Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/XPzcCoKm06hUWEhqsu7tJjQnMtQ.roa
File: XPzcCoKm06hUWEhqsu7tJjQnMtQ.roa (raw, json)
Hash identifier: t3/Ly2rBOEpxCy8yMJ/FLWju3Uml361SZFZa+beBsp4=
Subject key identifier: 5C:FC:DC:0A:82:A6:D3:A8:54:58:48:6A:B2:EE:ED:26:34:27:32:D4
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 35AA2094
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/XPzcCoKm06hUWEhqsu7tJjQnMtQ.roa
Signing time: Sat 01 Jan 2022 08:55:01 +0000
ROA not before: Sat 01 Jan 2022 08:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211185
IP address blocks: 80.79.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900341908 (0x35aa2094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 08:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cfcdc0a82a6d3a85458486ab2eeed26342732d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:b5:93:ab:13:a9:42:a9:13:ae:8e:00:dd:
85:d0:99:c1:51:19:de:37:66:ce:ad:83:76:84:ba:
00:18:62:7b:b1:42:4a:37:9d:79:a2:ad:a7:1a:3d:
1c:5c:ed:72:82:6e:d9:7f:94:18:0c:f9:79:44:30:
50:6b:22:63:69:1e:6d:79:2e:1c:9f:8a:e8:0b:7e:
f7:23:f3:c0:e3:82:b1:fa:be:14:34:b5:2d:22:6f:
cf:02:b4:84:b3:49:91:b9:c4:38:73:38:c1:d0:41:
50:f1:d8:bb:a6:44:83:fb:ef:b2:ae:a1:9b:f0:b9:
e6:5f:0f:a3:0e:7d:19:7b:70:0e:c2:c2:57:2b:30:
01:10:df:39:57:70:22:67:6f:87:cd:8b:16:be:2b:
6b:b1:87:02:b5:5e:bd:76:f3:55:f5:27:82:aa:9e:
c2:fc:87:a0:87:48:31:6e:21:46:3b:1f:03:69:e1:
4c:5b:d9:19:0e:66:87:24:8e:f2:bf:5b:f4:36:05:
92:82:b7:20:36:56:a3:c5:83:66:92:32:f8:72:83:
37:4f:cf:36:32:cd:15:64:6b:5f:eb:e1:d5:b4:00:
28:22:10:d3:4d:80:c9:fd:7a:5d:57:a3:e2:fc:19:
3e:a4:b0:fd:f2:3b:a0:8d:f9:e9:bd:1c:6f:93:ae:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:DC:0A:82:A6:D3:A8:54:58:48:6A:B2:EE:ED:26:34:27:32:D4
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/XPzcCoKm06hUWEhqsu7tJjQnMtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.253.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f9:a0:f4:00:a6:1d:a6:d8:f6:f4:0f:95:f5:7f:5f:48:d0:
d7:85:38:7e:dc:f6:2b:48:9a:b9:c4:44:57:5d:cf:98:19:17:
f9:a9:ae:98:77:2c:bc:cf:5f:dc:4e:f8:40:87:fd:15:69:66:
dd:be:a4:af:e9:28:07:d7:3c:f2:44:b9:0b:24:1e:67:b5:61:
38:b7:bb:cb:00:7d:30:34:21:25:c2:c1:53:33:9f:61:dc:85:
38:10:54:67:bb:db:bc:0f:9e:6b:ab:57:17:87:99:2a:22:30:
47:51:9f:07:b0:57:47:8b:c0:59:5e:5e:ba:b0:d7:96:25:67:
91:55:c0:7d:9e:b1:51:72:61:77:01:9d:83:10:b2:e9:2b:a7:
41:0c:85:2d:05:a5:42:91:91:87:ed:4c:a7:f3:56:26:dc:dc:
db:c0:f1:de:8f:50:e2:eb:82:b2:c2:d6:8a:30:b2:8a:21:0f:
83:55:8c:5a:8c:84:f1:e9:42:7d:32:11:b1:be:d4:85:49:b4:
53:77:dd:44:86:df:a5:d9:e7:2a:4d:9b:a8:15:ab:c1:6c:00:
00:ae:04:4a:5a:9f:b4:b8:0d:14:7f:28:e8:db:fa:d4:61:23:
f8:c1:96:71:ca:6d:76:6b:24:8f:b5:32:2e:bd:f6:4a:e2:d0:
d5:40:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:41 2024 by rpki-client on console-ams.rpki-client.org