Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/XeZ8IlB6IPVV4LSGNDeGC0kiKqs.roa
File: XeZ8IlB6IPVV4LSGNDeGC0kiKqs.roa (raw, json)
Hash identifier: UKw6iBIlkTByabNyhikeEq2V7i1ZlGRdFBB4SXJBYEk=
Subject key identifier: 5D:E6:7C:22:50:7A:20:F5:55:E0:B4:86:34:37:86:0B:49:22:2A:AB
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 01856F66C673B0E9E437D8E0B99BAFF9C3C3
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/XeZ8IlB6IPVV4LSGNDeGC0kiKqs.roa
Signing time: Sun 01 Jan 2023 22:14:44 +0000
ROA not before: Sun 01 Jan 2023 22:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211028
IP address blocks: 194.39.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c6:73:b0:e9:e4:37:d8:e0:b9:9b:af:f9:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Jan 1 22:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5de67c22507a20f555e0b4863437860b49222aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:5c:9f:f3:48:28:8a:48:07:81:7f:44:bc:
61:3d:1e:28:15:fd:06:97:1c:96:00:c8:74:df:12:
e0:12:3d:2f:94:f7:d7:0f:a1:dc:3b:a3:3a:16:18:
fa:10:2b:9d:ff:4a:f8:ff:22:29:27:07:32:5c:02:
5f:88:ca:c2:bf:e1:b5:2b:b8:17:be:b3:05:39:30:
73:86:6a:f5:a0:e4:fb:a1:0b:c5:92:44:bf:a2:34:
90:09:90:73:04:12:e2:6e:8d:14:6b:fc:d3:e3:7c:
06:8e:f8:19:f0:82:6e:1f:4e:6a:13:45:7d:44:38:
1f:83:62:ac:9d:63:f2:be:03:6b:0e:07:7f:4e:3d:
b3:69:d8:2e:fe:d5:3a:5b:d3:fd:be:b5:25:76:5c:
c1:c5:d9:e8:0e:2c:7c:9a:b1:2f:74:6c:97:1f:53:
86:45:de:fe:a8:1b:98:18:9d:2f:8e:20:b0:48:d0:
46:cf:ca:7f:20:13:a8:5f:48:f4:c1:93:2f:e2:a6:
5a:cf:a1:b6:15:a6:08:f6:1d:5a:87:a5:8f:37:ad:
c8:0d:37:6c:93:07:12:46:f6:cd:f2:72:1c:ff:48:
bc:3d:f5:ae:5e:c1:22:ef:fb:b7:d2:09:2b:8d:28:
7d:d8:95:fc:56:b3:b8:52:a8:40:c5:7d:64:47:49:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:7C:22:50:7A:20:F5:55:E0:B4:86:34:37:86:0B:49:22:2A:AB
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/XeZ8IlB6IPVV4LSGNDeGC0kiKqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.108.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f7:67:72:13:32:b0:13:e5:4b:4a:3a:55:8f:81:3e:de:2a:
e0:f3:c4:76:1f:4f:70:5c:08:e6:50:ff:3c:7a:79:0c:5b:6f:
a0:6f:4d:0e:2d:39:dc:b0:4f:75:31:1c:67:3a:31:44:c2:1e:
2a:33:d4:a0:87:30:97:a0:00:20:55:2a:d8:47:a2:2a:41:32:
78:09:a7:72:c2:e7:6e:d9:ff:aa:70:95:86:de:95:c1:ca:55:
83:03:d0:e4:d7:ab:b3:f3:64:f5:34:a0:4e:45:00:53:65:2c:
46:58:12:ab:99:d2:6f:71:af:92:1c:43:dc:21:90:b1:86:a5:
0e:6a:fa:40:96:d1:bb:db:8f:2c:d3:a0:1f:0c:67:57:ca:1e:
c8:d8:bc:bf:8e:dc:7a:b3:6f:ab:92:e5:80:ba:d0:12:bd:78:
a3:99:da:9b:26:3c:ba:cd:40:31:e1:d4:ac:8c:98:86:10:92:
5e:dc:5e:ad:ab:dc:fa:6b:3b:5e:f6:68:53:fd:cd:14:3f:a3:
25:66:4a:b6:10:bc:1e:c4:cf:47:bc:61:90:44:51:76:69:bb:
bd:26:71:41:c0:34:8f:b3:21:00:54:ce:83:de:12:48:97:3e:
ba:20:2c:0e:b8:c4:c6:44:03:be:15:60:fd:44:af:f2:28:80:
49:a6:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:33 2025 by rpki-client