Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/XT-HkG_52QbAiNoDcKsA_ic7_xg.roa
File: XT-HkG_52QbAiNoDcKsA_ic7_xg.roa (raw, json)
Hash identifier: +bYoV7RNnaWu8sgGLdRdiXFU6Jhx2/CPtvmiCYHJ/U8=
Subject key identifier: 5D:3F:87:90:6F:F9:D9:06:C0:88:DA:03:70:AB:00:FE:27:3B:FF:18
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: DFFD8A
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/XT-HkG_52QbAiNoDcKsA_ic7_xg.roa
Signing time: Sat 01 Jan 2022 04:03:51 +0000
ROA not before: Sat 01 Jan 2022 04:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24971
IP address blocks: 188.215.18.0/23 maxlen: 23
188.213.234.0/23 maxlen: 23
185.25.184.0/22 maxlen: 22
2a00:8220::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14679434 (0xdffd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Jan 1 04:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d3f87906ff9d906c088da0370ab00fe273bff18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:85:e0:d8:72:d6:c7:ba:65:81:e9:1a:3f:
8c:49:ac:5b:a4:91:70:ad:cc:45:40:b5:58:2e:e3:
a6:c9:8d:0a:a7:10:e4:55:90:45:2f:63:1f:52:f0:
3c:e6:13:f2:87:64:58:90:d5:bc:6f:b7:a7:31:c7:
9c:a5:50:75:52:ed:61:b5:b7:a7:df:f9:14:a3:4a:
c0:3e:b6:64:91:f0:43:1b:d3:23:ce:2a:6c:d0:32:
53:53:29:6a:a5:5a:eb:9b:fd:03:df:d0:4e:74:a2:
93:18:d1:6a:39:aa:e5:03:c5:25:b1:ee:fe:86:b4:
95:25:30:43:f2:3c:31:7f:dd:33:38:5a:2a:4a:09:
7c:e8:b7:55:33:db:68:32:98:0c:3f:83:4f:b6:14:
e7:dd:91:90:21:9e:b0:28:1e:07:09:f3:aa:21:84:
98:02:6c:be:45:44:59:ed:e8:af:89:d4:5e:9f:25:
79:fc:8b:db:ef:1c:2b:be:07:8a:7b:7e:95:6d:de:
a1:2d:b6:27:36:52:1e:7f:82:d3:4b:e0:83:c5:ac:
db:fe:01:fe:53:1f:3b:5c:ce:6f:b8:9c:b8:fe:d5:
1f:4a:a5:be:5a:1b:3d:9e:60:80:2d:34:f3:0d:64:
06:9f:84:91:bf:7c:19:2e:5d:9d:1f:5c:33:19:ed:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3F:87:90:6F:F9:D9:06:C0:88:DA:03:70:AB:00:FE:27:3B:FF:18
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/XT-HkG_52QbAiNoDcKsA_ic7_xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
c7:6c:9e:40:d3:12:54:6f:fa:42:84:0b:ef:00:3a:25:2e:a7:
98:15:f1:f0:75:65:81:35:09:4c:52:95:fb:98:07:54:bb:6a:
1e:e9:31:29:28:22:dc:e1:25:18:75:a0:68:03:5c:10:58:95:
11:64:69:8c:1e:3c:ea:11:5c:dd:05:70:e5:cf:f2:30:72:24:
75:07:f9:b8:b7:c1:6a:2c:92:25:38:c7:01:57:4f:9e:b5:4b:
e6:79:f1:4e:21:65:e1:38:64:a4:8a:a6:22:8c:f6:d6:0b:66:
dd:47:2e:17:0b:51:61:8d:69:b5:9e:e7:26:f9:36:9d:46:d1:
6a:7d:a4:88:1a:51:d5:dc:a5:dd:50:c2:0e:f3:1b:76:10:11:
9e:80:27:de:9d:26:c7:90:cf:43:22:52:c7:e5:de:2d:bd:e3:
00:68:ff:cd:76:f2:f8:dc:11:93:c8:69:2c:04:9c:a9:8c:86:
64:2d:64:bd:1b:f3:78:17:a9:8a:de:43:ba:e7:59:d2:37:82:
58:c6:a3:33:e4:2a:c3:fb:c9:82:91:02:3e:b4:ce:42:45:a5:
d6:04:d1:f4:34:ae:cb:0f:c5:47:1d:c7:99:2c:14:30:4c:e7:
22:31:e5:d9:a2:e7:82:c1:2f:73:0b:d8:f9:54:72:68:d5:ea:
6e:5c:54:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:59 2023 by rpki-client on console.sobornost.net