Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/JyGxZtoLz8x1eHNgt7eQBFGa_hc.roa
File: JyGxZtoLz8x1eHNgt7eQBFGa_hc.roa (raw, json)
Hash identifier: mqqYXUQtrJ2vk0FhHwDZYhfPa6Sreq8UcFKNEcLBO5E=
Subject key identifier: 27:21:B1:66:DA:0B:CF:CC:75:78:73:60:B7:B7:90:04:51:9A:FE:17
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 109B41F7
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/JyGxZtoLz8x1eHNgt7eQBFGa_hc.roa
Signing time: Sat 01 Jan 2022 01:53:28 +0000
ROA not before: Sat 01 Jan 2022 01:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29484
IP address blocks: 192.35.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278610423 (0x109b41f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jan 1 01:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2721b166da0bcfcc75787360b7b79004519afe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:28:a0:98:cc:1b:0f:c8:c5:89:3d:9b:76:
0c:0f:51:30:a7:1e:f9:39:13:8f:91:8f:d0:4d:c1:
db:b6:d3:41:0e:fc:a8:57:7f:9f:be:af:c6:0c:d5:
a4:a8:f6:0b:a9:9a:d7:20:56:44:58:05:85:8a:6f:
28:48:4e:10:4a:28:0b:2f:2d:24:60:18:26:0a:e1:
03:84:5a:08:4b:f5:d9:73:84:26:f8:6d:a6:cd:7b:
31:41:df:e3:4d:4b:6d:d1:87:f3:2e:13:cc:f5:40:
25:f9:34:48:ea:fa:f7:06:71:d9:8e:67:e0:d0:37:
95:3b:dd:24:d8:30:d4:51:dd:ea:7b:07:10:49:68:
7b:ed:7a:55:87:cf:e3:df:3e:00:ad:0c:f6:0f:64:
12:e8:bd:dc:fb:58:83:8b:96:64:c7:6b:ea:15:6c:
f0:df:da:fe:65:23:ba:2e:d2:bd:48:45:cd:1d:0d:
82:40:b8:c3:50:7f:c8:4e:f0:25:82:47:5e:2c:11:
b3:34:70:14:16:2e:4f:cc:06:61:1b:4f:0f:42:5e:
c7:03:b3:5f:f4:5f:f5:8b:b3:40:c4:41:9a:f0:bc:
e6:a9:22:22:0f:57:5e:67:05:e6:8d:84:11:ae:e5:
f0:b4:00:35:df:a2:63:19:50:ea:a4:62:34:70:70:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:B1:66:DA:0B:CF:CC:75:78:73:60:B7:B7:90:04:51:9A:FE:17
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/JyGxZtoLz8x1eHNgt7eQBFGa_hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.72.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8f:cd:65:c5:f9:2d:e8:e7:12:de:d7:aa:86:78:91:32:80:
52:b0:26:c2:79:70:01:7c:29:fe:3d:0e:fa:ee:0a:18:ae:b3:
a0:6e:c0:98:dc:90:58:d5:a9:e6:18:ce:e7:86:56:3d:96:4a:
7c:6a:f6:22:40:c0:46:4a:ed:54:86:bc:4a:95:cb:e7:ea:34:
45:a8:6c:fd:d8:2b:da:18:da:c2:2e:3e:5c:2c:d2:bd:89:c7:
86:1d:d4:f4:55:36:1b:d1:39:0a:e7:63:56:c5:d7:1d:47:6b:
2d:e6:3c:f8:54:9a:2a:02:ba:c1:22:0f:34:15:07:f8:4f:23:
0f:55:dd:12:0e:4a:5b:77:9e:ae:36:7d:66:76:69:1f:b1:3f:
35:90:e6:60:08:be:9f:78:bc:99:e2:8b:99:56:a8:18:17:90:
79:6b:97:73:8f:4a:0d:8a:5f:59:7b:3e:0d:92:b0:1c:35:0a:
04:41:98:23:3b:10:ae:a6:48:c0:97:46:0a:d5:68:78:d0:13:
08:fc:98:c4:45:ac:65:c3:2d:c6:6f:e6:4c:cc:a1:33:4c:e8:
02:99:f3:7c:70:c9:18:01:ad:e9:49:b8:d6:15:9d:db:8e:4f:
eb:ff:0c:86:68:50:fd:ae:50:b8:6d:38:48:e9:07:87:88:a1:
55:f4:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-fra.rpki-client.org