Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/jFzy2MlLWepLhgd-WhanBackOk0.roa
File: jFzy2MlLWepLhgd-WhanBackOk0.roa (raw, json)
Hash identifier: MBnP8y/G47s7LQxQ2H/akzOCQ4rbLqq9GjoUM56LHdU=
Subject key identifier: 8C:5C:F2:D8:C9:4B:59:EA:4B:86:07:7E:5A:16:A7:05:A7:24:3A:4D
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01856D3874955B09BEEE093373B64337CC81
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/jFzy2MlLWepLhgd-WhanBackOk0.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200801
IP address blocks: 77.72.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:74:95:5b:09:be:ee:09:33:73:b6:43:37:cc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5cf2d8c94b59ea4b86077e5a16a705a7243a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:79:d8:b5:a9:dd:a4:2d:3e:a8:80:8a:63:
f7:a9:d8:06:19:5c:c7:23:f0:78:f1:04:de:2e:59:
86:13:e1:5a:24:0f:3f:e6:5b:54:91:3a:d2:9b:61:
cb:01:6b:7f:c2:09:df:2e:a5:61:4a:fc:e0:63:82:
73:d6:5e:f1:31:91:2e:06:c7:ce:03:de:0b:98:90:
12:c4:25:fd:84:a5:90:48:46:27:08:08:ae:d8:a7:
61:66:2d:4a:f5:30:b1:11:ed:fc:fb:fe:43:a7:de:
c7:25:ef:22:e1:3b:f5:9f:10:78:b6:8e:da:83:08:
b5:ac:04:f9:fa:a5:a1:11:6e:a5:26:2d:10:ea:fc:
6e:4b:ba:0d:95:1c:8c:eb:48:06:dc:5a:9c:98:1d:
b5:b0:06:87:b0:34:d0:9e:be:7f:30:5a:e6:a2:3b:
60:93:fb:f4:31:1d:ad:b8:a4:22:dc:4a:28:85:3f:
09:8e:5e:1a:e2:5c:5d:42:31:02:9e:e8:c6:f9:cf:
e4:e4:96:c7:2e:a9:b7:23:c5:a8:9f:29:3e:a2:4d:
36:97:70:82:c1:fe:57:40:bb:8a:47:fc:92:cc:8b:
67:db:e7:37:d2:a3:30:50:13:9b:ae:c1:6a:64:ae:
29:0b:ef:d5:dd:f1:85:ac:73:e4:33:ea:67:3a:49:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:F2:D8:C9:4B:59:EA:4B:86:07:7E:5A:16:A7:05:A7:24:3A:4D
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/jFzy2MlLWepLhgd-WhanBackOk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.223.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:f1:2a:f5:a3:23:19:eb:cf:1b:5f:a9:01:e6:c0:91:54:
8b:9d:66:d1:2a:2b:56:ad:8e:78:f9:b6:c1:7f:dc:63:e4:9e:
34:5e:02:fe:3a:d1:a6:09:e8:d5:66:4a:dd:54:c6:47:9b:14:
ab:01:d4:f6:44:2c:d5:f8:a2:56:58:93:96:e0:b6:17:d9:d7:
3a:9b:aa:bb:fc:93:c8:f7:d4:18:37:50:ce:2c:8f:ea:1f:24:
88:a1:84:e2:da:a8:89:10:fc:65:a6:b6:be:07:19:f3:1f:8c:
8f:05:fc:09:97:ed:88:3b:b6:81:0c:68:1c:f2:df:ab:63:02:
5f:a8:aa:a5:04:58:3e:55:be:25:c4:f7:9f:3f:54:2a:6f:70:
6d:6c:68:43:39:e4:30:f5:71:aa:32:54:78:a3:fc:3b:97:ad:
ee:c4:49:a6:02:6a:aa:14:d1:bb:69:42:ce:95:78:a4:57:b0:
99:15:b2:df:0e:0a:9d:da:32:ef:f9:1b:9a:dc:e1:c8:4a:64:
f8:e2:c8:a0:ea:fb:87:0f:ae:f1:2c:05:c9:3a:b5:4c:48:d3:
77:62:dc:b6:8b:5d:9a:ef:f8:54:26:c2:e2:27:43:95:e0:b3:
5d:0a:c0:58:32:26:20:f6:e3:43:38:e5:d7:24:0b:c5:1d:5b:
ec:05:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:31 2025 by rpki-client