Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/xtWeuQ24TgQtnpAc2cSn6S11NaQ.roa
File: xtWeuQ24TgQtnpAc2cSn6S11NaQ.roa (raw, json)
Hash identifier: bvbjP0nc6bbrIgBxR3+X4Z1laQmjC/bRgJGC1gFUGR4=
Subject key identifier: C6:D5:9E:B9:0D:B8:4E:04:2D:9E:90:1C:D9:C4:A7:E9:2D:75:35:A4
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 191D66
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/xtWeuQ24TgQtnpAc2cSn6S11NaQ.roa
Signing time: Sat 26 Feb 2022 14:37:05 +0000
ROA not before: Sat 26 Feb 2022 14:37:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201463
IP address blocks: 193.8.68.0/22 maxlen: 24
128.127.8.0/22 maxlen: 24
194.55.42.0/24 maxlen: 24
2a07:ce40::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645926 (0x191d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Feb 26 14:37:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d59eb90db84e042d9e901cd9c4a7e92d7535a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:3c:30:e3:d6:0d:2c:d4:bb:cb:ed:d4:b4:
5b:9b:a3:f6:0e:1f:07:fb:ee:57:3a:ac:c3:7a:75:
fd:ee:ab:4c:8c:c8:71:c3:8f:32:bf:75:bf:bd:f9:
48:ae:98:42:92:3b:86:73:e9:e4:5c:82:f4:a8:2e:
c7:b8:4f:94:f8:71:4b:58:5d:80:ed:4b:4f:82:4d:
7e:07:f4:68:98:e6:57:57:fa:b3:30:91:3b:a8:f1:
40:77:62:1d:fc:42:0e:1e:09:08:ff:4f:18:a5:60:
a4:1f:a1:10:b6:40:de:69:a7:75:34:2d:3c:46:c6:
21:c9:cc:f7:2a:b5:21:70:86:e5:b8:fb:4f:a9:e5:
8c:84:02:a7:b2:6e:90:2e:5a:d6:41:8a:72:b7:01:
53:d2:da:bf:a8:f9:ae:8a:aa:97:0a:cb:d3:95:5f:
d3:c1:08:c0:21:2c:99:61:23:f5:a9:38:43:c5:8c:
28:79:ad:a3:9a:5d:16:b0:77:a5:38:f6:e0:11:74:
cb:85:52:9d:57:95:97:d2:85:60:2e:5e:84:06:60:
87:43:29:2f:bb:b2:a8:41:d7:d5:3e:0d:0c:6d:7e:
5b:17:31:e7:32:20:d4:6a:01:76:bf:e7:7b:4b:19:
a3:d1:80:be:41:9c:cd:d9:76:90:e0:57:1b:a1:54:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:9E:B9:0D:B8:4E:04:2D:9E:90:1C:D9:C4:A7:E9:2D:75:35:A4
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/xtWeuQ24TgQtnpAc2cSn6S11NaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.8.0/22
193.8.68.0/22
194.55.42.0/24
IPv6:
2a07:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
75:58:25:36:1e:8a:cc:9d:5a:88:34:47:33:ce:d7:bf:69:72:
90:13:d9:3c:cb:79:8c:23:5b:e0:4b:61:a9:49:3f:a8:cd:3c:
4d:04:a6:84:0d:88:50:a4:46:ce:a5:de:0a:59:44:58:7d:e6:
74:cd:5b:fb:29:8f:84:53:46:a1:b1:0e:ee:14:92:c5:ce:29:
61:72:ce:cc:e3:a0:1a:f5:bf:a3:60:a6:7e:b8:5d:de:bf:7f:
cb:f5:e4:0c:fb:8d:5b:6f:c2:87:90:ce:7a:92:2e:0c:bb:58:
0f:55:91:ab:9b:87:c3:bd:a2:4e:a1:92:ef:01:7f:79:46:83:
f2:b4:6e:d1:2c:9e:5f:14:8f:15:9e:5e:11:7b:34:7e:01:ab:
2d:50:d6:3f:56:bb:51:ae:fd:25:48:30:bd:f9:f7:6d:74:44:
0b:c2:17:1a:f4:e3:db:b1:81:79:2e:07:9b:4b:0a:89:d6:62:
42:bc:94:cb:02:89:d1:8e:8e:dc:d3:d3:3e:3d:b0:7b:aa:64:
20:3c:77:c3:ae:ad:d1:94:22:16:50:b4:1d:2f:44:a1:f8:bc:
33:57:0a:28:fb:02:db:27:9a:bc:d2:4f:84:8f:8f:ac:08:34:
c7:b4:f3:00:fe:21:5a:4c:aa:b4:5c:bd:81:66:49:37:a0:09:
48:a0:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:51 2025 by rpki-client