Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XneJT_n_d9kDFsNBDPJSWigT5hU.roa
File: XneJT_n_d9kDFsNBDPJSWigT5hU.roa (raw, json)
Hash identifier: HRai/WQiTiT29QD4HAtViDoMpKG9jzZibhsKN0Lo1UI=
Subject key identifier: 5E:77:89:4F:F9:FF:77:D9:03:16:C3:41:0C:F2:52:5A:28:13:E6:15
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0AE67D9E
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XneJT_n_d9kDFsNBDPJSWigT5hU.roa
Signing time: Sat 01 Jan 2022 15:55:02 +0000
ROA not before: Sat 01 Jan 2022 15:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20750
IP address blocks: 77.76.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182877598 (0xae67d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jan 1 15:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e77894ff9ff77d90316c3410cf2525a2813e615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:53:f5:0d:98:fd:63:c7:88:0e:55:4a:26:
f4:6c:15:6d:de:b5:2c:59:f1:dc:2a:1f:9c:36:17:
e9:2a:6f:be:bc:ea:75:75:22:23:72:cb:1b:a2:d8:
fb:40:00:53:dc:f5:d9:8a:e1:2f:db:d0:ab:50:74:
2a:ae:11:01:e9:21:a0:6b:83:1c:60:07:fe:10:fa:
70:b3:82:50:89:11:2c:e4:94:ed:a4:3d:13:a7:46:
f5:68:19:6f:5c:cd:93:c8:66:fe:39:00:f3:f0:46:
ed:79:0e:bc:99:08:33:73:97:9a:4b:c8:2c:4b:e4:
78:dc:92:6f:49:ce:b4:9f:a5:1a:21:2e:87:b3:fe:
f6:0f:2a:35:26:64:65:e8:79:25:1d:d0:3a:d2:ae:
64:8b:78:e7:1a:ea:9b:32:99:ec:d9:d3:ea:13:5f:
d6:37:ed:55:0c:88:d5:3d:da:33:5c:15:c0:8c:d4:
eb:33:c6:1b:73:1b:0e:80:a3:72:58:0f:41:a1:2f:
7e:62:73:b1:5b:ec:f8:1a:3a:29:ab:c1:b1:a5:a6:
a0:7f:df:d1:92:2b:c8:2d:19:74:e2:33:47:c3:e9:
76:a8:a4:62:f4:f3:02:eb:f0:cb:03:2a:5f:f3:96:
09:59:8a:80:48:a8:ae:66:b9:e5:05:1c:45:e9:dc:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:89:4F:F9:FF:77:D9:03:16:C3:41:0C:F2:52:5A:28:13:E6:15
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/XneJT_n_d9kDFsNBDPJSWigT5hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
94:81:f0:da:41:de:da:c4:6b:0c:91:dc:29:27:9f:c6:05:4b:
c6:2c:d1:62:ad:fb:17:16:d8:47:41:5f:93:6a:78:90:ff:24:
64:c1:cd:e8:e9:e6:4f:ba:16:39:2c:e2:d3:45:45:7a:e6:08:
33:76:f1:fd:26:83:29:5b:41:42:71:4b:96:b5:4c:a6:03:10:
b4:f4:c2:41:74:11:dc:25:54:73:4a:1f:d2:7b:8a:25:b5:82:
91:1f:71:cc:bc:17:70:e2:b9:0c:a5:67:36:40:7e:36:06:45:
51:f2:6b:6a:4b:c0:8c:39:e2:75:de:e4:8c:f3:26:2a:82:b4:
eb:fc:c2:d2:1d:41:a6:64:84:ac:a7:05:d7:f5:86:82:19:bd:
b5:a5:80:77:db:41:db:c0:32:17:79:3e:5a:5b:46:74:80:f0:
6e:80:4b:47:5e:85:a1:d8:65:15:5d:3b:f5:14:c6:50:05:56:
d2:00:58:3a:f9:14:3a:cf:f0:9c:15:d1:1e:17:51:95:c8:c3:
b8:0d:91:92:5e:60:92:f1:92:21:cf:87:98:f0:50:ef:5d:70:
bd:46:1a:e1:41:3b:db:ff:e5:f3:c5:10:43:db:5f:7e:7f:e9:
7b:0a:62:00:9d:5b:54:fc:3e:9f:c0:d7:93:2d:d9:97:0e:5e:
7a:62:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:18 2024 by rpki-client on console-ams.rpki-client.org