Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa
File: xXcMg-3JzCYohPHE5GllupJlLq8.roa (raw, json)
Hash identifier: F5q5wLqzYGqPu36A4vuTxPsnwJhfKS5vL3vAc2ZzlT0=
Subject key identifier: C5:77:0C:83:ED:C9:CC:26:28:84:F1:C4:E4:69:65:BA:92:65:2E:AF
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 02078A17
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa
Signing time: Wed 23 Mar 2022 13:02:02 +0000
ROA not before: Wed 23 Mar 2022 13:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 84.246.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34048535 (0x2078a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Mar 23 13:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5770c83edc9cc262884f1c4e46965ba92652eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:b7:6a:01:64:d8:0d:b1:24:a0:12:0a:74:
22:61:fd:7c:1d:ad:c6:92:95:be:ec:b7:8b:49:bf:
20:ab:de:ba:89:b8:cc:33:ad:f9:f3:33:30:bb:07:
db:eb:6d:d5:92:96:00:46:db:a8:f2:92:36:9a:8b:
07:fc:fe:b5:18:f7:3e:2c:8e:02:96:28:85:25:cf:
b9:a3:70:f6:be:1b:0d:84:7f:a5:45:f8:5e:2b:a0:
0e:9a:da:3a:5c:80:80:18:eb:08:15:4a:21:76:a9:
cc:5a:06:20:8f:68:22:01:15:c3:09:b2:0b:74:76:
f0:d6:c0:e2:c5:f5:3d:3e:b1:69:5d:fc:06:38:4c:
e9:70:12:c6:15:06:b9:0c:92:23:dc:6f:8b:69:27:
46:61:47:15:4c:ac:07:7b:7e:cf:66:82:28:a9:c9:
b0:c5:ff:e9:91:b8:23:05:13:63:6f:a9:82:47:bc:
b4:8d:95:16:d4:c7:66:30:c5:4f:7b:76:a3:13:f6:
ae:59:ec:63:ba:a1:59:0b:17:59:33:60:98:96:4c:
50:f5:3a:6b:2b:70:dc:e0:5a:17:f4:74:e4:f9:80:
e8:71:1f:ac:d3:c8:4e:b4:1c:0b:6d:53:92:20:06:
84:04:ee:da:26:12:3f:30:5a:c4:5d:30:92:ee:fa:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:0C:83:ED:C9:CC:26:28:84:F1:C4:E4:69:65:BA:92:65:2E:AF
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/xXcMg-3JzCYohPHE5GllupJlLq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.80.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8c:3b:d7:ba:12:c9:e5:f8:30:c5:bf:89:bd:f5:6f:63:a8:
07:f8:cb:31:40:62:a0:71:0b:e3:da:16:2b:49:2f:c7:31:97:
01:0a:db:9a:03:b7:e8:aa:a5:13:83:2d:6a:d3:86:de:e4:68:
49:c6:88:17:35:41:37:97:f0:5e:0e:a0:92:35:d4:c4:24:ae:
4b:43:bd:07:3d:34:60:f4:3a:7c:d1:70:5e:ac:ed:d5:42:3a:
b0:c9:e9:3a:e3:fe:fe:c1:5b:db:c9:44:cf:06:e5:85:e7:34:
63:44:88:e8:f1:e0:9d:09:3f:02:b8:21:51:33:71:fb:7d:a8:
b2:92:7f:6f:fd:55:0f:1b:b1:02:e1:c0:ca:8a:f5:64:da:00:
81:c5:d3:ab:34:10:04:c2:5d:df:4d:97:c5:82:b3:9d:f1:2f:
64:6d:5b:e8:8a:60:f0:19:1f:3d:2f:7d:5d:32:32:47:82:67:
14:c6:2b:26:6d:d5:7a:05:4b:1b:e6:34:ac:d5:01:7f:07:7d:
6a:05:fa:73:ff:83:00:61:f2:59:f0:07:a3:6f:90:56:9e:9f:
c4:65:10:68:cb:53:f4:e1:8f:d9:94:8b:ac:05:4e:d4:fe:80:
ea:26:d2:4f:ae:73:73:cb:02:15:77:78:8e:f4:14:7e:d9:fd:
c1:da:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:00 2025 by rpki-client