Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x8Jbt6NIXAlVgGWKoxDrwotNGqc.roa
File: x8Jbt6NIXAlVgGWKoxDrwotNGqc.roa (raw, json)
Hash identifier: ZdwR/ZUnOIhG8EHWuQe+n94eqp0z4zonT/V4g+GmMdQ=
Subject key identifier: C7:C2:5B:B7:A3:48:5C:09:55:80:65:8A:A3:10:EB:C2:8B:4D:1A:A7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4269E5D1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x8Jbt6NIXAlVgGWKoxDrwotNGqc.roa
Signing time: Sat 01 Jan 2022 14:03:10 +0000
ROA not before: Sat 01 Jan 2022 14:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42160
IP address blocks: 194.71.227.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114236369 (0x4269e5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c25bb7a3485c095580658aa310ebc28b4d1aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:13:54:d5:02:e6:b8:40:a5:c5:03:93:02:
8e:50:ae:9c:ee:97:d8:fd:06:1b:78:14:7c:7d:07:
ec:b4:67:3f:99:76:1a:9f:4f:bc:0a:5d:92:1f:8b:
58:54:5f:c1:6e:87:5c:32:b7:2a:cc:a2:b6:79:f4:
b9:56:35:a5:f0:f7:25:66:a9:14:bb:98:6b:ad:f5:
fa:7f:3a:9c:84:4d:f6:4b:f9:77:9c:6b:09:06:d6:
4c:e6:82:38:43:ab:e5:41:d3:ee:cc:b8:16:ae:1d:
0c:35:21:67:a7:52:8c:92:e4:6a:bd:da:03:03:e2:
a9:ed:24:20:2c:ee:ba:c2:d9:9d:0a:8c:9c:cb:55:
f2:4f:38:6d:55:6f:b7:ae:6e:ba:77:a0:b0:fb:6b:
a8:6c:19:51:c2:e1:79:c3:4b:af:3f:18:86:10:7c:
b9:b6:4e:25:4c:45:2e:57:9b:f0:88:0d:f8:25:38:
e5:93:27:60:63:da:0d:b1:be:18:4e:81:50:82:da:
67:92:67:60:a9:84:53:e0:11:01:79:d7:0e:e1:db:
11:c1:09:38:70:52:b9:34:b8:30:ae:d1:e9:ba:0e:
56:fa:a9:01:87:e5:a4:f6:00:9b:bb:0c:3a:4d:da:
fd:ad:9d:09:0f:15:bd:b0:e6:37:71:69:bd:85:a4:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:5B:B7:A3:48:5C:09:55:80:65:8A:A3:10:EB:C2:8B:4D:1A:A7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x8Jbt6NIXAlVgGWKoxDrwotNGqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.249.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a3:cc:db:27:ee:5e:b9:0c:5e:a7:5f:ee:fa:5d:0a:d6:98:
16:a4:00:de:5d:87:99:9d:95:d8:3e:ad:b0:5a:8b:e5:b2:6c:
f3:f1:f5:7a:d2:27:ac:ac:7c:2f:6b:7d:15:98:57:56:32:40:
54:23:d5:4d:84:72:0c:e7:76:42:dc:2b:7d:0f:b8:04:a8:ab:
78:6e:58:b6:73:1a:46:7d:f9:e2:b6:c8:45:44:fc:65:e3:d2:
e1:5d:8a:24:a5:cf:07:2b:30:a8:36:44:6d:63:d5:19:d0:cc:
86:1c:94:a6:e9:c3:ba:de:a1:9b:98:ec:8e:69:36:9e:92:63:
0d:cf:47:02:9a:7c:14:69:19:97:e1:0a:a6:3e:82:a3:46:9e:
72:59:9f:3f:a5:df:f6:3d:ef:4a:d0:9d:8d:13:c2:7b:79:74:
53:e1:19:f9:52:7f:2a:8c:00:db:c3:43:dc:1b:6a:25:58:a1:
05:0e:09:3f:7a:1a:e6:51:95:8a:a2:6f:39:bc:28:7d:a2:e6:
cb:45:58:25:8f:d7:51:52:34:e6:8c:5e:04:00:b7:28:98:30:
ed:d2:dd:39:05:40:1d:95:97:ec:61:b9:e4:1b:1b:ad:15:3c:
12:a6:6f:67:06:93:56:7c:6c:c7:e0:02:66:c9:d4:36:f6:00:
ca:8d:19:30
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEQmnl0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTM1YzdmNTcxZWVmZWI2NzQwNGFiNmM0NWZkNDc1NTUxYWRhZjFiMB4XDTIyMDEw
MTE0MDMxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdjMjViYjdhMzQ4
NWMwOTU1ODA2NThhYTMxMGViYzI4YjRkMWFhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkVE1TVAua4QKXFA5MCjlCunO6X2P0GG3gUfH0H7LRnP5l2
Gp9PvApdkh+LWFRfwW6HXDK3Ksyitnn0uVY1pfD3JWapFLuYa631+n86nIRN9kv5
d5xrCQbWTOaCOEOr5UHT7sy4Fq4dDDUhZ6dSjJLkar3aAwPiqe0kICzuusLZnQqM
nMtV8k84bVVvt65uunegsPtrqGwZUcLhecNLrz8YhhB8ubZOJUxFLleb8IgN+CU4
5ZMnYGPaDbG+GE6BUILaZ5JnYKmEU+ARAXnXDuHbEcEJOHBSuTS4MK7R6boOVvqp
AYflpPYAm7sMOk3a/a2dCQ8VvbDmN3FpvYWkqjsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTHwlu3o0hcCVWAZYqjEOvCi00apzAfBgNVHSMEGDAWgBQhNcf1ce7+tnQE
q2xF/UdVUa2vGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lUWEg5WEh1X3JaMEJLdHNSZjFIVlZHdHJ4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvNjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8x
L3g4SmJ0Nk5JWEFsVmdHV0tveERyd290TkdxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
NjgwYjc4LTk2YWYtNGE4NS1hYzAyLTk0M2QwMzMyMTMyNi8xL0lUWEg5WEh1X3Ja
MEJLdHNSZjFIVlZHdHJ4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMBH+QMEAMJH4zANBgkqhkiG9w0B
AQsFAAOCAQEAEqPM2yfuXrkMXqdf7vpdCtaYFqQA3l2HmZ2V2D6tsFqL5bJs8/H1
etInrKx8L2t9FZhXVjJAVCPVTYRyDOd2QtwrfQ+4BKireG5YtnMaRn354rbIRUT8
ZePS4V2KJKXPByswqDZEbWPVGdDMhhyUpunDut6hm5jsjmk2npJjDc9HApp8FGkZ
l+EKpj6Co0aeclmfP6Xf9j3vStCdjRPCe3l0U+EZ+VJ/KowA28ND3BtqJVihBQ4J
P3oa5lGViqJvObwofaLmy0VYJY/XUVI05oxeBAC3KJgw7dLdOQVAHZWX7GG55Bsb
rRU8EqZvZwaTVnxsx+ACZsnUNvYAyo0ZMA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:53 2025 by rpki-client