Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iXeaZuKwMXngf100SmAAOnEvtH8.roa
File: iXeaZuKwMXngf100SmAAOnEvtH8.roa (raw, json)
Hash identifier: kRWj+cC+/LNu6ew8CxScSQaHB5B5RVFJO6bfHnxu16s=
Subject key identifier: 89:77:9A:66:E2:B0:31:79:E0:7F:5D:34:4A:60:00:3A:71:2F:B4:7F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42D6FDD5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iXeaZuKwMXngf100SmAAOnEvtH8.roa
Signing time: Thu 27 Jan 2022 15:05:47 +0000
ROA not before: Thu 27 Jan 2022 15:05:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211434
IP address blocks: 194.71.106.0/24 maxlen: 24
194.68.22.0/23 maxlen: 23
194.132.172.0/23 maxlen: 24
192.36.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121385941 (0x42d6fdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 27 15:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89779a66e2b03179e07f5d344a60003a712fb47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:fa:0f:5c:81:39:4e:18:eb:04:c5:03:56:
c4:94:52:70:b1:2b:4b:3d:21:70:cd:8d:98:c4:24:
68:e7:09:6b:34:81:0a:c0:2a:57:fa:42:e5:1d:53:
fd:e3:2b:90:22:28:bd:88:78:6a:93:3b:a4:f4:82:
15:ae:7b:b9:83:ec:8c:6b:cd:8a:e2:a7:af:43:f1:
69:16:d3:78:a0:ae:20:31:ac:52:ea:63:73:62:76:
d0:8c:01:2f:54:84:92:e6:be:0a:00:53:0f:ab:3b:
00:70:ad:85:2b:d4:2f:b8:7f:03:3d:77:1d:49:18:
2f:da:d4:67:6d:c5:cf:41:0e:01:25:bb:fd:05:37:
e4:cb:0b:58:e2:b0:78:2b:c1:56:45:93:f6:b8:12:
ba:ac:84:29:89:c1:94:ea:b2:0d:31:ca:6a:3e:2f:
4e:d9:50:b2:97:32:be:41:b6:87:37:70:28:ea:8d:
6f:f1:03:73:da:30:34:84:d2:11:9d:29:13:3e:28:
f1:20:31:70:c6:4a:30:36:93:36:02:41:75:48:12:
d6:fe:9c:cd:6a:aa:ae:5c:00:69:52:29:25:86:47:
2e:86:8c:0d:6c:dc:37:2f:2d:e5:46:ca:46:d6:d7:
74:95:40:48:ac:66:06:8d:8d:1d:46:69:3d:9b:95:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:9A:66:E2:B0:31:79:E0:7F:5D:34:4A:60:00:3A:71:2F:B4:7F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iXeaZuKwMXngf100SmAAOnEvtH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.200.0/24
194.68.22.0/23
194.71.106.0/24
194.132.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:40:a7:cc:06:b1:4a:6e:d5:ee:6c:23:00:e0:1c:4d:74:80:
c3:18:80:ae:18:61:8a:d2:9f:ce:d8:7b:8d:d8:5f:83:b8:32:
65:a6:2d:13:52:82:af:88:66:c8:58:30:e4:09:88:92:9c:c4:
0b:d0:39:fb:99:9f:40:c0:72:63:35:30:d0:48:53:f7:4d:46:
18:0a:28:bb:57:3d:12:98:a0:9f:e2:5f:14:83:99:b6:d8:5d:
16:20:5a:64:cb:fc:8d:2a:a7:19:f5:e8:18:6f:93:20:c2:9a:
8c:7c:9b:8c:b9:67:72:21:46:11:6b:1c:fe:8c:21:fb:a1:f3:
2a:7c:03:96:af:2b:ec:b0:d0:be:a9:a4:b5:0f:3b:23:ca:72:
41:28:df:96:73:ab:2f:62:d1:48:41:36:ad:a5:ec:60:24:1b:
3e:21:80:1f:6d:94:b1:53:d1:09:9a:e1:30:83:7e:d3:20:95:
ba:f3:1b:ca:49:24:5e:95:29:2e:ee:06:ab:43:71:b2:05:ee:
0f:0c:1c:1e:7e:cb:7f:4c:01:67:b7:7a:33:83:42:4e:1a:17:
03:ce:f8:fe:f9:56:ac:52:0f:9c:f0:cc:5d:c7:79:43:ef:8a:
74:d1:57:29:36:f4:1d:c1:1d:33:d5:3d:56:22:86:35:98:ff:
cd:80:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org