Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa
File: XBJJ4Y89aEDntRXdKMskKthAOug.roa (raw, json)
Hash identifier: xUi9Qn7eouUMd4sLEXc4Y4OIu/KHnc0QXS7qMFlBY8M=
Subject key identifier: 5C:12:49:E1:8F:3D:68:40:E7:B5:15:DD:28:CB:24:2A:D8:40:3A:E8
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 1B5DD15B
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa
Signing time: Sat 01 Jan 2022 10:56:01 +0000
ROA not before: Sat 01 Jan 2022 10:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59413
IP address blocks: 37.110.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459133275 (0x1b5dd15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 10:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c1249e18f3d6840e7b515dd28cb242ad8403ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:5b:85:79:7d:e1:53:ca:d0:b7:9b:66:c2:
9e:52:3d:2b:2a:f6:c1:50:e8:b5:1e:25:0d:1a:56:
0a:9f:3d:ff:d6:c9:6f:01:d7:be:c2:c4:f2:42:46:
a7:90:90:e0:30:67:e5:0d:52:5d:07:a5:81:f1:ed:
2b:31:b1:04:af:ea:de:26:2b:aa:a5:ca:88:c3:a3:
e9:2a:a1:83:52:64:e0:e7:aa:7f:9e:eb:6d:a7:58:
1a:f4:08:1c:59:7f:17:37:05:99:63:cd:27:b1:09:
59:7c:b5:8c:56:6a:f0:da:45:51:4a:83:a1:23:14:
40:d8:5c:28:a4:83:35:51:a1:90:9c:c8:ec:e4:cf:
36:39:27:a7:f5:b9:33:db:4e:49:c2:0d:5f:51:73:
54:5c:a5:fe:e5:18:48:c3:62:9a:bc:02:1f:65:ee:
1d:f3:f8:71:b9:9c:68:14:eb:4d:96:a8:12:22:37:
6b:29:ee:f9:22:e3:88:76:fe:d3:e4:f0:d2:e6:1e:
b1:eb:9b:91:ea:10:b0:86:10:82:34:0e:2a:84:be:
1d:a9:42:8f:ba:eb:d0:f3:1e:f0:93:98:9f:c8:af:
a6:71:55:63:2a:de:14:41:14:0b:c1:08:0c:e0:95:
dc:36:b5:3e:12:e5:de:51:c9:65:1c:e3:af:59:0d:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:12:49:E1:8F:3D:68:40:E7:B5:15:DD:28:CB:24:2A:D8:40:3A:E8
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XBJJ4Y89aEDntRXdKMskKthAOug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.192.0/24
Signature Algorithm: sha256WithRSAEncryption
39:98:25:01:78:35:fb:bd:e1:34:6c:52:8b:61:2f:ce:eb:7c:
b1:51:0b:a9:5d:f7:b7:be:7c:cd:cf:a3:ef:35:2c:cf:9e:32:
e9:c7:5b:6a:96:1a:75:98:af:3f:c1:84:1c:c7:af:92:22:0c:
c2:92:5f:13:1e:9f:1d:89:ae:37:4e:93:a2:b8:35:04:1a:97:
1a:16:1b:dc:03:f8:dc:64:2d:f0:ba:e6:76:2e:54:40:07:62:
19:fb:cc:1a:56:cb:61:fd:b1:89:87:ea:e2:3a:99:8b:cd:57:
bf:b6:72:52:a4:36:a3:58:d9:f1:57:05:df:8b:6b:19:31:ba:
54:1d:42:44:bf:cc:c9:88:57:53:80:3f:9a:b6:a1:26:17:3f:
68:99:42:fa:20:1a:ad:9b:ca:e2:07:22:0f:32:66:36:b4:e6:
ab:0f:67:11:c0:62:0a:17:f2:d9:21:c8:ae:02:da:d0:6c:8e:
83:1b:e0:9d:41:58:c9:e6:7a:e5:f9:d6:6d:08:77:4e:51:98:
4e:ba:f4:d3:bc:d4:02:f1:32:81:d8:8c:84:32:40:0a:bd:7c:
1e:b3:17:3a:19:c9:b8:f4:8c:2e:31:45:b6:03:a6:3a:b8:df:
18:7c:06:02:cc:63:bc:68:82:40:be:13:9f:a2:e1:46:4e:3e:
da:7f:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org