Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/unziTOb55zP-b4U7qCXyZ485e6s.roa
File: unziTOb55zP-b4U7qCXyZ485e6s.roa (raw, json)
Hash identifier: KEhAjVLQPxEoIssjGEQ25eOgn5Jh9P1zw4cVy2KYuFs=
Subject key identifier: BA:7C:E2:4C:E6:F9:E7:33:FE:6F:85:3B:A8:25:F2:67:8F:39:7B:AB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 43029B4F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/unziTOb55zP-b4U7qCXyZ485e6s.roa
Signing time: Thu 17 Feb 2022 08:53:03 +0000
ROA not before: Thu 17 Feb 2022 08:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
192.71.227.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
192.121.46.0/23 maxlen: 24
194.68.44.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124244303 (0x43029b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 17 08:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba7ce24ce6f9e733fe6f853ba825f2678f397bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:ac:e8:63:41:cd:fc:d7:8f:2c:7f:94:5f:
97:90:fc:05:8d:33:f9:d0:fe:e3:e0:3d:d9:63:d4:
b5:31:96:86:ef:ae:a9:53:ae:f4:ed:65:85:60:1b:
4b:68:ec:08:35:9d:33:86:6e:23:0d:38:49:09:24:
83:da:ef:cb:bc:0b:97:f3:aa:67:1d:7a:4c:92:05:
5c:0d:11:fc:80:fd:03:6f:bc:dd:8d:48:85:58:f3:
c0:2d:93:d3:cd:e8:4e:46:ed:5a:4c:6c:14:69:69:
64:79:28:9b:8e:0e:8e:1d:77:fb:49:d2:81:4f:a5:
cc:82:30:60:56:fa:e2:83:38:b9:04:5b:80:e3:0a:
68:c4:fa:76:bb:89:25:5a:c2:f8:f5:3b:fb:31:07:
02:96:7d:83:fd:ab:73:f6:43:05:85:96:f2:26:aa:
6c:dd:7d:c6:be:75:9c:cc:60:6e:f0:c0:c6:8c:94:
38:3c:b7:36:d6:20:54:96:5e:52:83:f3:f2:34:2b:
e3:b1:8d:b1:ac:00:28:d1:50:19:bf:b7:4a:f6:d7:
69:8f:d0:02:43:7d:62:1c:1c:1f:5c:0e:cb:48:8c:
a6:c0:78:ec:d1:b3:b7:23:a3:61:2c:17:a9:dd:60:
99:1c:04:d7:ea:e7:82:2e:b8:95:da:f5:79:53:08:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:E2:4C:E6:F9:E7:33:FE:6F:85:3B:A8:25:F2:67:8F:39:7B:AB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/unziTOb55zP-b4U7qCXyZ485e6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.227.0/24
192.71.249.0/24
192.121.22.0/23
192.121.46.0/23
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a7:31:e6:ce:2c:63:31:46:9b:4a:e2:b0:1a:a5:bd:0f:fb:
53:1b:d1:5d:2b:4e:03:fa:34:a2:88:91:f1:8c:3e:e5:ee:5e:
f5:b5:7c:df:66:c0:d1:4a:58:59:1b:6d:cf:b2:82:9b:71:05:
9c:6e:57:81:ba:39:08:13:7f:c3:54:b3:ab:70:3a:2d:a5:33:
52:68:00:3f:11:c9:e6:d3:75:55:1f:c6:b2:d3:43:f2:62:eb:
01:73:2d:24:52:f2:6a:90:ad:6c:41:3c:9a:ef:68:9c:90:f3:
54:85:83:3a:4b:34:7a:34:3a:2b:1f:a7:17:ca:41:2c:dc:a0:
db:4e:1c:d3:38:3d:c6:dc:89:64:73:3b:26:50:ed:2c:52:c6:
f5:8c:a6:54:26:ea:77:e6:48:a7:e4:a8:f9:46:64:93:73:33:
30:34:56:11:63:80:c5:53:27:55:54:81:f4:1c:5d:05:a3:e3:
46:27:45:8c:65:4b:60:ea:0f:85:64:8b:f9:ed:c0:2f:44:e8:
ab:15:e6:b0:15:52:de:af:81:5e:67:56:af:88:09:25:0f:70:
4a:f6:10:bc:03:00:91:09:9b:3c:ee:73:7c:a7:65:22:bf:61:
97:d2:2f:af:31:d0:31:f6:05:4c:ba:79:d3:a7:a6:2a:16:97:
9d:57:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:46 2025 by rpki-client