Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/JilHgyHRCYLYqsiN6q_e2pmMBlw.roa
File: JilHgyHRCYLYqsiN6q_e2pmMBlw.roa (raw, json)
Hash identifier: LD5GAwe1auHLwVvpKog76+U8rO4Qxjvi7YUgwrVfYGs=
Subject key identifier: 26:29:47:83:21:D1:09:82:D8:AA:C8:8D:EA:AF:DE:DA:99:8C:06:5C
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 2EB6B9
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/JilHgyHRCYLYqsiN6q_e2pmMBlw.roa
Signing time: Mon 07 Mar 2022 07:21:54 +0000
ROA not before: Mon 07 Mar 2022 07:21:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14537
IP address blocks: 176.113.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3061433 (0x2eb6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Mar 7 07:21:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2629478321d10982d8aac88deaafdeda998c065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:ee:fc:31:d5:68:25:6b:64:21:31:a5:5b:
1d:35:14:dd:f4:ce:3a:00:03:04:78:90:61:79:57:
6c:4a:b1:e4:13:ec:46:ef:8a:d0:81:f0:e3:c6:9c:
ab:cb:5d:72:22:ec:2d:c4:5e:4e:24:2d:fd:14:89:
90:73:bd:f9:da:13:64:57:2d:c5:c1:26:b4:17:f8:
0a:c9:5c:8d:68:f6:29:55:e1:89:79:ca:87:fb:8f:
ee:9c:a7:05:76:7a:93:92:15:6d:54:bf:e1:80:1c:
d9:8e:11:cf:1c:58:3c:e5:ba:28:c1:bd:af:b4:75:
e8:c4:c1:97:de:2c:ac:d6:df:7e:3a:0e:d7:b7:65:
05:ec:26:68:97:8e:0d:6e:35:ba:1c:2f:0d:0d:1d:
91:8f:5a:bb:a8:6b:90:61:a4:29:02:e0:da:3d:54:
b7:00:76:9a:74:8b:c1:a0:19:82:0e:42:4c:5e:b4:
d9:fb:72:e2:32:c5:ec:57:ad:90:5c:c6:63:a1:18:
c4:0e:ee:8a:94:32:40:9e:fa:0f:ab:bd:d9:1a:0b:
58:ae:ac:de:35:0e:07:df:ae:50:c1:75:3c:66:e6:
f4:bc:6d:50:cc:24:00:38:e7:e5:3e:5a:0b:c9:b3:
bb:91:76:a4:4b:de:90:c9:4b:44:cf:40:7b:81:1d:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:29:47:83:21:D1:09:82:D8:AA:C8:8D:EA:AF:DE:DA:99:8C:06:5C
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/JilHgyHRCYLYqsiN6q_e2pmMBlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.94.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:78:a1:8a:d5:6b:4a:a4:e9:14:fb:9f:95:98:bf:7b:bf:
1c:b3:57:c6:6c:86:ec:d1:80:4a:2e:29:ac:8c:29:cb:01:a4:
62:55:e9:9b:43:89:ad:4c:6b:7e:40:d8:ff:44:d1:76:34:d6:
bf:9e:62:e3:b5:dc:bf:28:f8:3d:48:f5:69:50:9f:ea:40:bb:
e4:83:8f:49:d4:72:6a:f5:0a:3f:b1:79:91:45:ca:dc:4e:fa:
ce:48:c3:04:f1:ae:10:bf:2f:c8:4a:db:a9:53:b7:bc:7d:05:
53:94:3f:3c:1f:5f:6f:60:af:38:3e:3f:0c:00:8a:42:ee:d7:
f2:68:79:83:a5:8e:03:8b:14:2c:6a:02:4e:dc:7e:09:26:fd:
58:57:02:24:e3:98:13:f7:f2:91:2b:19:26:c3:89:0e:6a:79:
b1:47:11:5c:01:df:fa:83:f0:f9:04:f5:cd:0f:89:4c:90:c5:
a1:ec:e4:dd:f6:4f:ff:d5:a1:14:17:15:10:74:45:eb:ea:29:
5c:f3:56:9b:8f:2b:08:3b:2b:5b:de:21:2c:62:2b:a8:4f:b2:
38:c5:b4:07:28:87:a6:49:77:2d:a4:17:ea:9e:c2:8a:26:42:
c3:d9:7a:69:6e:67:63:93:d4:73:ab:1e:18:6d:ff:3c:6d:68:
67:d3:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-fra.rpki-client.org