Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dY0OjDGV7w_iUQ2Y7ojIS18Dajc.roa
File: dY0OjDGV7w_iUQ2Y7ojIS18Dajc.roa (raw, json)
Hash identifier: vfNWq9qc7gvpAn9LsOgYmG8jGCyssOUf9J8Isckjp+0=
Subject key identifier: 75:8D:0E:8C:31:95:EF:0F:E2:51:0D:98:EE:88:C8:4B:5F:03:6A:37
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42579872
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dY0OjDGV7w_iUQ2Y7ojIS18Dajc.roa
Signing time: Sat 01 Jan 2022 14:02:59 +0000
ROA not before: Sat 01 Jan 2022 14:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
192.71.227.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
194.68.44.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113036914 (0x42579872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=758d0e8c3195ef0fe2510d98ee88c84b5f036a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:70:3a:80:ab:54:70:97:c7:15:c0:04:0f:
5b:6f:41:61:2a:e9:7d:f5:9f:bd:e2:62:99:1f:3b:
3f:1f:7b:11:5f:46:06:cb:08:82:54:d9:2a:9c:f5:
5b:9a:11:16:b3:d9:01:e1:f2:46:ec:3f:94:05:88:
2e:9f:f8:f2:a9:35:ba:46:84:60:30:bd:f6:7f:12:
ee:0a:de:57:5b:74:d8:28:11:37:b6:3d:2f:e5:65:
4b:3f:f2:68:46:38:d9:de:2d:4f:6c:1c:b9:3d:60:
21:99:c5:b6:03:e5:22:f6:12:69:46:fb:dc:cb:4a:
90:c2:06:c2:28:c6:f2:3f:cc:3c:e6:89:85:71:c9:
c7:81:19:b7:b1:13:72:ec:a0:6e:22:11:6a:67:03:
0c:cd:b1:47:d3:40:ab:ff:97:8c:45:c0:31:8d:a7:
67:ce:6c:22:33:d1:4b:8a:44:6a:f7:81:6e:c0:ed:
03:e2:9c:0f:11:e2:07:59:83:bb:d9:24:ff:82:02:
f9:c0:82:e9:16:2f:a6:78:3d:e6:f5:f6:70:a0:f9:
07:c1:55:20:9d:36:b5:d6:bf:4c:01:b9:a1:88:2d:
db:46:8d:0f:84:db:18:ab:24:e8:f7:58:34:6a:97:
95:a7:ed:f2:d0:d7:50:2d:d9:d1:dc:40:15:0f:78:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:0E:8C:31:95:EF:0F:E2:51:0D:98:EE:88:C8:4B:5F:03:6A:37
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dY0OjDGV7w_iUQ2Y7ojIS18Dajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.227.0/24
192.71.249.0/24
192.121.22.0/23
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cc:eb:41:28:93:a7:4a:c7:1c:d5:52:6b:cf:cd:20:2e:b3:
38:3d:ec:32:9e:13:fa:32:a3:9a:aa:c7:21:c4:10:44:ee:cb:
7b:23:4d:ea:cf:4b:c4:b6:30:e4:a9:f8:55:75:75:89:cd:87:
9f:99:6f:33:5f:13:a9:04:6d:32:7e:9d:8c:b0:01:b5:a2:b1:
c2:fc:3c:61:82:c7:8f:61:49:02:58:69:cd:2e:3b:9d:a0:ce:
fe:57:2b:be:27:80:88:98:06:93:e0:30:05:9b:05:b5:3d:d4:
a3:7f:12:3d:63:b3:bf:3d:3e:a9:d4:b0:72:2c:46:8c:00:19:
9e:45:d4:a9:ab:42:e5:09:2f:78:82:14:86:f3:b8:d6:47:1d:
ee:cb:6c:8b:6e:d0:67:d7:a5:4f:ba:c6:57:8e:25:de:bb:ea:
d6:71:e4:4e:da:d3:bb:df:53:e8:71:53:67:44:70:49:ba:d7:
74:14:14:85:eb:6d:74:c6:45:5a:95:41:bb:5d:c1:79:20:b4:
6d:26:ed:41:62:b5:9d:0c:fc:89:54:19:8a:a7:f9:7f:2d:2b:
28:13:5f:52:04:1b:5c:c7:3a:e8:6e:86:e7:1f:af:25:1b:62:
28:c3:9d:a5:57:bd:0f:83:81:68:ef:68:ba:12:86:5e:10:96:
84:97:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org