Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g0fOM8Cn71Y2SBgdfGQsfy_LSgc.roa
File: g0fOM8Cn71Y2SBgdfGQsfy_LSgc.roa (raw, json)
Hash identifier: aLkfxKK13ngPTX/Jxz8XudUJ+QXaOmuRo283KEPGYUY=
Subject key identifier: 83:47:CE:33:C0:A7:EF:56:36:48:18:1D:7C:64:2C:7F:2F:CB:4A:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD7A9EDF8C7ECC48CBDD515357345
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g0fOM8Cn71Y2SBgdfGQsfy_LSgc.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
192.71.255.0/24 maxlen: 24
192.71.254.0/23 maxlen: 23
192.71.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d7:a9:ed:f8:c7:ec:c4:8c:bd:d5:15:35:73:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8347ce33c0a7ef563648181d7c642c7f2fcb4a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:78:df:6e:b7:b6:92:fe:8f:a0:03:58:73:
50:32:61:f0:52:ff:04:d8:e7:59:94:b9:a6:b9:4b:
89:91:14:a0:39:4f:f2:4e:ef:e0:cc:5a:91:b0:0b:
23:d9:03:67:cc:3e:ed:0b:7a:c2:da:50:07:76:54:
1b:b0:c9:d7:6b:73:6b:f6:0e:81:11:01:6a:5d:75:
70:88:64:d3:71:31:ba:e2:48:2c:f5:41:c9:43:3e:
3b:59:33:a6:77:50:69:11:66:83:b9:4c:8d:9a:d2:
40:c1:4b:c8:76:ba:a1:2b:c7:ae:d9:d0:53:e4:49:
9d:7e:29:a6:ac:2c:5a:0c:56:4a:f5:fc:27:67:5a:
76:a1:56:83:74:6a:16:65:10:00:c9:a4:b9:f0:c8:
89:62:1c:19:8c:29:c5:f0:e9:fe:7d:5b:7b:a3:bb:
e7:ed:01:c1:f8:79:2f:fb:94:e9:24:f2:1c:20:37:
9a:ca:90:f7:15:63:43:25:51:d9:00:55:4f:0a:6e:
1a:4b:15:cb:1a:62:1e:91:18:da:a1:62:df:bf:6b:
f4:7a:72:ca:3a:3e:ac:86:2e:11:a5:f2:50:8b:f4:
ad:ef:37:c2:98:13:70:7b:11:9c:90:42:95:31:e4:
2d:27:34:4b:4a:a8:b0:c1:13:a7:0d:c7:a9:cc:86:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:CE:33:C0:A7:EF:56:36:48:18:1D:7C:64:2C:7F:2F:CB:4A:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/g0fOM8Cn71Y2SBgdfGQsfy_LSgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
193.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0a:24:72:01:25:aa:1f:eb:44:f5:19:a8:61:2e:be:c1:19:
f5:a7:08:1d:55:58:6b:04:02:2b:fa:75:7e:01:2c:e3:52:3c:
87:be:74:bb:5d:15:3b:41:d6:6c:3d:0f:68:dc:15:9c:03:5a:
3f:a6:34:dd:10:3c:95:32:dd:0a:75:d3:f8:44:94:94:06:24:
e8:9f:04:ee:a6:ff:38:94:e9:c9:e8:ae:92:7a:b4:c9:0e:47:
f1:e5:9d:c1:d6:c5:58:08:19:49:ef:4e:15:81:88:96:ab:3d:
18:0b:83:23:15:8f:31:4f:fb:5f:a8:d5:4a:76:1b:2a:73:1a:
b1:90:b0:41:c1:cf:51:3e:98:0c:58:b6:32:cf:08:16:7f:e7:
15:2d:dc:4e:58:a8:c5:61:bb:7b:86:c2:fa:e8:31:98:10:d7:
e7:0a:25:9c:7e:a0:71:06:5c:e7:86:9f:e0:12:c1:2a:82:81:
f3:ff:47:65:b4:4f:b7:ff:8c:e7:d8:27:b4:55:a6:7c:76:1a:
4e:67:f9:e0:34:32:b1:1f:48:b5:c4:87:34:97:89:9f:b2:24:
67:78:dc:47:d7:a8:50:98:6b:c3:77:b1:bf:71:af:29:34:2c:
e9:ec:9f:a5:13:1a:7b:10:29:3b:e4:db:17:82:0c:03:56:06:
31:99:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:02 2025 by rpki-client