.50.0/24 maxlen: 24
192.176.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113837078 (0x4263ce16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd5a12ce15d7636ea79e5ba59bd80d8730ea3d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:8c:b9:ec:93:4f:b7:4c:70:03:7b:06:f5:
3b:f3:88:18:cc:28:bc:5b:dd:e7:38:e5:36:10:0d:
92:f3:01:93:00:94:6d:28:90:9d:f2:00:c8:64:2d:
09:49:33:96:31:8a:f3:03:99:25:71:64:e9:8e:97:
28:ad:17:4a:1c:e3:ab:19:c3:d3:7f:16:93:f4:dd:
16:ae:f7:d2:f1:21:c9:49:62:8e:8c:09:ad:e0:15:
3e:54:dd:25:a1:1b:45:1b:89:ee:2c:12:ef:ea:00:
73:a4:53:8e:4c:e2:fa:93:98:3a:ee:c4:cc:71:da:
b9:09:54:fd:6b:91:54:d2:70:04:7c:51:b9:20:2d:
c4:26:48:94:28:d3:d7:95:0e:5a:1b:c8:c8:3a:70:
4f:ca:40:98:b3:fd:d2:7b:ae:16:cb:93:87:ea:91:
ce:3f:e6:43:63:f2:68:55:d7:85:f0:1d:bd:f0:8f:
e8:a0:74:08:f1:31:dd:56:3b:d6:7c:0e:2f:d9:9b:
7a:08:33:12:52:c8:cd:be:37:cf:a8:d5:89:c5:5a:
c4:f2:7a:7a:eb:15:22:8b:ef:f1:45:43:dc:b6:fc:
52:c2:6f:e8:39:d6:3d:ae:37:6c:2d:89:9e:da:b0:
36:47:3c:e4:3c:78:f5:bb:a8:49:7b:10:04:75:cd:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:12:CE:15:D7:63:6E:A7:9E:5B:A5:9B:D8:0D:87:30:EA:3D:90
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_VoSzhXXY26nnlulm9gNhzDqPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.101.0/24
192.176.2.0/24
194.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:35:57:6f:4c:13:24:e3:97:03:a0:f0:e3:12:06:d4:eb:c5:
34:98:12:4f:c7:9d:09:36:8f:80:00:21:b5:56:49:6c:08:5a:
6d:dd:14:56:3b:e0:3d:46:46:2d:19:d9:22:40:ef:01:d5:26:
d7:ac:5c:18:ab:eb:8d:1a:c0:7d:8c:65:aa:ad:72:d5:55:1b:
05:b9:89:5e:2a:78:e5:56:2b:2e:49:bf:5e:5f:b9:8f:fd:d8:
98:82:2b:25:b1:d9:0c:f4:3e:02:6c:f9:0e:13:7c:8b:4b:a3:
c1:4d:82:1e:c2:bd:49:c9:cd:6b:70:5c:f3:fd:9a:00:e2:86:
5e:77:76:42:01:c5:3a:22:97:e3:b0:b8:6e:ba:47:51:6e:7a:
9f:8a:cf:1d:7e:19:28:23:3f:77:77:4c:e6:76:3e:d3:a0:1c:
20:ce:68:4e:3d:32:0e:91:e4:27:df:5a:56:4a:da:59:6c:0e:
6c:ed:5b:6e:8c:22:dc:37:4d:e5:dc:d6:6b:8c:20:c6:79:dd:
d7:b1:83:d4:31:3b:17:27:d2:82:7f:fa:ad:fb:2b:61:f1:d8:
42:7a:8d:4a:41:4f:b8:d3:d8:a0:24:96:8e:09:3e:34:dc:48:
d1:1d:11:75:fc:a0:e2:c3:36:5b:72:0b:9a:89:b5:54:1c:4b:
c5:f3:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:50 2025 by rpki-client