Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/xqBdO3sGPL5QJmFnNsCma1XhK6s.roa
File: xqBdO3sGPL5QJmFnNsCma1XhK6s.roa (raw, json)
Hash identifier: 5N25PHSjoxSRAsHjD+lPO2NvmRbHC2KKU/SPFnvn/+M=
Subject key identifier: C6:A0:5D:3B:7B:06:3C:BE:50:26:61:67:36:C0:A6:6B:55:E1:2B:AB
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 0182F4BF20196D060B01FB9739E077EB9EB3
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/xqBdO3sGPL5QJmFnNsCma1XhK6s.roa
Signing time: Wed 31 Aug 2022 16:32:22 +0000
ROA not before: Wed 31 Aug 2022 16:32:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 194.50.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:bf:20:19:6d:06:0b:01:fb:97:39:e0:77:eb:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Aug 31 16:32:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6a05d3b7b063cbe5026616736c0a66b55e12bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ce:05:ee:4d:52:f1:e8:c7:c7:5c:db:e7:40:
da:72:f7:60:ff:0e:d8:9d:4c:b5:d0:a4:fd:42:9d:
b7:78:56:97:e3:4c:90:4c:0a:d6:0f:f7:a6:a7:d0:
ed:1f:33:7e:a6:42:8c:03:e5:3b:b4:cd:dd:cd:53:
57:ae:96:2e:34:bd:c4:26:2e:2b:e7:40:1f:25:ed:
f0:b4:e4:f4:07:a3:c2:34:e3:51:df:9c:cc:b7:ae:
75:a3:4e:f9:16:c4:3b:95:27:53:8b:ae:83:1a:18:
93:f5:57:c6:ef:ba:e5:c5:f3:2e:5b:28:ab:86:55:
d9:30:46:64:40:4b:25:b9:0b:cb:1f:7c:c0:ea:fc:
f1:7e:8b:eb:0d:8a:c9:be:a8:7f:cd:e0:2d:b7:43:
c9:7e:9a:64:3b:ed:21:e7:d4:eb:df:6b:bb:2c:98:
5b:89:f6:74:d7:13:ef:f0:c6:ac:bf:d5:d8:23:d8:
bc:7d:4f:eb:68:b0:34:ca:e1:f0:7b:05:be:da:83:
db:56:fa:41:ab:28:2f:7c:2e:e8:c2:d4:58:9f:51:
d0:07:e2:6b:08:77:ee:f5:f2:98:b5:89:0f:ed:f2:
5e:0a:8b:dd:68:f4:0f:62:09:22:66:23:78:66:98:
a9:46:eb:ba:a3:01:3e:0a:27:5d:67:39:97:da:20:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:5D:3B:7B:06:3C:BE:50:26:61:67:36:C0:A6:6B:55:E1:2B:AB
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/xqBdO3sGPL5QJmFnNsCma1XhK6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.21.0/24
Signature Algorithm: sha256WithRSAEncryption
18:aa:77:5d:93:01:8f:d4:35:d7:db:ef:26:c4:34:3a:a4:ae:
6d:a2:34:2b:f5:77:58:96:b0:59:a8:0d:46:6e:ca:0a:07:d3:
fd:09:64:6f:d8:b9:11:97:fd:36:14:b4:d7:c7:ac:2d:bb:6f:
d4:74:fd:ad:d7:f0:1d:1f:5c:03:e4:ef:bc:e6:3e:54:7b:cf:
f4:56:02:01:07:df:23:15:7a:b5:90:a0:4d:84:64:d5:5d:6f:
c6:de:b1:b5:08:1d:91:41:26:e8:a4:a6:26:b9:aa:3d:73:08:
ac:2e:93:62:85:da:a7:31:c1:ac:5d:a6:c6:5a:6b:b5:8f:7d:
47:5c:5a:f0:eb:f9:5a:7e:b6:39:2f:12:a3:69:98:e3:1f:b7:
16:ab:60:ff:74:24:67:03:f9:f2:fd:ff:11:85:a3:1d:b0:3b:
e2:65:19:27:25:d9:64:d7:41:95:e5:78:fe:00:37:da:10:88:
33:47:3e:51:5f:09:52:88:2c:7c:06:06:bc:eb:c9:78:a4:c1:
50:e2:fb:1e:e2:6c:3c:62:a8:b8:0f:2a:2a:61:a4:dd:d2:60:
55:51:3a:27:ae:5e:c4:1f:a3:ae:3f:6a:af:ce:f1:0a:0f:18:
94:c5:dc:1b:5f:d2:e8:7f:d6:5d:4c:e4:ae:bf:91:86:34:9e:
fb:c6:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:33 2025 by rpki-client