Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/XIGR9P3KsNE9jDv-zhXRXiq3lWM.roa
File: XIGR9P3KsNE9jDv-zhXRXiq3lWM.roa (raw, json)
Hash identifier: P03RF3Fl/GSywsiuF0GXvZkWbuY1jBJiv8OuypfMz+U=
Subject key identifier: 5C:81:91:F4:FD:CA:B0:D1:3D:8C:3B:FE:CE:15:D1:5E:2A:B7:95:63
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01826E7B7E1FEF68F9CC1440CE442F1390AE
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/XIGR9P3KsNE9jDv-zhXRXiq3lWM.roa
Signing time: Fri 05 Aug 2022 14:49:23 +0000
ROA not before: Fri 05 Aug 2022 14:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206898
IP address blocks: 185.172.110.0/23 maxlen: 24
185.172.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:7b:7e:1f:ef:68:f9:cc:14:40:ce:44:2f:13:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Aug 5 14:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c8191f4fdcab0d13d8c3bfece15d15e2ab79563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:56:56:b9:ae:0d:e1:c8:9c:a2:d9:92:39:
84:6e:d5:66:00:d4:a3:2c:48:35:b8:bd:95:e2:e6:
7c:f9:ad:9c:e8:06:75:33:35:9e:51:4c:ed:10:37:
05:30:53:f7:23:a4:41:bf:40:89:1b:75:80:5c:ac:
3b:94:3b:b0:5b:94:09:e9:bf:b9:64:f1:c3:8a:b0:
61:83:75:a3:ff:0c:a5:0c:43:c0:ac:ca:fe:26:46:
43:84:a7:cd:21:2b:19:37:30:8a:07:1e:59:4a:79:
22:49:12:32:51:fd:a1:d1:21:59:c1:8b:72:48:52:
aa:aa:eb:10:34:98:b5:1d:ad:04:e2:5a:be:37:fa:
d2:d0:ac:fd:29:2c:7d:a4:af:b0:3c:29:d8:b3:e5:
99:60:3a:e8:34:9a:08:f3:d8:0d:54:9e:ca:c7:92:
8e:9a:10:ff:9b:59:e3:9c:7f:64:4e:25:e0:ea:e4:
da:0d:f4:71:af:7a:73:76:11:e9:99:c1:26:a3:ac:
2d:22:4f:42:3b:df:da:9b:a1:27:c2:0b:1d:58:37:
6b:c5:31:d8:ca:cf:f2:9d:e1:00:b4:8c:2b:8d:5f:
6b:2e:3e:a9:4b:e6:37:96:21:8c:c4:5f:6f:82:b4:
80:ce:f3:f5:12:55:86:4e:7c:41:70:0f:67:c7:d3:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:91:F4:FD:CA:B0:D1:3D:8C:3B:FE:CE:15:D1:5E:2A:B7:95:63
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/XIGR9P3KsNE9jDv-zhXRXiq3lWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b3:d6:2c:bd:65:65:a0:73:53:5a:84:06:ff:89:60:f7:25:
e9:5e:10:0c:07:dc:fd:65:98:bc:32:fc:ee:9a:7a:63:1e:67:
82:2a:17:44:38:f1:9e:fe:90:73:d4:06:d4:e0:a9:c6:c4:3c:
11:5c:24:dc:67:ae:ce:10:3b:1b:5b:fb:77:49:a4:91:4d:f2:
c8:cb:f3:08:6c:e0:a2:f5:d0:2a:95:74:11:1e:69:2f:03:8b:
33:6a:05:12:d4:bf:82:09:4f:6b:4f:5d:61:de:72:aa:82:27:
cb:43:42:cd:0b:b9:aa:c6:5f:16:a7:64:a8:f0:66:e4:b7:9e:
4c:c3:96:8e:5d:e1:60:87:b0:10:5c:fc:5b:3e:11:79:e7:83:
41:df:70:37:ff:0d:70:10:03:ba:24:86:b1:ec:db:39:f8:b3:
10:c7:62:d1:c0:78:0b:09:9d:c5:ef:52:3b:c8:20:39:ad:3b:
2a:72:8a:e9:08:1d:20:ab:1e:45:0e:ce:d8:9f:c7:17:4d:2d:
6a:b8:7f:1c:75:5a:c2:2d:85:91:7b:89:6f:37:63:ef:6b:45:
dc:f9:52:56:56:63:a7:78:91:5c:f9:c8:ec:e3:3a:3c:a0:08:
0a:c5:03:63:22:ef:3b:bb:ee:0d:bf:99:e8:4c:03:5c:77:88:
69:13:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:47 2025 by rpki-client