Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/XxHg3JWSBs0tI2EA00E7b6btHo8.roa
File: XxHg3JWSBs0tI2EA00E7b6btHo8.roa (raw, json)
Hash identifier: K6/hYBIXRIbgO8q6C1bGuqe+QsOEDsYHQEbhnurp0wc=
Subject key identifier: 5F:11:E0:DC:95:92:06:CD:2D:23:61:00:D3:41:3B:6F:A6:ED:1E:8F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018855C837A9B8BD57E3B89D12133D0DD5FB
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/XxHg3JWSBs0tI2EA00E7b6btHo8.roa
Signing time: Fri 26 May 2023 01:59:24 +0000
ROA not before: Fri 26 May 2023 01:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201671
IP address blocks: 194.28.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:c8:37:a9:b8:bd:57:e3:b8:9d:12:13:3d:0d:d5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 26 01:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f11e0dc959206cd2d236100d3413b6fa6ed1e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:f3:8a:14:50:b8:a1:18:6d:24:5c:d8:f7:
a7:39:d0:61:3b:fe:72:40:d6:71:da:fe:f3:27:8a:
a9:b8:d2:62:88:02:73:2b:18:f6:f4:93:b8:8e:08:
e6:90:56:1c:29:c8:6f:e3:c3:86:55:d5:96:43:d4:
ec:7c:80:d1:ab:f3:38:6c:ac:8f:60:2b:4c:86:35:
60:97:7e:21:d3:9c:cc:d1:5f:41:36:69:c8:ce:99:
b8:95:7b:f1:70:d2:52:66:6a:b6:fa:90:06:a9:4e:
e1:b1:a5:bd:6a:6c:ee:3f:bb:3e:10:18:eb:9c:21:
b9:55:d9:ca:cd:e3:3e:99:fe:12:42:7c:25:d3:d9:
c6:85:0d:56:73:d4:5f:58:61:c0:a7:12:67:1f:c3:
84:88:b5:28:26:3c:c5:c6:69:9f:2a:83:45:6c:73:
ea:3e:65:bd:9e:42:3d:e0:ed:bd:11:0e:15:ec:e1:
13:5b:5f:16:74:b0:1a:2e:d5:2f:b1:2d:a0:1b:1f:
0f:66:64:3b:7f:a8:6c:de:56:d3:c3:7a:94:08:87:
d7:e8:6f:4b:4a:48:ef:1f:4e:92:e0:a3:a3:c6:1f:
de:26:41:72:9c:df:bb:1a:4d:4e:07:54:59:64:b3:
5f:21:bd:8b:a7:06:91:87:2f:1f:0d:ef:21:93:f8:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:E0:DC:95:92:06:CD:2D:23:61:00:D3:41:3B:6F:A6:ED:1E:8F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/XxHg3JWSBs0tI2EA00E7b6btHo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e9:c6:b9:e5:6b:f3:94:97:69:2d:ef:ed:b6:0d:47:2b:98:
70:0a:f7:59:b7:fe:92:ef:56:d2:b9:07:4b:8b:4a:5b:96:7c:
42:e3:0f:be:4c:5a:d8:cb:e2:90:ac:3c:08:97:69:b8:8b:b1:
c3:f0:af:13:93:bd:ab:78:18:53:91:cd:00:2a:0e:6f:ad:99:
ab:07:41:e4:e9:36:11:23:8d:21:f5:25:8f:d2:33:27:8d:b1:
15:60:ef:f5:5a:61:40:9e:72:6b:18:d9:bd:b5:43:c0:03:bf:
b2:88:0d:b3:b5:36:e6:b4:74:50:25:62:de:fe:fb:9a:64:db:
28:74:05:8d:b3:0b:9d:51:9e:ab:1e:d9:0b:30:49:00:1e:e3:
e7:3e:fc:ff:9d:de:3b:7e:c1:89:31:20:70:54:d2:34:df:be:
40:83:58:95:a2:6a:45:91:39:d6:4c:b5:dc:b4:f8:c4:60:56:
16:fd:6e:65:63:3a:b9:f3:70:8a:77:22:ce:92:bf:e6:6e:5b:
d6:12:71:b0:a5:23:3d:59:1e:b2:0b:f1:2d:ec:40:71:81:ec:
94:61:86:0d:54:18:0b:f3:2c:f1:74:01:f0:c5:37:cf:5f:7f:
e9:ba:86:2d:78:d0:29:d0:85:7d:82:7d:ea:2d:8d:14:61:d7:
12:07:1f:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhVyDepuL1X47idEhM9DdX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwNTI2MDE1OTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjExZTBkYzk1OTIwNmNkMmQyMzYxMDBkMzQxM2I2ZmE2ZWQxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmjzihRQuKEYbSRc2PenOdBhO/5y
QNZx2v7zJ4qpuNJiiAJzKxj29JO4jgjmkFYcKchv48OGVdWWQ9TsfIDRq/M4bKyP
YCtMhjVgl34h05zM0V9BNmnIzpm4lXvxcNJSZmq2+pAGqU7hsaW9amzuP7s+EBjr
nCG5VdnKzeM+mf4SQnwl09nGhQ1Wc9RfWGHApxJnH8OEiLUoJjzFxmmfKoNFbHPq
PmW9nkI94O29EQ4V7OETW18WdLAaLtUvsS2gGx8PZmQ7f6hs3lbTw3qUCIfX6G9L
SkjvH06S4KOjxh/eJkFynN+7Gk1OB1RZZLNfIb2LpwaRhy8fDe8hk/hgKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8R4NyVkgbNLSNhANNBO2+m7R6PMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvWHhIZzNKV1NCczB0STJFQTAwRTdiNmJ0SG84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhziMA0G
CSqGSIb3DQEBCwUAA4IBAQAN6ca55WvzlJdpLe/ttg1HK5hwCvdZt/6S71bSuQdL
i0pblnxC4w++TFrYy+KQrDwIl2m4i7HD8K8Tk72reBhTkc0AKg5vrZmrB0Hk6TYR
I40h9SWP0jMnjbEVYO/1WmFAnnJrGNm9tUPAA7+yiA2ztTbmtHRQJWLe/vuaZNso
dAWNswudUZ6rHtkLMEkAHuPnPvz/nd47fsGJMSBwVNI0375Ag1iVompFkTnWTLXc
tPjEYFYW/W5lYzq583CKdyLOkr/mblvWEnGwpSM9WR6yC/Et7EBxgeyUYYYNVBgL
8yzxdAHwxTfPX3/puoYteNAp0IV9gn3qLY0UYdcSBx/o
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:35 2025 by rpki-client