Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cxZHfQ5G2asYWp9oK7eVzAJf0D0.roa
File: cxZHfQ5G2asYWp9oK7eVzAJf0D0.roa (raw, json)
Hash identifier: MNaYNHnIWaI6k6Vav8KbB0JFWq4RLSNpnfxjul+5sh8=
Subject key identifier: 73:16:47:7D:0E:46:D9:AB:18:5A:9F:68:2B:B7:95:CC:02:5F:D0:3D
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 444A9F17
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cxZHfQ5G2asYWp9oK7eVzAJf0D0.roa
Signing time: Sun 13 Mar 2022 10:50:14 +0000
ROA not before: Sun 13 Mar 2022 10:50:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56547
IP address blocks: 79.127.8.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145741079 (0x444a9f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Mar 13 10:50:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7316477d0e46d9ab185a9f682bb795cc025fd03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:df:07:f4:71:de:4a:f9:c5:50:14:23:a0:
ae:a0:e6:7e:ec:75:f1:c7:c1:04:d5:ad:72:1d:dd:
1e:30:3b:e9:9f:06:aa:02:c0:80:07:3a:15:10:f7:
bb:b0:95:30:4f:8a:fb:3f:1f:b2:7a:12:36:4e:bb:
bc:da:a1:c8:c6:ad:08:f9:a6:be:7d:57:38:9f:06:
49:67:c4:aa:27:b0:c4:76:db:89:e0:7a:68:d4:18:
6a:c1:ae:99:27:85:3b:f5:d9:4e:7a:70:a5:3d:ea:
24:2d:f3:c0:5a:43:d9:5e:d6:b4:9b:57:bb:85:c2:
b2:b2:d3:7d:37:bc:fd:16:23:31:07:72:0d:2b:0e:
d9:b6:9e:7a:02:c3:ac:6b:27:d8:9b:35:81:53:d3:
b5:c5:bd:b9:b2:38:42:84:db:13:51:95:70:d9:c3:
71:1b:c7:2e:f8:6c:42:4b:54:e0:b5:5c:87:88:87:
3d:1d:38:24:39:7e:0b:65:4f:1c:5e:2b:f8:08:b9:
98:bb:71:4b:2b:c0:62:42:e1:87:a0:94:18:86:02:
ac:21:ee:c0:31:cd:d8:15:e4:74:4f:12:67:21:0a:
e2:23:66:e7:c3:bd:cd:50:3e:85:20:73:d6:cf:79:
ea:61:55:51:13:29:e4:30:33:19:2d:03:8f:2c:56:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:47:7D:0E:46:D9:AB:18:5A:9F:68:2B:B7:95:CC:02:5F:D0:3D
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cxZHfQ5G2asYWp9oK7eVzAJf0D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.8.0/24
Signature Algorithm: sha256WithRSAEncryption
92:73:e0:4c:97:54:96:0f:03:75:18:74:ea:68:ae:a4:26:f4:
cb:71:05:16:1b:8e:13:8e:8d:af:41:c8:1d:e5:b1:0e:bf:95:
71:94:37:63:67:f9:c3:6f:5a:61:2b:64:19:57:ea:88:c6:05:
5d:0d:2c:25:0a:5f:c4:6c:ad:e9:c6:1a:6a:6b:99:9a:b3:2d:
aa:93:bd:7f:bd:d6:0b:30:e1:d1:69:2f:a8:cb:af:22:49:93:
76:73:6f:af:4b:9b:d8:7b:87:8f:a7:0a:0f:a7:bc:81:c8:d6:
6a:8f:e2:6c:25:bb:91:4a:c9:2d:9f:72:e0:4f:22:89:83:e6:
ca:d9:25:6b:99:9e:5c:20:ca:8e:93:01:4a:5d:a3:5a:5b:0a:
cc:c8:d1:7b:35:0c:95:78:32:92:b5:f9:0c:9d:35:fc:50:51:
78:5d:bf:f6:6a:5e:47:e0:00:6c:f9:cb:e1:6c:b4:90:a7:2a:
41:3a:08:46:e2:e1:9d:29:90:cc:69:90:ef:28:92:89:15:23:
cc:bd:2f:14:48:73:ae:d1:2f:7b:4e:2c:1d:11:50:01:cc:0b:
2c:70:99:70:36:bc:9a:d9:4c:7e:98:09:6d:53:e7:88:8f:dd:
36:1b:06:c5:44:ef:0c:20:0d:a6:64:76:a0:c9:45:1f:e4:3d:
32:a3:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:57 2024 by rpki-client on console-ams.rpki-client.org