Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XXegbjHVxyepGsq7pb9rlt2Ng8Y.roa
File: XXegbjHVxyepGsq7pb9rlt2Ng8Y.roa (raw, json)
Hash identifier: qDfHdhEdAIJw2WskvVi5ZhHo1Es/GKdNMOU3M5xvmL8=
Subject key identifier: 5D:77:A0:6E:31:D5:C7:27:A9:1A:CA:BB:A5:BF:6B:96:DD:8D:83:C6
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 085481CA
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XXegbjHVxyepGsq7pb9rlt2Ng8Y.roa
Signing time: Fri 29 Apr 2022 17:26:58 +0000
ROA not before: Fri 29 Apr 2022 17:26:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 139.28.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139755978 (0x85481ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Apr 29 17:26:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d77a06e31d5c727a91acabba5bf6b96dd8d83c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:1c:98:b8:1e:75:1e:dd:d4:c4:73:a4:97:
d3:8d:34:fd:d5:a8:52:d5:a4:b0:c0:4a:77:95:b9:
db:54:51:89:37:2c:b3:d9:75:62:15:fc:f1:c1:b7:
c6:c6:e0:35:34:27:d4:95:65:68:ca:67:a7:28:ba:
1f:67:16:52:66:8b:d3:6a:cb:91:9b:65:d8:19:c7:
4c:f2:ad:ea:6b:b4:e1:8e:8d:4d:41:d0:28:77:25:
4b:9f:66:0f:0e:50:30:13:38:d5:8a:11:fa:28:49:
1b:cc:47:ad:29:5e:b0:c4:1f:79:a5:d0:fd:2e:36:
43:0d:5d:83:31:0b:db:e8:c6:09:98:82:79:7a:64:
f6:93:d0:ec:3f:52:8a:30:e3:84:b5:e8:f9:53:d1:
61:76:ce:37:1e:11:4e:3c:7a:2d:f2:91:bb:4b:76:
a0:ad:35:7a:48:86:f1:92:88:fa:1c:c7:78:9f:11:
9f:2b:9b:ed:cf:29:5c:21:03:4c:7e:de:67:8b:b7:
80:28:65:5f:ee:f8:04:10:54:20:bf:94:02:1c:3e:
91:82:04:f6:e2:9e:b5:ee:6b:d5:66:96:df:98:19:
48:44:b3:fa:ad:94:ce:1b:d5:83:0d:1a:76:e5:96:
bd:64:b1:0e:b7:fd:34:32:a6:5d:00:d9:b8:2b:84:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:A0:6E:31:D5:C7:27:A9:1A:CA:BB:A5:BF:6B:96:DD:8D:83:C6
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XXegbjHVxyepGsq7pb9rlt2Ng8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
23:97:b7:0e:74:d4:b6:73:cc:0f:88:b1:e4:c9:c2:b8:f7:17:
9e:de:c4:6b:f5:a5:5c:5e:cf:a9:9a:bc:5c:16:fc:84:37:72:
5a:bc:27:e4:b5:8a:b2:98:1a:78:07:d2:08:5e:25:44:39:2f:
f8:11:c8:7f:33:49:2e:77:88:6c:44:1f:b0:64:65:b5:2f:ed:
c1:88:f7:7d:ae:b0:10:4b:52:fe:11:72:e4:c3:2a:18:02:46:
8b:77:99:3a:8f:87:64:6c:0b:f7:b9:89:3c:70:d3:fb:b4:72:
1e:1e:e4:55:ca:d5:6d:8a:16:52:de:b9:f3:98:4e:6f:d4:70:
39:6f:c0:da:d9:32:f5:e5:bc:61:bd:a7:81:cd:2e:b8:bb:3c:
4e:43:b8:59:e7:c7:f4:5f:4f:40:47:75:1f:ca:92:95:84:8d:
14:4c:3b:b8:cd:b6:5e:5d:0d:8a:b5:a2:ef:fa:64:02:ac:25:
d1:e4:25:05:46:02:60:37:6a:2e:a9:b0:72:d6:62:2c:9e:9a:
ee:53:22:33:9a:b6:90:96:f7:fc:4a:42:08:62:f7:a5:8a:62:
6d:3e:ea:40:f2:7e:c8:9d:e4:1e:20:32:19:1e:37:6a:4a:b4:
5b:0e:53:64:8c:0a:40:7d:d0:30:e0:4b:ac:2b:14:a8:33:51:
b9:ae:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org